Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: 1VBeKVseDx4/VeD2+Wpamst2lgcLSiaVwPJd2+CAPIM=
Subject key identifier: 53:13:5E:90:69:39:1E:2B:80:69:A3:E8:10:82:7F:AE:19:CE:EA:04
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 019D382E8109A96E9B837AC36BFD81651F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 06:01:04 +0000
Manifest this update: Sun 29 Mar 2026 06:01:04 +0000
Manifest next update: Mon 30 Mar 2026 06:01:04 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: LlpEERyyV0dFzcRa5h/CG4jSm3VVx1u0F0xPWhXQH7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:81:09:a9:6e:9b:83:7a:c3:6b:fd:81:65:1f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Mar 29 06:01:04 2026 GMT
Not After : Mar 30 06:01:04 2026 GMT
Subject: CN=53135e9069391e2b8069a3e810827fae19ceea04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:0b:f5:96:88:53:a4:6b:3e:a9:71:4b:98:
01:5c:81:0c:65:50:5e:31:05:4b:4b:9b:79:4a:45:
fe:4a:31:de:cf:0a:0f:e6:a4:01:50:ab:34:d8:68:
d2:d4:95:9a:c5:4b:4c:9a:6c:19:d9:d4:da:91:c4:
f8:1c:6c:6a:c7:0a:d7:74:ee:9b:5e:a6:9a:b6:ad:
d8:4b:59:b5:fe:e4:9f:f4:c4:bc:d5:88:e6:fe:1c:
4e:b7:0c:46:3a:eb:ea:3d:65:44:e7:2b:33:52:db:
07:a9:8b:b0:df:21:2b:d9:cb:e1:9f:4e:22:9c:77:
88:1b:85:6b:04:02:e3:15:65:bf:78:c8:4c:2d:f5:
21:c2:c8:92:5a:18:1d:d7:d2:85:3b:7a:35:08:fc:
b1:ff:3d:b3:d2:32:d0:ba:ad:48:42:10:ab:c2:43:
68:5b:e1:48:e0:77:36:e1:8a:ca:91:af:cc:54:b7:
03:a3:e0:a8:9c:00:46:b2:d3:87:74:d1:77:35:c1:
11:cd:cb:40:4b:2d:01:62:07:e9:eb:1a:f6:bf:1b:
84:ac:e7:8a:35:ec:35:08:ba:15:46:83:70:43:07:
08:fc:b5:36:c4:b1:4f:ad:1f:82:09:ed:e6:35:64:
79:9a:cb:a9:3b:4d:7e:7d:bb:25:66:c6:e5:89:35:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:13:5E:90:69:39:1E:2B:80:69:A3:E8:10:82:7F:AE:19:CE:EA:04
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:73:26:32:78:3e:1f:31:0b:49:ac:51:17:c1:90:ae:7c:cd:
97:3c:91:9a:f3:6b:89:63:e3:34:c2:a7:e8:6e:82:e8:f8:5c:
dc:cd:8b:8d:fa:2a:8b:cd:0a:8f:b4:78:a7:1f:95:17:a7:24:
0f:77:b2:a3:7b:de:df:56:82:a2:0d:d5:9e:01:e4:d3:d6:0f:
14:a9:a5:25:47:43:61:e9:76:aa:61:b3:8a:54:37:4f:45:77:
fd:38:57:2d:c9:42:9f:e5:84:3d:bf:4b:9b:64:76:8f:94:3e:
de:99:b2:30:19:7c:89:7b:5c:a8:b4:b0:1f:9f:20:86:8f:3c:
4b:db:98:22:98:27:e2:79:51:a4:47:27:45:03:2e:c1:de:63:
5d:a6:6d:ed:a5:fd:69:c3:bf:bc:45:28:fb:07:82:02:54:cf:
a2:d8:62:96:a8:83:4a:1f:ec:e9:e4:e3:74:f2:0c:ec:02:3e:
f2:f2:2e:72:c6:21:96:17:bf:c1:0f:f2:21:7b:1d:66:3a:cd:
fd:1a:a9:5d:eb:57:2c:5e:15:db:49:9f:c5:d3:a8:19:a0:10:
31:6a:1f:64:86:0c:08:2c:19:8c:db:74:05:a6:56:07:ca:01:
cf:64:73:90:d4:14:2b:f5:60:27:4a:46:f4:ec:f5:75:77:6f:
83:ab:0e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:44 2026 by rpki-client