Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
File: xwy87PJahmXDWnjIIdEes6ZCNiE.mft (raw, json)
Hash identifier: PMBOJgLsRP1x4nHODb8G/XXqq8f0oEve55Urx4kWLnc=
Subject key identifier: 66:BA:CE:02:C5:5A:21:EA:1B:53:2F:5B:2E:3A:B7:C1:2E:35:35:EA
Authority key identifier: C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21
Certificate issuer: /CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
Certificate serial: 019D39AF6AD582A21B7737F6665505AE4697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 13:01:30 +0000
Manifest this update: Sun 29 Mar 2026 13:01:30 +0000
Manifest next update: Mon 30 Mar 2026 13:01:30 +0000
Files and hashes: 1: xwy87PJahmXDWnjIIdEes6ZCNiE.crl (hash: SCrtpyy7vpfHWa7TRxXoH7OynR0C69BHqeF673bP3uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:6a:d5:82:a2:1b:77:37:f6:66:55:05:ae:46:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
Validity
Not Before: Mar 29 13:01:30 2026 GMT
Not After : Mar 30 13:01:30 2026 GMT
Subject: CN=66bace02c55a21ea1b532f5b2e3ab7c12e3535ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:2e:95:ec:1e:2e:de:a4:61:78:6c:e9:7b:
52:82:6e:93:18:93:83:9e:76:a9:64:67:cd:a8:70:
d4:52:dc:fb:54:57:50:3c:2e:f9:e4:ad:b5:35:d6:
10:ff:ea:aa:7b:c7:b6:1a:13:0c:e9:5c:ae:8e:09:
b0:78:c8:e9:6e:81:6b:a2:dc:3b:b0:74:05:3d:85:
f9:6f:5e:96:a3:7f:11:26:44:b9:04:2f:ea:6c:c5:
87:b7:a9:ea:01:98:aa:40:57:41:1b:4a:d0:89:ff:
f5:6d:68:67:ad:1f:e3:1d:7f:b5:91:4b:cc:c3:51:
96:88:e0:8b:76:59:9c:ac:0f:69:41:7b:f8:84:61:
03:6a:ce:ad:b1:4f:87:9a:22:d4:19:d7:b5:8b:fa:
5d:65:f0:3b:0e:c7:e0:d5:80:4d:90:53:e0:2b:df:
5b:8d:8b:5b:7e:ee:c7:3b:28:f6:d7:21:2a:1f:9e:
3b:8d:ef:ca:47:8f:75:68:7d:6e:94:01:90:54:b1:
5c:57:49:f3:62:7e:57:4e:0e:5a:b1:a0:6f:e5:51:
79:f6:36:6b:b2:42:45:e6:54:be:a6:a4:2c:3d:78:
32:f8:c6:c2:28:0e:a6:26:4b:42:3b:82:4e:17:5d:
54:9f:3c:22:a6:82:57:05:e4:68:e2:48:fc:1e:8e:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BA:CE:02:C5:5A:21:EA:1B:53:2F:5B:2E:3A:B7:C1:2E:35:35:EA
X509v3 Authority Key Identifier:
keyid:C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5a:2d:c4:ec:e5:f5:52:06:b2:01:03:93:c0:92:94:4d:06:
0f:3d:bb:b7:b9:d5:1d:c5:c9:9e:68:af:2e:a4:11:2a:9d:ae:
bf:05:9b:f4:ef:7b:1c:b3:aa:de:df:ec:52:ba:5f:3c:10:66:
44:11:a1:fe:93:35:1f:9e:d5:b1:1d:c2:10:47:a0:a3:18:54:
33:6f:84:e5:fa:7f:a3:bd:db:e7:d2:72:63:00:d1:d4:68:c9:
86:67:02:87:e6:c6:7d:2e:38:fd:23:7d:58:55:a3:14:db:5e:
d2:72:3c:26:18:2c:a7:f4:df:4a:d0:26:23:8e:cb:74:a2:00:
5f:05:c8:a0:3e:71:f3:c7:7f:c2:f0:b9:a0:23:1e:b1:ae:dc:
02:62:69:d2:11:a8:68:27:d1:0c:b2:12:ff:6c:1b:6f:7c:6d:
1f:5c:98:74:4c:44:45:2c:d7:ae:8f:65:2e:59:29:fb:e3:f0:
06:d7:92:e5:31:72:a0:92:e0:56:58:fb:90:3d:82:a7:5f:92:
5f:f2:26:50:1d:45:73:bc:95:19:51:d4:b1:70:a3:a8:2a:10:
bb:71:36:a3:44:c5:7d:4f:2c:f0:3a:8b:c8:68:2f:98:25:67:
80:7a:0f:57:a8:06:c3:61:5c:74:89:c4:6e:45:d2:f4:bf:ba:
20:42:6b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:44 2026 by rpki-client