Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.mft
File: _xcGtTYa7OO3e5sag2JA1IS9C1Q.mft (raw, json)
Hash identifier: lCvtNZSGreNlJuhpazkCuvi/sgB2Vn61ESc9IIEO8fQ=
Subject key identifier: EE:59:C3:FB:5B:7B:54:9A:00:EB:76:90:3E:B4:25:4C:B2:43:A8:C4
Authority key identifier: FF:17:06:B5:36:1A:EC:E3:B7:7B:9B:1A:83:62:40:D4:84:BD:0B:54
Certificate issuer: /CN=ff1706b5361aece3b77b9b1a836240d484bd0b54
Certificate serial: 019D375242D9EFBDDB83591D471BEAA706E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xcGtTYa7OO3e5sag2JA1IS9C1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.mft
Manifest number: 0130
Signing time: Sun 29 Mar 2026 02:00:30 +0000
Manifest this update: Sun 29 Mar 2026 02:00:30 +0000
Manifest next update: Mon 30 Mar 2026 02:00:30 +0000
Files and hashes: 1: _xcGtTYa7OO3e5sag2JA1IS9C1Q.crl (hash: bh+SV4Sn9ETFQz93fZDI7/pxhgDW+lOirDzzUn2ya08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xcGtTYa7OO3e5sag2JA1IS9C1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:42:d9:ef:bd:db:83:59:1d:47:1b:ea:a7:06:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1706b5361aece3b77b9b1a836240d484bd0b54
Validity
Not Before: Mar 29 02:00:30 2026 GMT
Not After : Mar 30 02:00:30 2026 GMT
Subject: CN=ee59c3fb5b7b549a00eb76903eb4254cb243a8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:66:b8:dd:07:a2:ca:b4:4a:ce:f5:da:0f:
4d:9b:f4:7a:56:e7:35:ff:65:26:e9:59:db:05:c8:
3b:06:23:61:e1:52:f8:b2:f0:ed:77:ff:8a:01:26:
1e:9f:66:30:54:ef:53:f5:00:a9:bd:e8:4c:b8:53:
bb:38:c8:4f:2a:c7:d7:d1:61:e6:cb:7b:24:80:02:
0f:31:7f:e7:49:b1:2b:e7:9f:7c:69:44:5f:a6:6e:
07:bc:94:18:f7:49:e6:2f:db:dc:78:21:a1:73:5b:
51:f2:c6:88:a8:05:9c:51:9f:7c:02:3b:ce:d7:96:
e8:e9:22:27:7c:85:e3:8d:74:ff:9f:08:c0:d4:0c:
97:60:9f:e2:0e:ff:48:0b:dd:30:32:dd:2f:18:51:
0d:fb:aa:22:85:5d:73:00:04:ee:40:2d:b0:9c:b2:
00:34:23:04:d2:0b:b9:54:81:61:61:98:1c:73:37:
af:99:f8:2b:2d:9b:a5:1c:42:85:96:5b:10:34:d0:
55:d9:e1:28:0a:03:63:40:db:3c:11:95:c9:b3:df:
f3:46:82:8a:1b:e8:3a:a7:eb:b3:e0:7e:ad:9e:0d:
13:1f:46:d9:e8:b9:ce:aa:f8:03:1a:63:f2:b6:8a:
98:b8:94:51:b4:e0:75:c7:ef:ad:3a:a0:fd:bf:9a:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:59:C3:FB:5B:7B:54:9A:00:EB:76:90:3E:B4:25:4C:B2:43:A8:C4
X509v3 Authority Key Identifier:
keyid:FF:17:06:B5:36:1A:EC:E3:B7:7B:9B:1A:83:62:40:D4:84:BD:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xcGtTYa7OO3e5sag2JA1IS9C1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f6:68:10:38:23:b7:66:5c:90:48:64:82:6a:bf:0b:f7:eb:
bc:74:94:46:bf:5e:12:bd:78:4b:e1:ed:39:0f:39:cd:03:ae:
cd:50:b7:8e:4e:b1:f2:39:89:ef:31:2a:ab:77:86:4c:ff:57:
4e:a8:89:50:52:f9:8d:9b:83:97:94:62:c3:cc:5d:6e:15:cd:
81:18:63:32:82:77:9a:2d:b7:13:c3:d8:32:a6:53:cb:61:6d:
67:31:fb:ac:06:12:59:9d:f3:50:da:3d:cd:cd:39:b7:c5:20:
66:17:49:84:5e:b7:36:c0:be:43:61:c7:2e:45:e0:23:10:1f:
1c:59:59:71:13:4a:01:b6:81:f9:4f:27:91:44:72:6b:54:98:
b2:8d:e1:90:97:80:b3:c1:c3:8a:47:6b:bf:9f:dc:7a:51:7a:
df:5e:62:18:64:66:56:d7:a0:df:03:58:e5:83:2f:c8:7e:77:
3c:7f:92:b7:16:a1:db:07:c8:be:43:e6:f7:7f:dd:ad:11:94:
3c:b9:41:e9:5f:a7:c9:40:27:18:a1:71:8a:d8:1a:57:c4:63:
29:43:f4:a8:20:83:30:63:6c:ca:47:9b:43:50:34:5a:f6:63:
09:00:43:4d:5c:e2:06:00:e5:d9:ba:0b:aa:6f:27:28:94:0e:
0a:d5:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:24 2026 by rpki-client