Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
File: XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json)
Hash identifier: 0G1WFKgQZ2wxnRp+jR7SFsODihZ7YwKwXy7msgMNBlo=
Subject key identifier: 3D:84:B5:76:EA:37:E9:6F:FB:47:39:D6:A9:42:7D:02:78:F6:BB:EE
Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Certificate issuer: /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Certificate serial: 019D3A542B0CDFA161B3178A66737A93F3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
Manifest number: 181F
Signing time: Sun 29 Mar 2026 16:01:27 +0000
Manifest this update: Sun 29 Mar 2026 16:01:27 +0000
Manifest next update: Mon 30 Mar 2026 16:01:27 +0000
Files and hashes: 1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: XvmuyiwG74yPkLtkU3cB9OtamxFizxoxJxnORlJ1yik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:2b:0c:df:a1:61:b3:17:8a:66:73:7a:93:f3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Validity
Not Before: Mar 29 16:01:27 2026 GMT
Not After : Mar 30 16:01:27 2026 GMT
Subject: CN=3d84b576ea37e96ffb4739d6a9427d0278f6bbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:c9:71:b1:cc:d7:ba:f1:5f:97:70:a0:48:
23:4f:96:d4:0f:ec:29:67:05:fb:69:7a:e2:ce:42:
1f:0d:f0:02:20:8e:da:3e:1e:f2:6a:af:dd:2a:49:
e6:aa:8e:f1:f1:e3:c3:1d:3a:af:ef:39:e6:d3:4b:
5b:e4:de:52:54:71:2a:7b:16:1c:11:9c:da:ff:f1:
7b:50:9b:d1:5a:e2:7e:69:05:36:c2:b9:ea:f4:c4:
10:04:68:1d:85:db:c4:92:56:86:cc:d3:b5:93:01:
f7:61:d8:10:ed:77:59:70:fe:f7:36:fa:ab:3e:b0:
f0:bb:5b:0b:7b:c4:31:b8:f2:8f:f1:9c:ca:14:82:
dd:0c:ac:5b:fb:a7:92:b7:b7:7e:ee:2f:75:c0:05:
7e:25:db:11:d3:c3:3e:34:9c:a2:32:39:a6:09:7d:
22:ab:bb:05:1e:c1:f5:7b:bf:50:3a:67:6d:2b:5b:
20:f7:87:2e:8e:67:03:c5:6d:0e:a6:25:7a:94:6a:
64:0f:f8:bb:cd:53:35:07:d0:4c:72:09:5f:fd:40:
99:9d:d7:79:f8:f2:cf:1d:69:41:b6:6d:0b:7f:f4:
aa:6a:15:ae:ab:ad:c2:13:00:e2:25:8e:a9:d0:17:
5b:10:98:96:e5:8a:4c:55:12:9c:b5:97:6b:f0:ea:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:84:B5:76:EA:37:E9:6F:FB:47:39:D6:A9:42:7D:02:78:F6:BB:EE
X509v3 Authority Key Identifier:
keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d9:13:2a:98:3f:8a:c3:32:8e:61:86:2d:a1:38:07:b7:d9:
11:89:1b:66:1a:2a:4a:a6:76:f6:3b:a6:77:05:25:ab:5c:7d:
c1:a6:22:c8:0c:90:b6:47:13:22:43:b6:ee:30:de:c9:c1:77:
25:38:b4:e4:48:98:d9:11:79:b5:72:d9:14:53:c7:a3:03:cb:
3f:f6:b2:cf:25:a3:85:7d:6c:c0:82:b4:4c:ca:77:73:58:c7:
26:79:31:99:37:c8:94:93:74:41:f2:7d:de:f3:28:c8:fa:85:
b5:09:f1:ee:cb:c2:9e:2a:59:1d:64:2c:5a:be:ad:f5:f4:6f:
e3:d6:22:db:91:63:30:65:dc:49:38:52:97:dd:d6:bd:c4:88:
5b:a6:b1:83:57:45:dc:63:ff:99:54:b8:2c:37:2a:23:6d:5c:
d3:e4:9c:e5:c9:22:af:67:33:39:a6:bb:05:fd:1d:ea:2f:aa:
20:e8:33:98:d8:f0:70:7f:9e:36:29:5d:d6:91:04:02:09:c6:
d3:da:f5:23:10:3e:d6:50:50:c1:c4:1c:1b:0e:90:b2:87:76:
d8:3c:6c:82:f7:a2:09:c5:40:2e:f0:9f:d2:44:e3:ca:44:e3:
64:3d:be:90:23:72:7c:f2:10:63:80:bf:8c:44:17:18:50:ad:
3a:8c:b5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:23 2026 by rpki-client