Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
File: x0oNp1cJLW7M99lO3idYdToc14Q.mft (raw, json)
Hash identifier: qeb0kcv0UmKOOsk6kP09M7AN6UVP3DOO2Or2vL79I6Y=
Subject key identifier: 1F:D9:F9:60:39:61:55:E1:30:78:21:78:B9:28:63:D2:11:56:8E:00
Authority key identifier: C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
Certificate issuer: /CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Certificate serial: 019D38D34CD11D34631F48FFC5B3030D17EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
Manifest number: 1787
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: x0oNp1cJLW7M99lO3idYdToc14Q.crl (hash: ipddaFfhXjbsT5I1v/AO90go2kDEV0+OU+n5DG4YmeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4c:d1:1d:34:63:1f:48:ff:c5:b3:03:0d:17:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=1fd9f960396155e130782178b92863d211568e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f2:bb:b1:d0:d1:9e:9c:7a:e4:61:ef:7b:4f:
c5:9d:67:7a:32:d2:33:98:0b:3f:37:0f:5f:f5:5b:
53:fb:bf:21:d2:d4:ea:24:45:d8:dc:06:25:07:4b:
19:6d:e6:1e:c7:5b:7c:c5:59:8a:dc:21:81:10:27:
a6:e3:c5:68:2d:c3:f6:8b:cc:b1:81:56:ce:f5:71:
e3:08:2c:fe:c5:21:ca:f0:56:40:18:64:33:5a:54:
00:35:5f:4b:e1:4c:99:09:e4:5d:c0:68:d2:17:7d:
9a:f9:5b:c3:68:0e:ba:39:43:35:6d:8b:cc:2c:83:
79:2d:09:93:bc:96:bc:69:65:9e:c8:15:1f:22:79:
73:ee:fe:87:65:16:16:f4:65:40:db:5c:ef:fa:4e:
02:71:a5:89:07:3c:25:4b:44:cb:f9:b1:fb:67:33:
db:43:60:b2:52:0e:04:56:0e:10:26:61:82:d9:5d:
5b:bf:d8:cf:23:61:a1:48:c6:e2:e1:d0:0a:11:80:
39:13:65:36:ce:cc:71:ae:aa:a4:00:32:95:87:33:
da:71:b8:ab:0c:26:76:9c:9c:0e:a5:4f:b7:c8:80:
6f:b9:ad:c7:aa:37:7f:77:09:83:82:b1:f8:44:8f:
7b:ee:11:6a:fc:e4:2d:b9:a6:26:d4:24:8c:96:3c:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D9:F9:60:39:61:55:E1:30:78:21:78:B9:28:63:D2:11:56:8E:00
X509v3 Authority Key Identifier:
keyid:C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9f:e6:d4:be:47:12:ff:ae:f2:31:4a:4b:0c:c3:73:86:7a:
64:af:7f:76:25:c7:ef:7a:a8:22:8f:2a:e1:23:e6:1d:a1:fa:
92:e6:fe:0b:cf:75:ce:bb:a5:eb:86:1b:cd:98:54:07:6f:bf:
2d:18:20:0b:a0:71:cd:c5:4f:70:0d:39:26:58:b1:f2:6f:73:
2e:41:fc:af:9f:be:19:61:1e:76:21:aa:97:d8:ed:3c:a1:b8:
d4:28:e9:bb:9d:11:9f:e3:de:be:82:00:ff:2f:ea:44:d5:94:
e4:29:a3:fd:24:95:14:95:3e:b3:70:24:ba:04:75:4e:7a:46:
b3:55:20:29:8a:87:7c:d5:b1:e3:65:af:90:3d:19:3a:1d:9b:
fe:db:a8:de:7b:be:8b:bd:68:ad:ab:37:c5:f5:b0:3d:7b:0e:
01:5a:f9:5c:29:e1:5c:89:22:45:20:de:5d:bf:bf:c7:f3:51:
98:ee:0c:7d:d9:92:0c:00:77:16:8d:75:4d:80:b2:0a:b4:36:
65:f6:8d:f3:3c:78:d7:97:85:a1:dd:76:bc:91:0e:a9:da:c3:
a1:52:ca:6d:95:2a:58:ea:48:8c:98:db:e4:58:e9:34:63:ca:
03:9e:09:ff:e3:0c:64:5e:00:c2:bc:86:09:2e:aa:ab:34:a2:
8e:54:19:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:55 2026 by rpki-client