Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
File: X9-gmGf3f6_At75-PE3iDirEN3A.mft (raw, json)
Hash identifier: 4dkMy0VSdvacs0l1JDZ/XMu08Bb//dOp1DYaZbPcQZE=
Subject key identifier: 18:CB:6B:E6:D1:E2:C8:AD:58:26:6F:68:89:F3:90:AD:7F:55:A1:4F
Authority key identifier: 5F:DF:A0:98:67:F7:7F:AF:C0:B7:BE:7E:3C:4D:E2:0E:2A:C4:37:70
Certificate issuer: /CN=5fdfa09867f77fafc0b7be7e3c4de20e2ac43770
Certificate serial: 019D371B6CA6CE0210ED61EB5805167D5680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
Manifest number: 01A7
Signing time: Sun 29 Mar 2026 01:00:37 +0000
Manifest this update: Sun 29 Mar 2026 01:00:37 +0000
Manifest next update: Mon 30 Mar 2026 01:00:37 +0000
Files and hashes: 1: X9-gmGf3f6_At75-PE3iDirEN3A.crl (hash: 7KxePDpKs08cx4nGMWKBCEKShOFnVmejaSRo27mA8HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:6c:a6:ce:02:10:ed:61:eb:58:05:16:7d:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdfa09867f77fafc0b7be7e3c4de20e2ac43770
Validity
Not Before: Mar 29 01:00:37 2026 GMT
Not After : Mar 30 01:00:37 2026 GMT
Subject: CN=18cb6be6d1e2c8ad58266f6889f390ad7f55a14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:93:3c:1b:8c:6d:d9:e3:e0:8c:03:17:15:
f2:00:b1:b8:dd:63:37:d0:bd:40:d4:84:57:bd:29:
bc:73:94:e2:2f:6a:36:a9:33:32:df:a7:b6:7a:2a:
22:11:a6:29:3b:e6:68:53:5b:90:dd:af:b8:ce:f8:
3d:c3:cb:1d:6b:e2:c5:f6:c8:30:15:0f:70:35:35:
75:61:9c:e1:fc:45:f7:84:b1:2a:e2:20:9a:9c:27:
c1:19:03:89:13:94:ba:c4:ec:ea:f5:0d:05:07:22:
dd:21:45:aa:d0:87:45:b2:24:c3:6b:47:28:20:1f:
e3:cc:63:de:14:89:d4:df:6b:1d:96:ec:ca:ee:d9:
c5:16:6d:63:b9:26:4c:08:6f:bc:fd:c7:73:f1:b3:
cc:79:f8:dc:0f:24:cf:ad:25:85:52:c6:53:3b:01:
f2:d3:9b:13:fb:ce:be:f6:6d:23:68:ac:11:5f:ed:
98:7a:e5:a1:b3:0b:37:45:4e:bb:04:59:9b:9c:7d:
63:18:be:fb:95:8d:f1:5b:e4:3b:58:f9:f9:c2:ae:
1e:58:ce:8c:fe:d8:87:a4:68:33:c4:78:02:6d:79:
a5:9d:11:aa:ef:a5:8e:00:4e:8d:03:12:f7:6a:83:
9c:01:06:0a:a1:8d:fc:b1:da:7d:63:18:b3:5c:fa:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CB:6B:E6:D1:E2:C8:AD:58:26:6F:68:89:F3:90:AD:7F:55:A1:4F
X509v3 Authority Key Identifier:
keyid:5F:DF:A0:98:67:F7:7F:AF:C0:B7:BE:7E:3C:4D:E2:0E:2A:C4:37:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:79:38:26:ee:2d:96:6f:fb:bb:88:f9:13:d6:3a:d3:2d:61:
e8:24:e7:73:03:8a:4c:05:f8:40:97:af:31:a6:68:43:08:e4:
e0:51:4c:b6:1c:7c:1c:86:09:f5:9b:85:7b:17:08:e7:34:28:
0e:1a:c6:f6:69:c3:d4:82:0c:ae:6a:fc:91:b4:60:da:8b:cb:
2a:0f:fe:a3:91:d3:a2:f7:95:ba:94:05:b0:3a:7c:87:97:ee:
13:83:cb:0d:16:d4:05:31:6c:76:d5:8f:c6:04:0e:68:68:ec:
0b:76:41:a0:8c:28:de:54:94:7b:4d:c4:d9:4f:b1:5c:22:1c:
ac:e3:77:e3:6b:32:74:6d:7d:3a:ea:57:3c:25:bf:80:d0:23:
61:ec:1e:f4:89:07:66:e3:a4:7f:53:a8:15:bb:52:23:23:aa:
16:d0:17:e9:76:6c:2f:eb:95:9d:21:18:a6:ce:47:d3:15:c4:
52:49:4f:b5:52:69:23:5a:25:74:46:93:48:d6:6b:da:a6:c6:
30:36:fa:6e:48:e7:35:1b:06:00:6a:8f:d3:6b:cc:a1:9a:df:
00:55:70:fb:5f:7b:21:6d:38:ea:48:69:71:99:ad:63:f4:ff:
66:c4:b4:3c:ae:a7:63:89:96:7d:75:88:e0:9f:ca:a6:d8:c5:
66:c5:fe:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:13 2026 by rpki-client