Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
File: XbdXv1dG8moHySCHAbDVS2m8M2Q.mft (raw, json)
Hash identifier: 6NnPq0YGnlI7sv9qs+91GR42vQdzgtZjc79SwRFzLB8=
Subject key identifier: 2B:DD:8A:8A:E1:B9:87:96:18:E2:B0:2D:0B:5F:8D:69:EE:52:31:5F
Authority key identifier: 5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64
Certificate issuer: /CN=5db757bf5746f26a07c9208701b0d54b69bc3364
Certificate serial: 019D38D29F520711BD692FD22E1B13BD5C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
Manifest number: 075B
Signing time: Sun 29 Mar 2026 09:00:20 +0000
Manifest this update: Sun 29 Mar 2026 09:00:20 +0000
Manifest next update: Mon 30 Mar 2026 09:00:20 +0000
Files and hashes: 1: XbdXv1dG8moHySCHAbDVS2m8M2Q.crl (hash: A9x/99xOGCbGoDW3F5A0DgbIWMbAnHVYfb7L5LuztAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9f:52:07:11:bd:69:2f:d2:2e:1b:13:bd:5c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db757bf5746f26a07c9208701b0d54b69bc3364
Validity
Not Before: Mar 29 09:00:20 2026 GMT
Not After : Mar 30 09:00:20 2026 GMT
Subject: CN=2bdd8a8ae1b9879618e2b02d0b5f8d69ee52315f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:af:0e:05:68:6a:c1:f3:c4:12:bf:c5:07:
64:67:61:93:a2:b5:52:c8:f0:fd:47:fa:ce:8f:25:
85:5d:61:2c:ce:e0:49:1a:de:5d:c6:38:4e:ba:b5:
0d:d5:a1:04:cb:26:2e:19:f1:13:4d:fe:3c:c3:43:
13:e5:e6:e3:70:a9:c7:68:b5:8f:aa:56:eb:84:a8:
92:28:51:ee:7b:dc:53:5f:b3:b7:bf:c6:e0:3f:c1:
13:ac:5d:ba:f3:91:67:bd:b3:ea:9c:18:fb:47:8a:
ed:6c:36:68:70:05:ee:62:f3:68:dc:d2:c5:ff:76:
98:67:14:5e:14:5d:76:3c:96:87:ab:f9:03:f6:53:
76:a1:16:14:4c:c2:6b:c3:27:17:9c:8d:1c:93:93:
48:f7:eb:3c:30:e9:2c:ff:ed:c8:4d:be:73:de:a4:
60:0e:59:ac:3b:98:13:a1:6c:d7:25:4e:bc:cd:05:
22:4d:2d:b4:8f:62:d6:83:4a:e8:c1:71:27:ee:2d:
fc:9a:14:3c:f2:15:18:79:53:4c:f6:21:09:b9:2a:
e0:64:a3:40:2f:3c:5f:93:f4:0e:98:b1:e0:8b:7b:
c0:84:6e:7c:83:61:4e:93:55:62:b8:c9:be:62:6a:
31:e9:a6:91:31:2e:d4:34:77:15:d2:82:d2:f0:6a:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:8A:8A:E1:B9:87:96:18:E2:B0:2D:0B:5F:8D:69:EE:52:31:5F
X509v3 Authority Key Identifier:
keyid:5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0b:85:d5:ec:13:c1:13:b2:ce:18:bd:64:cc:c5:28:33:cc:
8a:b6:d1:68:ce:b5:e4:81:6b:59:1b:61:ff:8c:03:d6:b5:92:
c9:af:aa:09:fc:a1:a2:51:b8:c1:75:34:26:3c:0f:97:57:b1:
78:8f:d4:35:f1:81:25:5d:49:32:91:be:34:46:ab:a2:bd:ed:
dc:5a:31:01:8f:cb:29:f6:db:bb:be:4a:41:d0:70:33:fe:e7:
3c:37:18:b0:b3:ca:b3:74:00:be:6e:ef:ff:9c:76:ec:56:66:
e7:1e:39:45:8b:16:cb:93:9d:e7:5b:4f:d5:b6:8a:59:38:63:
06:dd:29:d1:43:5a:c0:ec:a7:f3:30:3c:b8:7c:31:70:ca:dc:
63:98:d3:99:b1:57:37:76:d0:d8:d0:53:56:bc:e2:f3:fa:05:
90:c6:30:5a:6d:8f:1e:9d:16:3b:09:65:5b:ca:e5:cb:d2:d6:
f8:15:76:8c:d4:cc:ff:48:7e:07:a2:59:32:97:6c:1f:fc:6a:
a5:78:aa:70:03:60:d6:e3:a8:37:ec:0c:09:e1:20:3a:41:29:
33:d9:53:bd:2c:d3:b3:71:cb:c4:6d:77:b5:fe:d9:84:6e:a7:
5b:69:b5:06:8d:6d:db:dd:ba:e6:6d:1f:6f:a1:e2:91:24:5d:
c5:18:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:09 2026 by rpki-client