Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File: xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier: ECrbSULhYP6G9qIPb0l/PBsxoC73YfcxDmDCVVAsMHA=
Subject key identifier: BD:4C:4A:D5:2A:E0:33:CE:77:2B:F1:53:37:76:D7:46:F9:B3:20:1C
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer: /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial: 019D39411432628399892952C9B778BCD948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number: 056A
Signing time: Sun 29 Mar 2026 11:00:59 +0000
Manifest this update: Sun 29 Mar 2026 11:00:59 +0000
Manifest next update: Mon 30 Mar 2026 11:00:59 +0000
Files and hashes: 1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: EevqlWFHFRMcPyEZnGsp/YI1zqh8L7+6/ztsxdEahCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:14:32:62:83:99:89:29:52:c9:b7:78:bc:d9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Validity
Not Before: Mar 29 11:00:59 2026 GMT
Not After : Mar 30 11:00:59 2026 GMT
Subject: CN=bd4c4ad52ae033ce772bf1533776d746f9b3201c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:5f:e3:fe:cb:be:70:bf:8a:15:95:b7:68:
4d:4c:5d:53:50:1c:ce:08:cb:87:60:5b:ee:7c:c7:
41:cc:f6:db:94:9e:43:86:90:d0:7b:a8:45:34:cc:
6d:56:53:e5:00:a1:ac:ca:69:3d:10:6e:d9:3f:bd:
6c:49:9c:6a:6a:10:42:64:a7:1f:2e:a5:94:ed:26:
d4:14:9a:b0:73:b3:28:3a:dd:ed:07:99:e8:be:82:
16:96:b3:6a:8f:7d:95:12:a0:f2:9e:47:a3:19:f0:
1f:51:4a:74:29:21:e9:26:87:7d:6d:07:e9:54:8a:
93:ac:fd:38:2c:7c:92:e4:05:2d:5d:e0:ce:b4:ed:
78:2f:73:12:78:33:cd:02:b4:df:2b:fe:d0:b4:c0:
5b:a1:f8:1c:e8:97:4a:fc:bb:fd:1a:b3:20:a7:db:
3b:2f:54:75:52:b8:92:c8:a9:9c:dc:5c:e7:3b:71:
ea:58:b7:ab:80:17:8d:ee:17:cf:73:66:8f:61:97:
a8:65:dd:b8:7e:b3:9d:37:df:54:f7:c6:cd:4b:7d:
17:66:85:50:5b:61:d0:27:a9:14:20:10:6f:a5:36:
4c:b4:b6:8a:3e:b9:7f:c6:1f:06:a4:70:48:12:b7:
1c:f4:56:ea:5b:95:c5:a2:67:27:4b:22:fa:48:8f:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4C:4A:D5:2A:E0:33:CE:77:2B:F1:53:37:76:D7:46:F9:B3:20:1C
X509v3 Authority Key Identifier:
keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cc:ec:1f:b2:15:e3:f8:9a:f3:9d:f3:a4:3d:a7:37:9b:47:
78:5f:18:58:a1:5f:ed:6a:76:92:59:76:92:4c:7f:94:05:94:
7d:4b:49:b5:44:e1:7f:bc:e0:34:31:bb:3a:15:cb:f5:c7:f5:
32:b6:60:ff:75:7d:dc:e3:9f:7a:2d:cf:3a:45:54:37:f0:59:
c9:cb:95:16:b9:ce:4c:b9:e3:fc:0d:ae:fb:33:b2:8b:7d:1c:
5e:80:f6:7b:a4:b5:af:bf:2b:24:5d:fc:43:b4:dc:7e:b3:1b:
89:9e:21:98:eb:cd:20:1a:27:61:a3:28:2b:7c:06:b2:d1:17:
ee:ee:05:47:0c:c2:4d:0a:49:24:6f:1b:3f:02:95:03:82:1a:
4a:70:80:45:21:84:1c:04:62:2d:03:0b:ee:74:a2:60:4b:15:
a1:ca:11:38:03:a9:8b:c3:b7:90:77:2d:65:ff:48:51:b7:63:
cf:55:8e:6f:b6:c0:3d:e0:d7:04:c4:f4:77:79:3a:bc:a3:51:
25:9b:63:85:e9:04:5c:34:c0:3a:b3:06:4c:bf:1d:89:74:bf:
a1:70:0a:a4:15:0b:b4:4d:b8:0c:1d:38:6a:bd:35:24:ef:03:
49:4b:52:31:ba:b2:15:8a:e5:b9:40:51:d1:2f:2b:8f:6f:a3:
46:ba:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:21 2026 by rpki-client