Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier: BvLyT/B3ClsoElrtTMoa3T12mDQBFrSPe0VU+GOfDvE=
Subject key identifier: 54:CB:FF:93:92:2B:05:56:4D:52:12:2F:C9:0E:2B:1D:B9:F3:4D:12
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer: /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial: 019D38656CB0BA1BE0E1411B303D5491D99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: SPoq3vTpU6s0E6smfQvz/ZSI50+4lUt4jvpsK50cQ7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6c:b0:ba:1b:e0:e1:41:1b:30:3d:54:91:d9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=54cbff93922b05564d52122fc90e2b1db9f34d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:b5:d1:04:3c:0a:88:c2:48:4f:1b:dc:9f:
dd:e2:f0:5d:6d:2e:37:a9:f3:87:5e:5f:44:7e:0c:
95:bb:fc:b4:f5:99:fd:98:f5:8b:a2:e2:96:82:98:
c3:2e:6b:be:ae:d7:93:4a:dc:80:d1:a6:ec:1f:ab:
31:53:5b:21:15:03:c5:b8:bb:6c:37:eb:9b:7d:b9:
66:0f:5f:44:0c:43:a0:bd:b6:d2:af:19:13:db:2b:
f4:8b:46:8b:0f:dd:84:3a:90:c8:81:d7:29:3b:18:
5c:46:15:b0:37:f8:ca:72:3f:75:5b:95:0e:7d:ba:
a1:9e:c8:7e:cc:51:3f:63:bb:9d:6c:bb:69:ed:7d:
4a:f6:1d:c6:51:cc:e3:aa:01:4b:01:ff:fd:62:23:
55:aa:84:33:69:51:aa:3e:76:b3:54:a0:2c:94:f3:
48:49:fb:62:c6:77:df:f2:ff:58:a0:c7:4b:28:61:
d6:e2:e6:69:be:f3:3f:44:99:ae:59:61:e6:25:e3:
8a:0f:1a:c2:79:a1:48:32:f4:27:84:17:cb:0f:ed:
89:3a:09:73:80:4d:5f:5f:18:8a:fe:5a:70:e6:c4:
c0:bd:19:8f:7f:7b:a4:fc:f4:37:01:be:20:cb:c7:
76:75:65:4a:b4:6f:0d:79:1a:82:eb:b7:3d:32:91:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CB:FF:93:92:2B:05:56:4D:52:12:2F:C9:0E:2B:1D:B9:F3:4D:12
X509v3 Authority Key Identifier:
keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:52:f4:e4:08:6f:5e:98:8f:75:ed:04:6f:ce:c7:c1:af:6a:
40:b2:be:9f:5c:15:14:01:ce:b8:88:d1:c4:f8:e4:c9:09:31:
a1:62:63:cf:51:14:74:c7:4b:f0:8d:c1:e7:e3:99:e6:aa:c5:
a1:35:79:20:ef:d3:2c:52:70:44:96:6c:5d:30:a9:97:91:52:
10:d4:f8:13:41:4d:f9:8c:82:2e:0f:59:40:f4:9e:fb:33:9a:
3e:c0:a2:f3:77:41:af:e3:5d:78:6e:67:b7:a3:97:95:69:6d:
fd:98:11:3f:08:19:e7:67:97:0e:82:77:db:03:49:0b:cd:c1:
63:03:24:77:02:67:ed:42:54:48:b8:13:d4:36:01:44:33:52:
fc:05:3c:1a:05:1a:1e:08:c0:78:fe:3f:5d:47:68:b0:45:e1:
08:78:f3:6b:d3:91:59:db:83:c7:70:3e:e4:aa:6b:98:c7:47:
d0:81:3a:fa:31:05:3d:cc:52:f2:ff:1d:e2:d2:8c:be:7a:ee:
9b:d1:1b:ef:46:75:74:ac:e9:18:d0:69:50:32:25:e2:fd:86:
da:96:75:29:d3:b9:56:07:22:8a:4e:15:44:60:93:9b:37:9a:
7e:8a:1f:62:d7:85:6f:f9:bd:bb:49:51:52:2a:50:4a:92:92:
af:10:9a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:46 2026 by rpki-client