Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
File: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft (raw, json)
Hash identifier: PSbkmRNqxhYKl9Kv/sC3OnflClsDuKeHnrUYajN2vak=
Subject key identifier: 7F:CF:F3:13:9B:B4:7E:C9:A1:26:31:44:56:63:FD:96:61:BD:A1:36
Authority key identifier: C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
Certificate issuer: /CN=c618f03f9874370653aa3a026f6707c2e0e74764
Certificate serial: 019D37521FCB3F484A1F705E0BD88BB5681C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
Manifest number: 0973
Signing time: Sun 29 Mar 2026 02:00:22 +0000
Manifest this update: Sun 29 Mar 2026 02:00:22 +0000
Manifest next update: Mon 30 Mar 2026 02:00:22 +0000
Files and hashes: 1: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl (hash: 8K0CP7wnxqDpZI4RtXytT/R97wJSMtIZLq3Ud10p9bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:1f:cb:3f:48:4a:1f:70:5e:0b:d8:8b:b5:68:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c618f03f9874370653aa3a026f6707c2e0e74764
Validity
Not Before: Mar 29 02:00:22 2026 GMT
Not After : Mar 30 02:00:22 2026 GMT
Subject: CN=7fcff3139bb47ec9a12631445663fd9661bda136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:06:6f:92:8e:ab:6b:51:d8:59:e9:9f:8c:56:
b6:e6:2a:06:05:55:6a:ab:a8:12:26:53:ae:88:9d:
bf:8e:55:3f:be:18:dd:61:e8:72:f3:ac:90:45:34:
d2:97:57:6c:28:1e:62:45:85:61:18:4d:f6:2e:fd:
cd:0f:aa:be:b4:d4:85:92:87:2d:06:fe:57:8d:5c:
75:44:05:b8:d2:11:4b:34:d4:8e:19:a8:d4:25:db:
a0:9a:87:f9:fe:d6:ef:2e:ab:af:67:04:14:10:bf:
d3:54:c8:39:20:e6:cb:f3:f6:a9:b5:3e:9f:f7:f3:
90:59:fb:d2:85:31:6d:93:5d:e7:3f:29:8c:01:b9:
22:e5:1e:d4:53:89:16:92:8a:c4:05:75:2e:8b:e1:
93:e8:27:ee:23:3b:27:f3:97:b6:6f:96:06:b6:10:
da:38:c8:bf:6f:01:39:5e:34:00:d2:cd:d3:6d:ff:
2c:89:0d:56:f0:02:36:d2:5c:1a:b2:a4:d3:1f:4c:
58:41:73:64:b4:b8:30:81:48:c1:59:14:33:30:5b:
90:79:45:13:4d:b0:b8:60:72:77:4c:b4:9d:0b:89:
d4:af:bd:d5:89:c6:26:7c:fc:32:13:a1:d4:72:9e:
0b:aa:dc:b5:77:9a:92:f7:a1:b0:fd:10:9d:16:ff:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CF:F3:13:9B:B4:7E:C9:A1:26:31:44:56:63:FD:96:61:BD:A1:36
X509v3 Authority Key Identifier:
keyid:C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:95:84:a4:75:50:2c:a7:a7:71:be:2f:7f:de:85:90:a7:bb:
9a:75:69:f1:eb:c5:f4:24:67:37:c5:3c:f2:5c:a0:22:23:c2:
45:23:72:51:c6:d1:2a:55:1d:1e:13:2e:b5:68:47:d0:fd:a3:
0d:46:4f:f9:fb:ac:3f:fc:c1:c8:29:2a:8b:2a:dc:c9:9c:25:
56:f3:e6:31:08:cd:9f:b3:e0:86:7c:05:9c:60:a5:6b:c9:19:
d9:75:53:d1:92:ed:5f:17:b7:c7:48:5d:20:0d:f7:00:79:8e:
7c:3a:32:39:74:99:ad:95:8d:88:a2:4e:d1:7b:7f:a0:42:80:
04:c7:1d:72:00:4c:61:39:9f:58:be:2a:68:68:45:28:9c:a7:
c2:0d:ba:ca:7b:db:55:aa:7d:4d:6c:2e:71:f5:e3:3d:e1:d6:
30:fc:57:0b:2b:39:fb:e4:9a:5d:99:31:fb:fb:f3:d7:8f:dd:
02:02:f6:ce:41:78:c6:eb:9e:97:eb:93:05:e7:d1:cd:a9:5d:
f3:da:2d:df:42:92:ed:78:12:c3:9b:eb:df:5b:ad:9c:e7:45:
92:d1:48:8f:49:92:44:7c:52:0f:3b:de:9d:51:68:ab:f1:e6:
d5:a2:37:81:94:45:65:15:db:70:41:23:f0:8e:bb:35:f6:b4:
1a:62:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:41 2026 by rpki-client