Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
File: XSP6gsR1KG22BxT2A2Gg8crCPSM.mft (raw, json)
Hash identifier: YoGSN3k6wM1lWJ39cKDXIJNfF/SaKRTDhDZd3Yyldss=
Subject key identifier: 21:11:FE:12:B3:79:7B:62:34:6D:18:CC:B6:B7:F6:FC:28:A4:3C:FE
Authority key identifier: 5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
Certificate issuer: /CN=5d23fa82c475286db60714f60361a0f1cac23d23
Certificate serial: 019D39AF260309FB82D942BF7F3E42AB5871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
Manifest number: 34
Signing time: Sun 29 Mar 2026 13:01:13 +0000
Manifest this update: Sun 29 Mar 2026 13:01:13 +0000
Manifest next update: Mon 30 Mar 2026 13:01:13 +0000
Files and hashes: 1: XSP6gsR1KG22BxT2A2Gg8crCPSM.crl (hash: GxQQnw1pG1UdoJBbUK063c5QqVaIYoTjxA5B0pXAFe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:26:03:09:fb:82:d9:42:bf:7f:3e:42:ab:58:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d23fa82c475286db60714f60361a0f1cac23d23
Validity
Not Before: Mar 29 13:01:13 2026 GMT
Not After : Mar 30 13:01:13 2026 GMT
Subject: CN=2111fe12b3797b62346d18ccb6b7f6fc28a43cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:1b:7f:d2:8a:57:6e:79:72:57:1b:cd:c9:
36:b8:9e:10:7d:8f:39:68:e8:08:f6:9b:02:b6:6c:
13:00:19:00:0f:c8:25:8a:12:db:0a:4c:aa:2e:00:
9a:7f:71:72:04:8d:0a:1a:93:f2:59:18:84:e9:2f:
6c:9b:6f:99:c7:99:28:a6:a9:e5:d7:77:6e:75:60:
f7:29:b5:cc:33:72:d3:e4:96:6d:0d:12:91:13:c8:
22:50:94:c2:90:6e:21:ee:51:6b:cf:f3:c1:79:30:
a6:dc:82:c3:d5:58:d5:53:3c:1c:37:ef:ba:04:10:
70:a9:36:46:ea:c6:f6:97:f9:e4:c0:86:87:c0:a7:
f0:94:39:23:7b:4d:6e:07:74:3b:30:02:d1:53:bb:
0f:4d:2e:da:34:36:e3:b9:e6:b6:d9:8d:41:0b:21:
10:47:90:c7:21:02:ba:7b:35:99:dc:ec:99:ea:0e:
86:0b:69:ac:df:59:24:9e:80:32:2c:0d:15:ab:64:
cf:0c:96:3e:df:bf:cb:b7:47:18:af:73:b8:9b:ab:
ea:e3:b8:f3:d3:80:d8:a3:c5:b0:bd:91:6c:11:ca:
e0:3a:d3:75:32:35:51:49:6c:b0:e8:4c:37:44:24:
a3:a0:71:4c:0e:e4:2a:d5:08:95:8c:35:68:87:e0:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:11:FE:12:B3:79:7B:62:34:6D:18:CC:B6:B7:F6:FC:28:A4:3C:FE
X509v3 Authority Key Identifier:
keyid:5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2e:b3:7d:b7:d7:37:cc:9e:c1:da:e3:76:7c:ff:86:4f:fd:
84:a3:93:da:78:58:da:95:a9:bf:28:f0:72:1c:7f:2f:c1:4c:
59:0e:08:87:17:e3:9b:75:f5:2c:2b:b5:a0:da:be:90:c6:73:
7d:b1:e5:de:96:4d:0f:7e:cb:32:e5:58:df:aa:dc:43:21:b8:
f0:b9:72:dd:80:2a:f1:a5:ac:51:4d:66:39:80:e9:08:d7:42:
16:5c:36:56:e8:92:b0:b2:0e:e8:56:96:34:4b:bd:c7:cb:94:
ec:12:d0:0a:e6:f1:76:fa:35:da:e9:bc:4d:1f:ec:20:89:b3:
b0:33:10:4b:5a:90:c2:a7:10:a2:29:2d:84:78:81:79:e9:05:
31:84:14:60:7a:d3:cf:c5:34:1c:b7:3d:f2:7d:d7:bb:c8:9c:
0b:f9:68:18:9c:81:a7:9d:48:14:74:50:c3:5e:82:8f:69:da:
1f:ed:d6:a8:e2:4f:0b:8b:9e:5a:18:5d:d4:eb:ca:57:fa:d0:
29:41:e8:e7:4e:4e:d3:40:dc:0a:da:f7:eb:4e:dc:0e:3a:60:
6f:1a:75:51:1a:95:d5:45:fb:e4:6c:39:ec:28:ad:2b:46:c3:
8d:8f:22:45:73:83:4e:ea:79:5c:dd:d5:ee:c9:68:e0:f8:c8:
fc:2d:76:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:40 2026 by rpki-client