Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
File: xrjeVShQrOhfyMDhaFLMc98QFp0.mft (raw, json)
Hash identifier: QV8KbUv2+U2W93GB4bU9g9yvdXL2ozAgzVEUCdvWYzE=
Subject key identifier: D3:EF:74:FC:2A:01:92:64:60:0C:7F:EA:53:50:97:43:3E:33:8F:88
Authority key identifier: C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
Certificate issuer: /CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Certificate serial: 019D371BF05D6821D37C1349AE6617E5DD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
Manifest number: 0A64
Signing time: Sun 29 Mar 2026 01:01:10 +0000
Manifest this update: Sun 29 Mar 2026 01:01:10 +0000
Manifest next update: Mon 30 Mar 2026 01:01:10 +0000
Files and hashes: 1: xrjeVShQrOhfyMDhaFLMc98QFp0.crl (hash: OqR4BPWhshaaeRg8eFIbExekJ+QowzYYGOqd+zcVRSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f0:5d:68:21:d3:7c:13:49:ae:66:17:e5:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Validity
Not Before: Mar 29 01:01:10 2026 GMT
Not After : Mar 30 01:01:10 2026 GMT
Subject: CN=d3ef74fc2a019264600c7fea535097433e338f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:04:33:b2:93:26:d6:d5:b5:ad:88:79:97:
c2:7f:df:0c:bd:10:2d:6c:c7:61:90:64:7e:95:3f:
4b:0f:e5:e4:2f:e9:25:58:c6:13:d1:e0:0d:c3:15:
ce:a8:35:15:d7:30:82:df:c8:8e:59:19:b1:d0:ce:
7a:83:55:0d:88:03:1b:1b:60:e1:bc:a7:5c:f5:53:
d6:ac:b5:ec:22:d7:e2:9c:41:d1:bd:01:cc:7d:74:
f3:17:02:b3:10:46:37:27:21:df:50:b3:60:9a:a6:
77:62:6f:b0:81:0c:33:11:80:97:ce:01:c2:65:ee:
76:06:cb:b3:64:35:fd:05:94:d6:4b:d1:5e:71:c3:
d9:55:05:eb:f6:ae:4e:16:72:f7:d0:65:77:5c:f5:
27:df:a7:5b:2c:96:59:84:9c:05:b8:5a:08:69:77:
05:91:d9:3d:75:bb:87:06:0a:cf:7c:5e:d2:d3:f1:
30:89:b7:b3:bb:ba:0b:31:ea:8c:80:02:89:81:67:
81:75:b2:f7:45:3f:81:1c:d2:92:34:09:c9:0b:f4:
c1:55:f4:75:52:70:d9:a5:09:ef:81:68:7b:82:b2:
99:9a:f0:9c:4d:61:d1:37:15:71:e2:3d:24:a4:a4:
26:94:2a:69:a7:31:dc:93:72:8f:36:ce:29:3c:25:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EF:74:FC:2A:01:92:64:60:0C:7F:EA:53:50:97:43:3E:33:8F:88
X509v3 Authority Key Identifier:
keyid:C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:be:63:f4:af:dc:27:64:50:2f:63:f6:12:ad:23:3e:c3:bc:
cb:c0:5d:dc:23:80:0b:91:ba:7f:83:00:86:a1:bd:f2:3e:65:
89:20:bc:67:d7:f0:ff:16:1c:68:61:36:ce:4b:67:3d:17:6f:
dc:0b:8f:d8:d5:19:6a:ca:37:00:3e:3b:93:fa:6c:6f:11:a8:
b2:39:e0:1e:73:fb:e4:98:5d:05:81:cc:20:95:72:bd:6b:4e:
35:27:58:97:f2:c2:a5:72:d6:4b:be:e3:3c:0e:d1:78:bf:bf:
9f:21:b3:0d:c9:88:ce:79:02:22:4d:ed:4e:ee:58:85:f5:80:
ff:fd:a6:f8:9f:69:b4:77:d6:2d:c3:62:02:61:6c:07:59:d1:
31:a1:10:3c:d4:44:d1:ee:c9:52:f0:62:3b:5d:f9:1e:d7:54:
71:15:d6:93:59:2f:6f:57:2e:98:54:be:d8:8d:22:a1:19:6e:
c6:6d:35:04:96:90:61:ec:a9:34:50:45:61:81:97:da:08:13:
d3:a2:33:66:43:e2:eb:8b:86:d6:fe:dc:6b:35:83:c4:60:c2:
05:6b:a4:16:6a:d1:ab:95:e2:37:73:d9:3f:09:23:58:33:5a:
47:22:30:71:70:70:59:61:30:0d:c0:5d:67:76:ce:a7:ff:18:
01:db:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:05 2026 by rpki-client