Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
File: xf9_LizUq2EooxIgpTBBqUmlbDk.mft (raw, json)
Hash identifier: p3CFDRdYDwthSWFwmlP41oM5MvLQdgK58hFUhfUl9ds=
Subject key identifier: B8:6F:D9:5B:2B:96:95:ED:33:84:3F:D4:1F:E1:74:E1:A4:86:E7:A5
Authority key identifier: C5:FF:7F:2E:2C:D4:AB:61:28:A3:12:20:A5:30:41:A9:49:A5:6C:39
Certificate issuer: /CN=c5ff7f2e2cd4ab6128a31220a53041a949a56c39
Certificate serial: 019D38D3AA9CDF63FB47F6AAB063A09B2E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
Manifest number: 0228
Signing time: Sun 29 Mar 2026 09:01:28 +0000
Manifest this update: Sun 29 Mar 2026 09:01:28 +0000
Manifest next update: Mon 30 Mar 2026 09:01:28 +0000
Files and hashes: 1: xf9_LizUq2EooxIgpTBBqUmlbDk.crl (hash: +3unMFjK7Yq81csBTgBIWLixnQ1Yanqz9J/mWiXvams=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:aa:9c:df:63:fb:47:f6:aa:b0:63:a0:9b:2e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ff7f2e2cd4ab6128a31220a53041a949a56c39
Validity
Not Before: Mar 29 09:01:28 2026 GMT
Not After : Mar 30 09:01:28 2026 GMT
Subject: CN=b86fd95b2b9695ed33843fd41fe174e1a486e7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:60:8b:e2:cd:74:8a:30:54:3d:fd:ee:f8:
43:32:da:4b:7c:d1:ed:92:5b:91:67:ee:ae:8f:78:
22:d9:d8:5a:47:20:57:14:82:1a:e7:55:a1:1c:d0:
c5:9b:bb:9a:ff:e7:ae:a9:99:6d:0a:f1:24:cf:ed:
96:64:cd:d0:65:46:5f:32:25:f2:43:b5:c8:6e:94:
bc:e0:9b:63:35:95:19:e0:e0:07:5b:5a:22:09:b0:
56:98:9e:c9:76:d6:66:cb:29:2c:aa:6c:ea:af:01:
a2:d6:50:3a:30:48:02:ed:e4:4e:6b:46:be:e7:ab:
92:7c:5c:89:79:b1:26:33:b6:97:d6:39:9b:82:a8:
e1:02:04:a1:47:6d:af:03:92:9c:67:d0:0b:43:68:
c4:18:b9:5f:d0:01:06:91:d8:36:bb:6b:b5:1d:e1:
3c:01:7d:3e:d1:c8:ac:9d:5d:09:0c:03:eb:d4:4c:
e7:25:95:6f:07:58:07:59:3b:2a:8e:f9:0a:d2:e4:
12:ad:cd:77:40:75:67:5c:65:a7:b9:79:31:ee:06:
cc:2c:1f:cd:99:d2:48:e9:41:7a:1c:df:47:1b:52:
b5:97:7f:2c:1a:53:e3:60:c2:11:ad:f2:35:e8:43:
67:fd:a3:d4:72:66:bf:a8:94:d3:de:c8:40:91:cf:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6F:D9:5B:2B:96:95:ED:33:84:3F:D4:1F:E1:74:E1:A4:86:E7:A5
X509v3 Authority Key Identifier:
keyid:C5:FF:7F:2E:2C:D4:AB:61:28:A3:12:20:A5:30:41:A9:49:A5:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5c:24:b5:d6:1f:78:fa:bf:94:b3:68:ee:f0:34:8d:38:6f:
6f:e0:f2:bc:c4:98:4e:57:b4:df:b7:4a:fb:89:3d:c3:f4:0d:
40:a4:ab:55:61:07:e5:88:af:e7:ad:63:87:37:66:a6:93:0b:
f8:de:c9:e9:99:8b:b5:ce:dc:77:03:e1:03:7b:2c:5e:6f:48:
7d:63:af:4e:dd:83:a4:7e:15:c3:99:49:20:1f:30:30:3e:d2:
e9:23:27:be:80:ee:b4:27:91:bb:a4:d3:bd:2f:96:1f:b8:86:
28:c4:02:18:7d:47:b3:48:92:75:7a:d3:53:18:c3:86:8d:92:
fb:4e:a7:e9:19:95:5c:a2:c1:8b:2d:12:aa:f7:07:e0:e1:4d:
5f:2e:fb:e9:ad:cf:5c:47:e7:a6:bd:99:5d:13:80:52:6d:76:
1f:d3:29:99:cb:77:14:a4:23:d9:1e:a1:4e:33:fa:d4:56:c6:
2d:3c:66:a1:3d:da:62:0c:a2:2d:9f:be:8d:d0:e7:1f:06:db:
77:26:5a:a7:3f:4a:d3:71:b3:85:5d:c7:3f:4e:9a:53:8e:20:
3d:3b:bc:55:f7:1c:18:37:72:73:fd:ec:4a:35:54:9c:10:80:
bf:9c:ec:b8:dd:16:86:bf:47:7e:e7:65:18:07:8f:6c:b3:48:
98:dc:46:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:21 2026 by rpki-client