Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft
File: xLCiTzhOiW3lHlg149KEYHtJxZE.mft (raw, json)
Hash identifier: vXwXX3hYU+6bBtuUyLanY8qQSwUZh4SFat7HQP6mBFU=
Subject key identifier: 64:4B:AE:13:31:CA:F4:FF:BC:89:A6:DD:CA:18:63:B7:53:92:3F:2D
Authority key identifier: C4:B0:A2:4F:38:4E:89:6D:E5:1E:58:35:E3:D2:84:60:7B:49:C5:91
Certificate issuer: /CN=c4b0a24f384e896de51e5835e3d284607b49c591
Certificate serial: 019D38659E49D8A2564A6A789A05AFD2D5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLCiTzhOiW3lHlg149KEYHtJxZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft
Manifest number: 0363
Signing time: Sun 29 Mar 2026 07:01:16 +0000
Manifest this update: Sun 29 Mar 2026 07:01:16 +0000
Manifest next update: Mon 30 Mar 2026 07:01:16 +0000
Files and hashes: 1: xLCiTzhOiW3lHlg149KEYHtJxZE.crl (hash: nOeTkl4Ttr0xfLbOYj3qKnFXHenGiJTfaDGdbD74/nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLCiTzhOiW3lHlg149KEYHtJxZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9e:49:d8:a2:56:4a:6a:78:9a:05:af:d2:d5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b0a24f384e896de51e5835e3d284607b49c591
Validity
Not Before: Mar 29 07:01:16 2026 GMT
Not After : Mar 30 07:01:16 2026 GMT
Subject: CN=644bae1331caf4ffbc89a6ddca1863b753923f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:bf:4d:c3:ad:9b:4c:3c:59:d2:02:4f:88:
95:a0:67:19:e8:db:06:5b:d3:2a:24:ad:ff:aa:10:
9e:7f:39:1a:2b:e8:eb:43:96:86:a0:b2:54:23:8c:
de:7e:e5:48:4c:f3:00:b6:46:60:ee:dd:72:3b:a6:
4c:da:2f:30:5f:34:41:7f:52:fc:31:d3:d6:5b:ff:
1b:f6:52:5a:09:2d:50:a6:cc:3c:77:6b:8f:c5:41:
e4:67:a6:4d:11:ef:59:e0:2b:8d:a3:ac:be:17:27:
ca:a2:81:a5:09:71:e7:47:fa:26:42:e4:f0:78:78:
50:2d:e5:65:e9:71:cb:f6:3e:ac:dc:64:00:c4:84:
2a:eb:45:57:c7:9a:f9:44:21:29:b8:98:44:5f:ab:
7c:de:0b:65:3e:fb:61:66:03:20:0f:75:6e:b1:b7:
fe:69:ca:74:4e:e8:aa:59:4a:73:38:73:8c:3c:86:
dc:d5:a8:4b:f7:a8:e0:36:40:98:3e:18:ff:62:02:
26:f3:e1:9a:5a:a1:b3:a5:ff:be:2d:2d:b4:79:87:
f5:21:51:e6:c6:37:ef:26:b3:e2:7b:7a:e0:81:ea:
f0:bd:08:f6:35:ae:e8:4e:3d:62:6f:03:6c:5c:76:
06:2c:26:37:28:e8:cf:6f:f0:75:13:a7:80:e3:ad:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:AE:13:31:CA:F4:FF:BC:89:A6:DD:CA:18:63:B7:53:92:3F:2D
X509v3 Authority Key Identifier:
keyid:C4:B0:A2:4F:38:4E:89:6D:E5:1E:58:35:E3:D2:84:60:7B:49:C5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLCiTzhOiW3lHlg149KEYHtJxZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c4:f0:50:3d:63:de:3e:07:a7:a5:7b:66:37:eb:ed:f3:74:
38:c5:cc:3a:c1:e7:5d:02:93:21:5e:c3:85:5e:06:60:0c:4e:
38:97:ae:26:0a:89:18:a7:d1:81:67:86:69:1d:2b:bd:ce:71:
1b:7e:f8:9b:c1:59:53:c0:25:9a:90:a6:2b:b2:2a:29:26:96:
85:2d:1c:62:96:d4:fc:bf:51:8d:e2:19:b2:af:d6:4c:be:cd:
e6:a0:6e:ed:a4:df:35:a2:55:ff:a7:7e:86:b0:a5:bc:8e:2d:
a7:db:9b:2b:a3:63:06:81:46:67:c2:96:99:ec:22:71:8c:31:
90:70:df:f1:5a:f5:2f:42:fb:90:2a:e6:42:06:52:f8:39:80:
18:10:4a:e8:7f:16:f6:5b:86:a0:92:b4:d5:2c:d7:b9:12:f8:
59:e3:a6:89:e7:d7:be:c6:14:c4:c9:be:31:18:22:c8:88:48:
08:d4:cb:3b:6e:de:35:1f:90:47:c3:3e:cb:24:7c:40:0d:5f:
89:b3:cf:73:d1:48:76:86:65:95:f7:d7:db:0c:fd:bd:3b:ff:
3b:db:e1:da:b0:47:4d:b8:89:8d:d1:22:9b:1b:e8:de:16:9f:
51:91:c7:93:aa:7f:b7:47:5e:53:3f:cb:1a:0d:a3:49:81:f0:
1b:9c:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:54 2026 by rpki-client