Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
File: X6FRijy1wnSeMNn_Icg3iJHOgSU.mft (raw, json)
Hash identifier: wVbxmlk/vLrHaiGeXUOkFQuRxMOKCuRtKGbwAElrzTo=
Subject key identifier: C2:59:22:51:D6:B2:18:D2:1C:ED:1F:69:B1:14:E4:0A:A9:92:13:70
Authority key identifier: 5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25
Certificate issuer: /CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125
Certificate serial: 019D38655E907F2371E480AF7ACCCDC2B4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
Manifest number: 0AFF
Signing time: Sun 29 Mar 2026 07:01:00 +0000
Manifest this update: Sun 29 Mar 2026 07:01:00 +0000
Manifest next update: Mon 30 Mar 2026 07:01:00 +0000
Files and hashes: 1: X6FRijy1wnSeMNn_Icg3iJHOgSU.crl (hash: 8U5exPchCbAM8hGnvtd0zSqJn0/CAP8pKWVupgHx4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5e:90:7f:23:71:e4:80:af:7a:cc:cd:c2:b4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125
Validity
Not Before: Mar 29 07:01:00 2026 GMT
Not After : Mar 30 07:01:00 2026 GMT
Subject: CN=c2592251d6b218d21ced1f69b114e40aa9921370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:cf:77:d1:69:9e:2b:9f:a4:bf:c1:9a:39:
2c:a0:20:9d:5a:b2:eb:b3:7c:de:ab:30:0a:d0:bd:
2b:ad:d7:20:e2:03:83:ca:9b:46:01:ec:e7:9d:de:
49:8c:d7:50:0e:03:f7:83:ba:6c:7e:91:cd:d6:42:
c8:14:4f:b4:05:a0:77:ad:e7:72:df:9a:5f:3c:71:
23:35:4f:e3:19:51:6e:8b:f0:c2:f2:ea:ec:b3:d1:
b9:1e:ff:72:99:e1:74:57:9d:7a:84:ff:8f:da:6a:
66:1b:1b:b6:1d:16:ed:a3:3e:81:58:e4:c6:33:33:
26:68:49:d6:ce:69:a3:64:6a:b1:de:1e:ed:53:b1:
50:e4:e2:04:3a:c5:d1:c4:0f:fb:bc:c5:26:35:68:
fe:99:d7:a8:26:47:3f:1e:a0:25:86:61:94:40:08:
51:51:8c:5a:df:42:c7:b7:6c:b7:74:47:d5:bc:09:
fe:56:80:f3:db:c0:e8:e0:c2:70:2d:94:88:05:7a:
e6:d5:b6:f0:0d:8a:ae:17:9f:ca:50:8f:e3:4a:7f:
9c:c4:84:49:94:ee:8e:1d:74:cc:4c:2f:15:8f:14:
ac:03:57:a9:9d:ec:31:e1:33:f6:9d:f7:26:77:9e:
ca:bf:e5:67:ce:e1:b8:94:3a:31:95:f9:5c:60:5e:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:59:22:51:D6:B2:18:D2:1C:ED:1F:69:B1:14:E4:0A:A9:92:13:70
X509v3 Authority Key Identifier:
keyid:5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a2:58:62:78:d2:7c:60:55:72:35:a5:11:2d:f9:df:d6:ca:
f6:ca:fa:b6:af:8d:07:42:59:b4:6f:1f:ce:11:0a:a0:c8:09:
c9:67:04:0c:50:6b:8b:7a:a4:f9:7b:0b:96:80:ae:56:38:ac:
b2:fa:94:3e:e2:e0:ed:0f:e3:dc:ac:bd:9b:d0:62:39:a0:9c:
62:eb:49:7c:15:1c:5b:65:dc:9e:d1:1f:83:46:e6:a8:11:57:
cb:6e:18:7d:4d:e4:fe:75:d2:91:01:f6:2a:2c:fa:39:b1:49:
d2:83:82:19:22:be:4c:7b:4f:e8:17:1c:49:74:5a:a9:ad:cd:
37:dd:47:e3:af:09:10:4c:d9:6a:85:23:d7:2f:c9:23:c1:f5:
ac:59:7a:ff:f1:1f:83:03:19:d2:c2:d0:0a:34:cb:6f:63:e4:
c9:07:36:44:86:10:f8:b9:a1:fc:77:27:9a:f4:d1:c8:fe:9e:
fe:d7:e5:55:60:cf:ef:39:5e:9b:ba:af:42:f8:a9:da:fc:7c:
29:22:03:67:5d:79:f4:65:ba:3c:b0:c6:7b:74:8a:f6:97:e8:
9a:89:da:cb:b0:ca:26:dc:c7:6a:50:7d:dd:6c:f7:ac:73:4e:
54:23:4b:ce:23:61:30:b4:49:97:85:7c:8e:03:03:16:e7:2a:
e3:a0:f5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:21 2026 by rpki-client