Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
File: xI7JWf3qj9yJhS1C1QYi2C1soSw.mft (raw, json)
Hash identifier: qnTIAjbK4L6JQQUL8yigjWIY7RQap0VCQ2gPZ8v2Zc0=
Subject key identifier: 5E:3A:7F:04:DC:19:E9:F4:05:EF:96:E3:D0:CC:8B:3B:8D:F3:56:71
Authority key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Certificate issuer: /CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Certificate serial: 019D389BC572ADAE6998296E291CE15C1725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
Manifest number: 085E
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: xI7JWf3qj9yJhS1C1QYi2C1soSw.crl (hash: +h/pRt4ZXrXuK0/P5sKGfkXBp+e8q0gp0z7fVBVGgf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c5:72:ad:ae:69:98:29:6e:29:1c:e1:5c:17:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=5e3a7f04dc19e9f405ef96e3d0cc8b3b8df35671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:81:19:11:bb:70:e2:ed:8d:36:21:8a:9d:
56:51:d9:72:f4:14:fd:b0:6b:3e:53:3b:08:c9:33:
6e:f9:a7:d2:34:e0:bb:04:05:72:a8:21:b7:0e:ed:
d6:05:7c:ee:1d:fd:3d:cd:2c:7c:1f:7b:5e:92:e3:
89:0b:96:6a:57:7e:d8:79:f7:68:a8:3c:2c:39:04:
72:ad:0a:00:45:27:f4:33:15:67:82:d9:ab:91:8c:
f0:84:06:fc:47:72:b0:2f:bb:d2:1d:5b:a0:21:ea:
d9:d5:48:35:4c:fe:78:c1:d6:48:6b:19:eb:90:2e:
4e:2e:2f:6a:7d:1d:1a:a4:ca:5a:53:ee:86:b2:52:
ca:92:08:e3:b4:41:18:8e:50:e7:08:13:f6:f8:3c:
e0:69:e7:c5:cf:db:2d:f7:85:20:fc:5f:a5:9b:54:
7e:d9:ec:88:d9:29:f2:21:a5:d9:d2:13:8b:87:8c:
41:15:3f:20:e7:63:b9:7b:e8:ac:98:f2:6a:2c:d0:
fc:35:8a:35:88:58:19:1e:86:18:0f:90:5e:45:5b:
29:15:79:1b:61:9c:41:8b:4d:2d:0c:a6:d4:13:27:
82:20:c0:16:f1:0c:f5:e6:63:ac:ff:6e:bb:11:bf:
e9:2b:b5:ee:17:eb:1a:8c:69:ea:52:20:2b:06:1c:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3A:7F:04:DC:19:E9:F4:05:EF:96:E3:D0:CC:8B:3B:8D:F3:56:71
X509v3 Authority Key Identifier:
keyid:C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e2:c0:c2:8a:43:c4:e2:a4:4f:c5:2f:67:18:3e:21:72:8c:
c2:b0:d4:02:65:5c:43:63:1b:96:88:e4:48:18:f6:33:df:a9:
fe:7a:22:c9:76:5f:8d:12:65:d7:78:eb:56:11:01:eb:61:83:
e1:7d:15:05:7e:4a:ec:33:d5:aa:0e:27:56:7b:0d:e3:6b:f9:
28:1f:d5:99:74:16:07:b1:90:0d:92:66:49:c3:71:5c:b4:2c:
78:f6:26:89:4b:38:12:dd:42:04:e0:3d:e1:df:81:dd:98:2b:
43:22:a8:1c:39:46:e2:11:13:77:d4:47:4e:c7:ea:b8:b4:28:
12:ea:bb:27:fc:f8:25:71:78:ea:2b:88:ad:74:d7:d5:da:06:
9a:15:7d:34:6e:57:00:af:f2:64:81:3e:03:a8:55:e7:b9:b0:
73:4b:e1:7b:db:25:70:ef:41:84:61:c6:3e:ac:ac:c8:36:18:
f3:83:cb:7a:f6:90:ed:a2:7e:1a:79:d1:c9:0b:e5:fd:80:e4:
37:b3:75:92:3c:21:bf:42:8e:50:4e:42:af:cd:18:23:a6:08:
39:30:6d:1e:a2:97:2c:31:16:16:7a:93:37:be:1e:29:35:73:
82:ec:03:d0:70:35:58:c2:91:8c:9d:de:f1:ca:bc:cf:a8:7c:
2d:bf:4e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:44 2026 by rpki-client