Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
File: x-0gqk1F1WHiTZJvWbF1J42bAcg.mft (raw, json)
Hash identifier: oCFkWXewGCRPZi0tgAA9ajHnlU6M9J0+ypbLfTdYztU=
Subject key identifier: DD:03:2B:EE:F2:F2:73:23:B2:34:33:5A:68:D2:C2:45:9D:BE:0D:24
Authority key identifier: C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8
Certificate issuer: /CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
Certificate serial: 019D37C08F6982DD53EBB55A0BF1A53C69E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
Manifest number: 14FB
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: x-0gqk1F1WHiTZJvWbF1J42bAcg.crl (hash: sShvj2GW1c2bxgQqZY/H0u0hRo5V+jy9Lz79LhjDx8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8f:69:82:dd:53:eb:b5:5a:0b:f1:a5:3c:69:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=dd032beef2f27323b234335a68d2c2459dbe0d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:30:41:bd:ec:21:af:53:60:d4:61:6b:3a:
5d:79:30:21:2f:4e:52:b0:a7:52:f1:3e:5c:f4:83:
56:23:93:e9:ea:74:00:2e:e4:ac:1d:4c:12:22:a9:
05:3f:94:83:2d:57:19:62:c9:28:ab:37:3e:00:01:
80:9d:65:dd:8a:fb:6e:92:43:d8:6b:11:8f:a6:ee:
b2:4b:32:70:ae:33:bc:04:b0:95:45:85:cd:73:2d:
08:a8:bb:9a:a1:0f:42:bb:ca:44:db:20:56:53:e7:
81:e3:99:44:af:8a:c5:24:dd:30:80:9b:70:91:56:
04:05:71:bc:1e:26:02:24:41:f6:5a:74:da:c1:b6:
c4:0e:45:ed:23:0a:c1:c5:29:42:04:7c:46:bd:f8:
52:84:40:47:4b:38:6b:30:40:b6:16:09:5e:59:1b:
e9:8a:18:af:0b:76:38:e5:f2:91:3c:aa:95:86:29:
c2:27:fb:e3:10:30:0c:5e:f3:e1:4e:7f:59:33:35:
1a:33:2c:c6:f7:e0:7b:12:e0:82:f0:f1:b1:a7:a7:
68:b4:2f:b5:28:09:30:c0:6b:da:fe:9d:14:73:65:
88:9e:a3:4e:5e:a3:9c:45:9f:61:84:73:11:e5:d2:
53:82:02:22:1a:8a:aa:4c:7a:46:91:ea:53:d9:e5:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:03:2B:EE:F2:F2:73:23:B2:34:33:5A:68:D2:C2:45:9D:BE:0D:24
X509v3 Authority Key Identifier:
keyid:C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ae:cf:ed:32:65:ac:d3:c8:84:1c:a3:6e:46:50:4d:ec:bd:
08:a2:0e:2b:0d:95:6b:e9:d2:e7:58:89:f5:7f:01:e1:33:4e:
77:e1:64:d2:9e:39:66:8a:f1:2a:86:08:6b:00:20:c4:26:4b:
14:84:67:ad:ce:b5:85:08:c0:89:50:2a:64:2c:78:b4:47:5a:
88:e9:6c:bb:0c:29:ce:19:4d:10:20:91:9a:a9:ff:89:da:d2:
a9:8e:26:3a:20:35:df:f0:fc:54:f1:53:cd:fa:df:8c:48:ab:
4a:3b:dd:5e:dd:0b:28:8d:ec:0e:a6:29:4a:44:95:3a:c4:10:
7d:51:5e:2d:35:1d:eb:b5:4f:64:ed:7a:49:96:8e:86:cf:6a:
8e:63:f7:88:ed:cd:f4:f8:69:c2:b3:82:7f:57:03:22:8f:70:
e7:5d:eb:d9:e1:45:ba:06:b0:b1:ce:62:4a:c0:2e:69:19:52:
60:d7:35:eb:e0:e7:f4:1b:ea:47:e2:08:f2:dc:8a:fa:fc:a5:
ba:7b:4d:04:02:0d:d1:69:78:b5:ae:a1:a8:bc:e2:1e:01:c6:
fc:b5:0e:aa:61:47:8f:39:bd:d6:df:30:c3:6a:83:75:ac:bd:
8f:b2:be:7f:1e:4f:84:38:11:e5:47:ee:0e:43:40:d9:3e:3a:
6e:bc:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:42 2026 by rpki-client