Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: FH9SRDHJTI9ThgXGlZ4tKFL+DRfK9vlNYg1Lu6KvPVs=
Subject key identifier: A6:61:67:04:81:84:1A:D4:88:62:8D:F3:80:51:CA:96:AC:F9:FE:CB
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 019D3865AF606CCB21E39402FA7F9156D304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0DBF
Signing time: Sun 29 Mar 2026 07:01:21 +0000
Manifest this update: Sun 29 Mar 2026 07:01:21 +0000
Manifest next update: Mon 30 Mar 2026 07:01:21 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: vS5FDSLoe+ZF0woXQSJh7ObIKgKOuwBciZei1wvBP8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:af:60:6c:cb:21:e3:94:02:fa:7f:91:56:d3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Mar 29 07:01:21 2026 GMT
Not After : Mar 30 07:01:21 2026 GMT
Subject: CN=a661670481841ad488628df38051ca96acf9fecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:f1:01:ba:67:2d:02:2a:fd:e7:ac:02:32:
c3:a8:bb:d1:d6:41:ad:a5:d6:23:33:48:e5:be:e4:
ab:ba:51:f0:e6:05:fa:65:62:b2:e6:20:66:bf:67:
cd:65:c5:f1:56:c6:b3:42:e7:d5:36:91:7d:09:37:
7d:13:0a:7f:51:e1:8d:9f:76:d3:a2:c7:50:df:dc:
9c:e3:8d:fa:07:fa:fa:92:69:e2:2c:67:f6:64:11:
a4:6f:83:b5:b4:33:43:27:9e:62:5f:3d:33:2d:a6:
d0:23:e8:2b:b1:32:dd:1e:8f:39:d3:e9:62:3e:8c:
76:c7:5c:df:42:75:4a:7c:19:8c:9a:9e:b8:27:60:
2c:2b:5d:67:13:dc:4c:f1:cd:99:c7:3f:53:36:b7:
89:77:dd:1f:f8:5a:09:99:86:58:62:21:88:54:3d:
d6:18:a0:25:56:cf:ce:22:71:03:65:75:da:36:eb:
d6:51:e0:25:98:4f:b2:ac:7c:1d:d3:6a:08:9a:0d:
7e:93:19:2e:36:3a:e2:c5:1b:95:b4:9a:73:8e:17:
53:49:a5:01:7f:34:d0:2c:50:85:e3:24:c8:ca:dd:
5d:3c:42:86:6b:96:ca:a6:2d:11:1f:da:db:9c:40:
bf:82:9c:3c:b8:7d:86:d3:18:8a:be:8a:29:ce:87:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:61:67:04:81:84:1A:D4:88:62:8D:F3:80:51:CA:96:AC:F9:FE:CB
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a3:6f:5c:b2:70:bc:04:b9:82:c1:6c:f2:cc:79:f7:13:c1:
df:d6:fd:2d:7a:70:96:39:95:36:33:f4:eb:9b:96:5e:02:81:
58:5a:11:f7:74:4f:8a:67:0e:1f:2b:ad:b2:1a:60:b1:86:95:
e4:02:e0:33:ee:b3:87:ad:ea:70:21:7b:63:66:0b:63:1a:20:
ee:43:b5:65:51:af:e7:aa:87:02:bc:d6:cd:76:bc:72:cf:39:
cf:e2:95:70:dd:5d:eb:f4:8d:38:a7:d1:20:75:da:84:8b:5d:
6e:43:6e:66:fe:25:7c:cf:94:b2:c3:bd:bd:a9:47:71:19:9b:
3b:23:ea:b5:77:3e:1d:71:82:9a:b5:07:78:32:c5:7a:1b:55:
c0:e7:cb:b5:9e:0a:97:7d:56:3c:b1:10:3e:87:6d:4a:5a:4c:
47:b2:e7:db:b2:bb:a2:93:19:d1:d4:32:6b:e8:b4:94:3b:84:
55:e0:b6:52:ba:7b:f7:79:d5:ed:8c:85:ac:ae:3c:7f:41:e3:
83:f6:e2:94:3f:b3:5e:e4:3e:3d:9b:5a:b8:b4:67:ea:08:31:
f6:5d:cf:ae:02:7a:0d:af:dd:07:ee:88:df:14:c5:58:5d:3b:
d2:b8:7b:e4:fe:29:d3:49:33:d0:1c:22:e3:bc:dd:79:4b:9f:
43:83:31:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:16 2026 by rpki-client