Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
File: X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft (raw, json)
Hash identifier: uGNYdfG2Q/uosSJRaHwHH9rEfzKKUBObr/eR/6gq4Zs=
Subject key identifier: FD:E6:42:54:C3:86:6D:9A:AF:AE:C6:5F:85:2D:1B:03:7B:C7:CB:21
Authority key identifier: 5F:40:62:82:EC:14:FA:0B:C7:D6:51:1E:FC:BC:6A:E9:F1:E0:5B:3D
Certificate issuer: /CN=5f406282ec14fa0bc7d6511efcbc6ae9f1e05b3d
Certificate serial: 019D375293B8AC53BC2C08691995D94A567F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
Manifest number: 033C
Signing time: Sun 29 Mar 2026 02:00:51 +0000
Manifest this update: Sun 29 Mar 2026 02:00:51 +0000
Manifest next update: Mon 30 Mar 2026 02:00:51 +0000
Files and hashes: 1: X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl (hash: hJ+c2AfdNaEM8i+Dt0Q7YAxeHiqA0cK+5jit+X0oz0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:93:b8:ac:53:bc:2c:08:69:19:95:d9:4a:56:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f406282ec14fa0bc7d6511efcbc6ae9f1e05b3d
Validity
Not Before: Mar 29 02:00:51 2026 GMT
Not After : Mar 30 02:00:51 2026 GMT
Subject: CN=fde64254c3866d9aafaec65f852d1b037bc7cb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:0a:a6:64:4e:81:cc:5e:c9:5e:20:1f:3c:
eb:0c:15:8b:e6:b6:23:b9:54:7a:bd:31:a5:c6:34:
51:af:d3:a1:38:9c:20:38:de:08:e6:f0:13:d2:ba:
a1:f1:ea:c0:8b:b8:45:04:29:ce:ff:cd:dc:62:ec:
19:f9:64:c0:97:05:76:bd:ee:d7:43:d0:8d:74:20:
e2:7f:d9:e0:20:83:fd:6d:22:05:e7:19:50:86:56:
26:b9:c3:6c:de:cf:f7:66:b7:59:ed:98:7f:f0:a3:
3a:4a:ca:43:df:85:44:85:e0:6d:86:ef:99:2f:ab:
8d:c3:27:07:57:3f:f1:0f:b4:61:2a:b8:2f:2b:7f:
4b:b6:0a:75:37:8a:44:8f:98:69:1b:ff:4a:c8:8b:
98:46:79:08:c2:a1:ce:5e:ff:00:e9:92:32:7e:c6:
83:48:93:7a:bc:1d:74:4d:6d:75:ba:97:f9:32:03:
44:e2:32:82:51:b4:96:66:ec:c2:ed:06:0c:ad:d1:
90:28:cd:56:8f:0d:99:f8:37:c4:b8:19:20:f5:a6:
8f:e4:06:4a:47:78:65:4b:27:59:d1:78:8b:ff:4e:
11:31:61:84:41:ca:96:81:26:cc:19:6b:65:9a:b4:
35:43:06:28:4d:b2:c0:7f:70:35:96:60:4a:03:b3:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E6:42:54:C3:86:6D:9A:AF:AE:C6:5F:85:2D:1B:03:7B:C7:CB:21
X509v3 Authority Key Identifier:
keyid:5F:40:62:82:EC:14:FA:0B:C7:D6:51:1E:FC:BC:6A:E9:F1:E0:5B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d8:e8:0e:8f:9a:d9:e9:d8:67:ee:b7:47:4c:7b:dc:8f:ce:
0d:61:06:71:b4:80:83:5b:34:c7:b5:57:b0:8a:35:d0:db:e5:
3e:59:64:b8:87:c9:9c:eb:63:ec:a9:aa:df:2b:c4:09:a6:22:
2b:19:5d:c6:c6:9a:87:5e:02:49:24:47:74:82:39:70:85:a4:
a4:94:51:cd:e3:18:7f:4f:56:5e:aa:23:71:28:b9:58:66:a0:
e2:a6:05:52:a7:c7:83:3a:67:99:9e:c8:a5:45:29:a8:6e:67:
e9:a0:b1:fd:76:fd:c9:fa:f4:62:0f:b2:9d:cb:2a:75:de:ab:
16:34:c9:b0:e7:1a:17:72:7e:91:ed:f2:91:25:ff:18:0f:13:
15:99:4c:49:e5:b4:0b:01:af:a1:1d:61:2e:31:e0:f8:b0:1d:
91:af:bf:a6:d4:60:7e:d4:bb:c6:b3:fd:cb:9b:99:81:7a:29:
ac:1d:38:80:03:b9:7c:d0:14:4e:44:01:6a:7e:16:6e:f1:c3:
84:e9:e6:0d:13:4f:a5:b0:d0:0b:62:53:df:07:f8:7f:66:61:
d4:09:cb:18:33:02:98:c2:c6:6f:8c:b3:d7:bd:43:8b:e0:db:
f0:07:96:bd:88:6c:cf:51:19:a6:bd:19:4b:88:3e:58:bf:86:
ff:6d:f6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:53 2026 by rpki-client