Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: mj27owcW2OIVASx/SZ+V2ENDolX4TUgy4hUMsiy40/c=
Subject key identifier: 06:77:BE:D4:1F:F0:67:46:E3:B4:C3:9F:3B:5B:27:F2:B9:CF:8D:98
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 019D390A557BD9C3ED6A5DFDB1583783F86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 0674
Signing time: Sun 29 Mar 2026 10:01:11 +0000
Manifest this update: Sun 29 Mar 2026 10:01:11 +0000
Manifest next update: Mon 30 Mar 2026 10:01:11 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: QtQaBL6t5zdX/XpvSnqRaCqGhNdVn0ZZHftnzact5JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:55:7b:d9:c3:ed:6a:5d:fd:b1:58:37:83:f8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Mar 29 10:01:11 2026 GMT
Not After : Mar 30 10:01:11 2026 GMT
Subject: CN=0677bed41ff06746e3b4c39f3b5b27f2b9cf8d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:44:8e:cf:1d:a8:89:6c:51:06:bc:ec:4e:1d:
f6:9e:46:b0:e5:6d:13:26:22:af:c1:b4:e7:5e:bb:
f9:ce:cc:73:aa:02:29:75:00:80:1c:b6:af:24:3c:
4a:18:67:78:2a:f9:c3:e9:0f:0c:76:cc:94:1d:a4:
f6:d9:72:c0:38:f2:7b:11:d4:96:fc:dc:89:52:db:
50:fe:6e:0f:15:72:f2:da:77:f5:57:2a:bb:7b:49:
a9:1f:6d:df:49:4a:df:0d:c5:64:a2:d3:ab:f6:8f:
11:22:7a:95:7f:7d:60:1c:c9:e1:16:92:d6:3c:4c:
d4:b6:ff:e2:b1:91:80:1a:c3:0b:f0:08:ef:66:00:
99:ba:c7:56:1c:a2:0c:33:b4:14:ff:3d:f3:45:c2:
58:f7:50:42:82:9e:c0:7b:11:f1:e9:7c:f2:ee:96:
a3:8d:cd:33:7a:b7:d6:89:73:4d:6d:f3:a8:cb:73:
e5:7f:ba:34:58:57:5d:4b:91:7c:31:49:72:3a:5b:
7f:8c:36:27:93:f4:31:20:38:75:ff:5f:82:ab:dd:
a8:e8:c9:7d:0f:04:b1:72:78:9a:ae:0a:0d:2d:fa:
90:31:52:e0:5e:2e:53:df:07:a4:0d:e3:25:1b:b4:
85:d2:51:32:41:85:92:fb:94:ba:fa:10:cc:ed:7f:
f7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:77:BE:D4:1F:F0:67:46:E3:B4:C3:9F:3B:5B:27:F2:B9:CF:8D:98
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6d:ba:fd:31:1f:8b:3e:ba:4c:55:0d:a0:19:6b:0e:c3:32:
c5:7a:df:7b:25:3a:93:a1:67:ce:c9:ba:dc:ba:15:26:27:0b:
93:9e:ed:c5:fb:ce:3f:d0:76:22:7a:b2:64:71:bf:5e:26:ba:
ef:28:08:7b:ad:1d:c5:1e:f5:c1:46:b0:11:1d:8c:49:76:c8:
d4:58:5a:cc:40:91:4b:18:26:c0:0f:fb:d2:d8:43:b1:7f:81:
cc:8d:9e:18:ac:14:01:c4:3f:25:7c:29:b2:c3:55:51:97:5e:
5d:c4:fe:af:e8:3a:fe:57:e6:84:4b:b6:89:74:33:21:6a:a5:
01:42:f9:f2:9b:70:39:92:64:97:be:e0:d8:65:ab:c7:55:81:
0e:b7:ca:36:49:9f:61:bf:b7:1b:d5:2b:2e:8b:b0:34:3a:6e:
b0:e0:c2:61:5b:a0:a5:09:10:8d:8f:05:4e:26:00:df:19:8a:
82:33:62:3a:d7:70:ab:74:f5:42:d2:db:47:fb:93:c1:ad:2e:
cb:03:e6:fa:37:b6:02:3a:ce:a9:b0:f6:6d:b3:70:82:85:3e:
0f:5b:bd:0f:90:51:59:d5:ae:07:5d:bf:25:0c:56:3d:88:fa:
32:bb:70:5b:81:dc:fc:4d:95:98:57:63:c5:8d:3f:f8:33:e1:
3b:dc:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:23 2026 by rpki-client