Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft
File: X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft (raw, json)
Hash identifier: wLfE9iLdvb4Q0ypxDSM+0ep8K19pneG3hSfPlFH+tYk=
Subject key identifier: F5:28:6B:6E:76:21:E6:17:EE:EE:75:73:4A:C2:78:64:52:FD:16:91
Authority key identifier: 5F:B4:FC:39:D5:28:F4:92:0E:21:8B:55:67:D4:16:46:3E:8A:73:99
Certificate issuer: /CN=5fb4fc39d528f4920e218b5567d416463e8a7399
Certificate serial: 019D37F72178578E44594437892A867E0320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft
Manifest number: B2
Signing time: Sun 29 Mar 2026 05:00:35 +0000
Manifest this update: Sun 29 Mar 2026 05:00:35 +0000
Manifest next update: Mon 30 Mar 2026 05:00:35 +0000
Files and hashes: 1: X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.crl (hash: IDj4RQeCDTmR+KaGC4YgQnrt543Kb2WmOKf224tKdns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:21:78:57:8e:44:59:44:37:89:2a:86:7e:03:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb4fc39d528f4920e218b5567d416463e8a7399
Validity
Not Before: Mar 29 05:00:35 2026 GMT
Not After : Mar 30 05:00:35 2026 GMT
Subject: CN=f5286b6e7621e617eeee75734ac2786452fd1691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:88:72:bd:44:a3:87:5a:3d:b8:a3:fa:50:
38:71:2a:8c:32:b2:64:ee:8b:f6:7a:3c:f7:ec:59:
88:ef:8f:f9:e7:00:53:23:d2:ba:fb:63:4a:30:df:
f2:bc:46:46:48:fb:fa:14:ad:ec:23:e0:f9:5c:ce:
49:54:85:40:51:f9:69:5a:2e:32:87:0d:82:b7:a4:
ad:3d:f2:f9:44:96:c3:80:29:70:6a:cc:e5:d3:53:
1c:92:2e:bc:88:19:10:58:77:62:69:f9:8f:5d:de:
e3:3d:dd:53:99:26:d2:28:3c:40:a2:7f:55:71:16:
74:b9:ce:2b:a1:e3:63:5c:5a:63:24:60:52:89:85:
85:dd:76:b0:47:ed:d6:07:ab:cc:45:03:a1:1e:76:
dd:3f:7b:b3:e9:5a:52:b2:04:08:4e:be:03:37:50:
10:62:e6:52:75:2f:18:c6:cc:2d:e7:d5:17:a4:26:
46:41:ad:67:64:9a:f5:60:fc:7a:1d:91:e0:ed:83:
12:b7:3a:8b:3d:ac:e2:99:f7:08:88:d6:a8:ba:b7:
a4:38:c1:0d:2b:a2:01:f4:3e:a3:df:e8:0a:0e:0b:
00:a1:86:90:0e:9f:07:23:f7:df:f6:cc:35:1b:dc:
f9:41:f6:20:29:97:6e:b5:7f:1a:66:76:97:7f:d2:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:28:6B:6E:76:21:E6:17:EE:EE:75:73:4A:C2:78:64:52:FD:16:91
X509v3 Authority Key Identifier:
keyid:5F:B4:FC:39:D5:28:F4:92:0E:21:8B:55:67:D4:16:46:3E:8A:73:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:67:ab:43:fd:42:b5:ce:66:d5:89:35:d0:e3:ce:02:c8:5a:
3e:6a:10:92:87:14:c6:55:55:38:ea:b4:86:20:32:88:ce:9e:
f1:b8:b2:6e:e9:5a:e4:94:8a:c9:df:e1:81:97:df:14:fb:89:
e8:90:eb:aa:da:29:87:1f:cb:64:57:37:83:89:06:08:14:5b:
ae:1b:dc:21:0b:8f:97:a7:52:46:c6:03:eb:2d:e0:b4:71:43:
86:59:90:08:6b:e0:c6:ab:f7:a9:51:20:52:30:9b:b4:ca:3f:
0b:75:4d:df:55:85:23:51:99:6d:74:8a:8c:60:2d:40:1b:72:
fa:1c:c1:e3:27:04:59:30:fe:aa:90:44:d5:a6:58:67:f0:0f:
74:f8:d9:16:2d:dc:30:1a:24:ea:aa:10:24:16:65:02:f9:3d:
be:02:57:c8:c3:e1:b0:8e:2a:32:4a:4d:60:62:8e:6b:c6:53:
a7:f3:2b:e8:44:64:e9:7c:42:09:59:cc:db:83:63:d9:3b:48:
da:6f:52:b6:b7:21:0d:d9:27:45:1c:e4:66:61:54:cb:fb:74:
60:90:ec:04:82:ae:86:42:28:6e:f6:98:2e:2e:d5:b5:c7:e5:
8a:a6:c2:bc:a6:d4:8e:ac:30:9e:35:a2:c2:3c:57:97:f2:eb:
39:5e:b9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:56 2026 by rpki-client