Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: 38cE+kdKVgMW6BiZEhw1UDzo2IvlcrALuTPwI5MaJgs=
Subject key identifier: 36:0F:91:61:26:1A:3A:3D:3C:E5:34:B4:F6:D8:2A:44:A5:61:98:E4
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 019D37C0C332DF1DD0E44B343E218BBA1C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 177E
Signing time: Sun 29 Mar 2026 04:01:12 +0000
Manifest this update: Sun 29 Mar 2026 04:01:12 +0000
Manifest next update: Mon 30 Mar 2026 04:01:12 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: Cncgvi6zv95TS0wGuZPZ3LRkXTUV1HnLZZvUkeDLCKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c3:32:df:1d:d0:e4:4b:34:3e:21:8b:ba:1c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Mar 29 04:01:12 2026 GMT
Not After : Mar 30 04:01:12 2026 GMT
Subject: CN=360f9161261a3a3d3ce534b4f6d82a44a56198e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bd:2f:e3:d8:93:55:3f:84:57:59:ed:61:7c:
df:89:66:db:cc:55:91:f8:4e:09:ca:51:ef:41:99:
27:8e:86:37:81:d8:bb:a8:44:97:e4:2e:1e:93:ff:
99:35:02:c5:c6:fe:d0:3a:38:d2:d3:05:ee:27:59:
ef:0f:9e:70:48:b4:4a:a7:6f:08:60:c6:f7:03:6c:
93:8f:79:82:56:66:04:29:d9:f8:4f:be:15:fb:b7:
ac:3c:66:ef:9c:bb:1d:52:51:01:cd:f6:a0:66:c4:
24:ad:f3:5e:8c:9d:6d:c2:e5:9b:23:19:13:d3:cc:
4c:53:73:d1:33:4b:89:7e:29:35:b2:2c:5f:f9:a1:
23:04:10:65:25:73:d3:7d:b3:7f:9b:2a:e1:c8:51:
f2:5b:8a:3d:f6:2f:ab:11:e4:34:b7:ac:9a:d2:ff:
f7:d4:45:54:13:84:4d:cf:69:5e:92:5c:95:4a:16:
e7:94:61:6f:d3:46:b7:c7:d2:0a:34:5d:9b:57:44:
a2:62:1a:dd:4e:ad:ee:d4:b3:aa:f9:5e:ac:96:ea:
94:1f:a8:03:a3:96:67:f6:6c:be:01:27:25:f5:4a:
30:0a:48:77:5a:c2:47:69:c0:fa:0a:23:19:e3:e7:
4c:70:e3:86:04:57:ec:4a:be:f6:95:d9:0f:a3:6c:
4a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0F:91:61:26:1A:3A:3D:3C:E5:34:B4:F6:D8:2A:44:A5:61:98:E4
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d7:d2:a1:63:4d:7b:d2:21:5b:41:0a:43:af:bc:88:82:03:
02:25:89:4b:fb:f0:71:ab:54:b1:6d:24:7b:36:90:c5:33:33:
e5:45:86:a4:13:0a:aa:cc:17:ea:65:ed:8b:fd:e2:45:69:b2:
1e:1e:1b:f8:78:e1:fa:ac:07:2f:05:c2:7d:a1:69:64:6a:7b:
cd:f2:c5:7d:c8:e6:e2:df:b8:b2:8e:3e:9f:47:64:4d:b2:08:
0d:a7:d4:3a:95:3c:e3:55:02:c0:d1:fa:50:d3:fc:76:77:8c:
85:d6:a8:fb:f8:cf:32:7f:1b:46:52:07:27:7f:a2:47:66:3c:
cd:14:58:22:64:a3:b0:8a:c3:cc:fc:ef:06:72:3e:c3:d9:92:
3a:44:75:76:07:cb:df:d9:9b:f8:ac:8b:b6:02:e0:06:f7:96:
9a:59:7d:5b:87:57:60:a3:71:85:3a:bc:dd:29:65:74:ad:cc:
88:18:0c:9b:cf:c4:9c:33:d3:25:24:df:e7:32:7e:77:a1:04:
51:83:01:a3:23:5b:e8:f4:cd:35:e3:c1:07:c0:d1:36:90:fb:
64:72:3a:d0:43:23:ba:be:a9:af:61:ef:22:05:76:67:7a:05:
a5:42:f0:93:ca:e8:ea:86:25:3b:6f:42:78:a3:0d:02:61:50:
3f:6d:30:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:12:41 2026 by rpki-client