Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
File: XJF3tPVOZX44dlbmc6-MDuCmCRc.mft (raw, json)
Hash identifier: yuZ+AbQCKlAajJh89pu95YR80mvJUFTT9IMlOSwd2SU=
Subject key identifier: C3:56:33:4C:2E:43:53:DA:4A:F3:A8:43:6F:D0:C1:76:1E:35:3C:7B
Authority key identifier: 5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
Certificate issuer: /CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Certificate serial: 019D38D3A711902751EAEEFF9C258397D5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
Manifest number: 0436
Signing time: Sun 29 Mar 2026 09:01:27 +0000
Manifest this update: Sun 29 Mar 2026 09:01:27 +0000
Manifest next update: Mon 30 Mar 2026 09:01:27 +0000
Files and hashes: 1: XJF3tPVOZX44dlbmc6-MDuCmCRc.crl (hash: 9Vp1FVIwuWsS4511FnSKGe7JbD1wyEcJmVS/5kxrV8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a7:11:90:27:51:ea:ee:ff:9c:25:83:97:d5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Validity
Not Before: Mar 29 09:01:27 2026 GMT
Not After : Mar 30 09:01:27 2026 GMT
Subject: CN=c356334c2e4353da4af3a8436fd0c1761e353c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:df:33:50:18:b8:51:b2:57:8f:4a:aa:26:
46:6e:36:7f:f7:97:33:29:41:d1:7f:23:78:af:f5:
d0:14:76:83:3f:a2:d2:ed:72:47:e1:9e:d2:7e:33:
d7:da:8b:8a:da:3f:2f:a8:ba:ab:ef:3c:21:46:7c:
83:75:a7:52:61:00:26:31:2a:f5:7c:ba:3a:2a:e4:
07:24:79:dc:ea:21:b2:12:1c:1e:5f:7e:27:86:ff:
44:bf:df:0d:c2:03:75:f2:9e:13:55:a9:35:60:47:
1f:9d:78:5b:15:45:06:ac:b2:e3:a2:65:b3:94:7c:
bd:a3:87:84:14:dd:b9:ba:7a:fe:6c:ad:0d:03:08:
cb:8b:92:17:a5:b4:c2:53:80:54:fa:b3:be:e7:ed:
44:28:60:fe:d8:78:de:f4:da:8e:04:97:1c:26:0e:
c1:82:80:ed:58:77:db:3e:c5:1d:ea:f7:b1:09:d7:
e6:ad:47:3b:d4:63:f2:30:ad:e2:71:37:dc:07:ea:
5c:8d:73:20:48:8b:2c:f4:d4:c8:0a:ff:86:c2:69:
c5:07:41:05:dc:4d:14:f3:c0:b9:6e:f8:1e:5e:07:
e4:2e:14:be:36:b9:a0:f4:6a:a6:c3:10:68:4d:a9:
31:7f:7e:76:95:ac:44:a7:ee:91:20:a4:54:78:3a:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:33:4C:2E:43:53:DA:4A:F3:A8:43:6F:D0:C1:76:1E:35:3C:7B
X509v3 Authority Key Identifier:
keyid:5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ba:27:35:48:09:dc:3f:e4:98:76:1d:26:e0:e2:81:70:0a:
ff:c7:4b:7a:97:d9:a9:5f:95:02:45:d6:d9:17:9f:54:6d:0b:
68:ac:6f:8d:6a:1f:6d:fd:0f:95:db:b8:69:c2:a1:6f:3a:9b:
1e:6e:34:b5:15:5e:6e:02:af:80:8f:c7:ec:f8:ef:ff:3c:c7:
b6:79:0f:11:1a:bc:87:6d:e7:3f:7d:2b:02:b4:04:67:aa:ec:
ca:d8:9e:e2:01:f1:09:d3:35:54:5f:14:e1:bd:2a:8c:02:d2:
d3:11:3e:49:bb:77:17:d8:c5:3d:5b:b3:a2:4c:f9:be:c7:6f:
d9:9e:a9:1d:e1:42:2d:39:d3:20:5b:57:b1:c3:d3:bf:cc:37:
55:ba:0e:75:94:5c:32:e0:12:62:4f:8b:af:dc:cc:33:03:09:
be:c8:75:d6:7c:bc:85:25:36:ad:05:f6:b3:52:75:ec:b8:a6:
a6:a1:fc:df:2b:74:1b:e5:47:72:dd:98:22:77:c2:29:0d:b4:
65:79:d3:d7:aa:8c:15:97:80:82:be:87:f1:f2:ec:8b:be:ae:
57:26:61:54:ca:7d:f7:7f:0f:2c:a0:31:bc:8c:6d:f2:e3:4c:
06:a2:e1:61:e4:1a:b8:c9:dd:ee:a5:d7:02:cb:9e:d7:bd:c9:
51:d6:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:01 2026 by rpki-client