Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
File: a1xW3Y1JexBoE6IloYFxST7jKoU.mft (raw, json)
Hash identifier: b3XKlbAP2NLCMpLb0I3cUMECybFRQkvTpJb2KtCGBJQ=
Subject key identifier: AD:20:B0:D7:DB:07:26:3F:CE:84:FD:76:F0:C8:79:D1:BD:EA:E2:2B
Authority key identifier: 6B:5C:56:DD:8D:49:7B:10:68:13:A2:25:A1:81:71:49:3E:E3:2A:85
Certificate issuer: /CN=6b5c56dd8d497b106813a225a18171493ee32a85
Certificate serial: 019D3977E48D0FDC2EF5F7F7BB6EEABD9487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
Manifest number: 02D0
Signing time: Sun 29 Mar 2026 12:00:51 +0000
Manifest this update: Sun 29 Mar 2026 12:00:51 +0000
Manifest next update: Mon 30 Mar 2026 12:00:51 +0000
Files and hashes: 1: a1xW3Y1JexBoE6IloYFxST7jKoU.crl (hash: bPKALbEdqLGL9LbivImgTDBskpE+uWpMtwadTySb2K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e4:8d:0f:dc:2e:f5:f7:f7:bb:6e:ea:bd:94:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5c56dd8d497b106813a225a18171493ee32a85
Validity
Not Before: Mar 29 12:00:51 2026 GMT
Not After : Mar 30 12:00:51 2026 GMT
Subject: CN=ad20b0d7db07263fce84fd76f0c879d1bdeae22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:06:31:9d:2f:d0:1e:c4:78:47:6a:16:59:
b9:f3:34:52:a2:5c:f6:79:e4:07:f6:30:af:48:89:
a1:e4:37:43:4f:17:a9:ac:1c:1e:9a:29:5c:eb:65:
b6:4c:af:2c:c7:78:12:a4:03:17:f7:b0:be:8d:32:
34:0f:a8:b3:b5:02:0f:c1:f8:2b:c1:d9:e3:50:42:
c3:af:c2:0f:0d:b9:8a:25:5a:ef:45:0f:b3:7b:84:
5c:47:46:4f:d7:a3:42:b0:c4:26:f1:b7:92:41:9c:
22:d6:b1:5c:ce:f3:1d:61:6f:bf:db:38:1f:c5:8b:
e0:c6:42:0f:58:31:d3:65:01:66:e9:30:db:d2:0d:
5f:11:57:7a:f4:ec:bc:ff:fb:d5:d3:a9:ed:17:e8:
a1:78:7a:b8:76:f8:56:02:c2:b8:18:1f:15:f4:08:
4d:9d:33:76:46:b1:ee:d6:64:5d:71:ef:49:7a:0a:
a3:45:f3:2b:75:ae:7d:44:0f:75:9f:9e:6f:2f:4d:
8f:e7:db:f7:e9:65:1d:11:6a:fe:2c:8f:50:c2:56:
9f:1c:c6:a4:c5:00:24:a5:cb:32:06:14:30:8f:20:
b4:74:61:f5:00:98:ec:f7:10:49:53:a7:e0:b8:1d:
ef:06:bf:86:39:6e:3e:3e:bb:33:cc:54:2d:0e:1a:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:20:B0:D7:DB:07:26:3F:CE:84:FD:76:F0:C8:79:D1:BD:EA:E2:2B
X509v3 Authority Key Identifier:
keyid:6B:5C:56:DD:8D:49:7B:10:68:13:A2:25:A1:81:71:49:3E:E3:2A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f1:1f:b8:96:1e:2e:d1:20:14:dc:6d:06:36:84:25:f1:60:
71:f6:d9:34:ce:c9:36:df:0d:90:0d:8c:7f:b4:df:cd:3c:e1:
a5:94:82:5a:a1:5b:6d:ed:d8:80:0c:3b:62:31:98:01:71:c9:
99:79:79:e8:db:3c:aa:a7:54:b6:cd:45:d6:74:5b:34:9e:a4:
6e:7c:b5:82:0c:8e:bf:c9:3a:cd:51:24:c1:9f:38:32:e6:07:
7d:b9:85:b9:27:fd:7e:be:b4:e5:b4:62:3d:8c:ff:b4:c6:59:
4b:55:59:60:89:e0:28:40:11:cc:a4:7f:fd:68:a3:88:b1:f8:
ee:04:41:91:2c:7b:5f:9c:a3:c7:0d:50:a3:7c:fd:05:a0:92:
e4:a3:f9:50:8f:84:9f:88:77:b3:bd:97:42:b8:54:f5:55:36:
bb:eb:90:7a:9a:1b:32:cb:59:cd:e2:0b:ac:87:37:1f:93:99:
89:ed:8b:b9:11:72:6f:1e:92:77:cc:d5:b5:74:28:93:41:ad:
f1:7a:2b:03:59:92:18:d4:7a:1d:0f:6a:34:24:dc:1d:8a:a3:
40:ab:e0:14:f9:78:ea:2f:ac:56:68:28:63:a1:4d:f1:93:57:
34:5c:e4:29:09:74:f0:7b:32:be:1e:93:72:31:75:15:82:ce:
d5:8f:81:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:08 2026 by rpki-client