Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
File: XTsXLoFhyBzo6VSv01pzsvrQuzo.mft (raw, json)
Hash identifier: 70rHyMipqzAwGgm4NvVH/smQsSdKvTWS8Fl2/hyotKY=
Subject key identifier: B3:5B:7C:9C:AB:62:F2:D5:8B:6E:17:8B:99:42:4C:7C:4D:77:18:EA
Authority key identifier: 5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
Certificate issuer: /CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Certificate serial: 019D3866690985EDDA53498127D777D3EF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
Manifest number: 0B1D
Signing time: Sun 29 Mar 2026 07:02:08 +0000
Manifest this update: Sun 29 Mar 2026 07:02:08 +0000
Manifest next update: Mon 30 Mar 2026 07:02:08 +0000
Files and hashes: 1: XTsXLoFhyBzo6VSv01pzsvrQuzo.crl (hash: kSZki4xZblKkzLQ8Nd+O4O6k8/AZlruZhkswjX3C/Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:69:09:85:ed:da:53:49:81:27:d7:77:d3:ef:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Validity
Not Before: Mar 29 07:02:08 2026 GMT
Not After : Mar 30 07:02:08 2026 GMT
Subject: CN=b35b7c9cab62f2d58b6e178b99424c7c4d7718ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:40:19:51:9a:8f:c9:06:16:0c:83:8e:0c:65:
1f:30:1d:38:bd:ae:5e:10:6d:69:30:1a:53:db:a9:
7c:f6:60:c2:7d:0b:ca:a8:e1:c8:0c:6c:9a:6d:1c:
fc:50:0c:25:3a:08:c1:70:03:36:c3:5a:7b:da:1d:
c1:50:2c:96:2e:27:89:ff:23:d9:3f:fe:05:b6:3f:
f8:b2:34:46:ce:b7:5d:ef:a8:07:94:fb:62:41:92:
bd:14:38:a7:73:02:cd:c4:69:f5:0b:a2:eb:47:dc:
00:67:6b:d3:71:31:50:9c:0a:f9:f9:6f:69:17:b7:
b7:c7:37:65:06:50:b1:99:8a:ca:db:34:77:c1:f0:
c4:09:83:90:58:15:58:62:65:f3:bf:b2:08:c6:29:
d8:67:0c:c2:f1:87:0a:45:cb:54:0e:a2:97:9e:12:
d7:4f:d9:fa:05:ef:c0:ce:df:23:bd:3b:3a:f0:e5:
6a:ab:5d:7d:95:80:74:d4:9d:57:0d:86:3e:8b:6f:
fb:5f:d5:e2:67:51:e5:b1:27:6a:66:cf:e4:8a:58:
09:90:c3:71:c4:f7:d4:8e:44:7f:6d:91:19:b7:d9:
2a:0f:81:e1:ad:da:81:38:ed:c5:99:cf:9c:19:27:
a2:fd:b6:5d:01:b8:10:a3:ea:17:a4:4d:f2:4a:39:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5B:7C:9C:AB:62:F2:D5:8B:6E:17:8B:99:42:4C:7C:4D:77:18:EA
X509v3 Authority Key Identifier:
keyid:5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3a:fc:71:4c:71:95:21:81:eb:80:b1:3c:c9:47:fa:b1:ca:
56:e4:7d:28:7d:55:6c:f3:9b:0e:b1:46:1b:9b:6a:ff:5b:b2:
4d:61:c4:6b:bb:fb:39:74:8d:60:32:87:ed:6a:d6:be:c2:68:
64:4f:c7:d8:58:75:45:63:32:b0:8d:50:93:9c:e1:f7:c2:12:
39:19:db:3f:3b:ef:d4:9d:6d:42:47:ee:d8:3f:d7:aa:95:fa:
29:46:19:24:0f:70:2b:64:d4:d9:93:2f:a3:38:c1:20:f1:a3:
81:30:8f:9a:7c:20:3f:0e:4e:9b:38:1e:38:70:d7:0b:10:cc:
9f:af:23:48:88:05:0b:2f:a5:7d:9b:dd:c2:17:d1:5f:43:4e:
7c:c4:f6:04:3c:2d:d8:c4:5e:b5:80:ea:70:83:f5:9e:60:44:
3f:9e:9b:5a:9c:25:94:6c:03:cd:29:90:af:aa:bd:fb:48:ae:
49:44:01:22:3d:3d:d7:e7:27:ab:a6:51:6d:46:aa:df:c4:5e:
0e:bb:4b:bd:5c:26:b4:ea:e5:09:fd:37:f8:b6:d4:61:74:6f:
d6:bf:c8:ea:00:8c:32:8b:c0:99:e7:38:9b:eb:99:d0:ab:f5:
f8:d6:1e:27:4c:e5:c9:b0:7f:ac:30:d1:88:96:7b:5b:d2:69:
07:c9:2a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:46 2026 by rpki-client