Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: S4PR+L5nzdT8gAOOmobYcNuNHoht1gr2n/2m9rdcKjk=
Subject key identifier: E3:5C:3A:55:8F:1D:98:60:11:3D:AA:A0:0C:E5:98:C7:29:7E:D1:F7
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 019D3866A4C83C128B0161CB98A94E27DDAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 0C4B
Signing time: Sun 29 Mar 2026 07:02:24 +0000
Manifest this update: Sun 29 Mar 2026 07:02:24 +0000
Manifest next update: Mon 30 Mar 2026 07:02:24 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: f/NMsw9Tpe4m+oOQdfhOSSgLgaqQgbX/5bIl/ymurfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:a4:c8:3c:12:8b:01:61:cb:98:a9:4e:27:dd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: Mar 29 07:02:24 2026 GMT
Not After : Mar 30 07:02:24 2026 GMT
Subject: CN=e35c3a558f1d9860113daaa00ce598c7297ed1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:d7:66:1d:81:85:33:7d:21:5f:8e:81:43:
d6:ce:64:97:6e:a5:74:5a:6c:0d:58:f9:3a:db:c4:
5d:9a:c4:f3:bb:91:68:24:74:94:f3:67:ff:49:d1:
3b:34:d7:45:f2:01:4a:87:35:60:ee:fd:24:9e:f2:
84:55:b1:87:4a:6b:c3:a7:b1:ab:22:06:1a:27:95:
be:c9:cc:2d:f6:1a:b1:51:ba:fb:04:2d:8d:84:c6:
b4:0c:89:19:0d:3a:05:9a:05:41:d4:7e:57:f1:7e:
f0:f4:3d:67:ef:50:ae:0d:b8:eb:e8:b8:38:e8:63:
15:af:cd:02:d0:30:3b:56:bb:6f:a3:de:c4:17:52:
e7:38:53:51:30:4a:2a:b4:5a:af:b3:60:17:61:82:
05:78:09:19:71:8f:77:18:30:60:c2:dc:35:26:75:
6c:29:f9:a4:57:82:a5:d3:ce:24:79:98:fb:71:08:
97:af:5c:32:25:e8:c7:d0:ff:8d:39:c3:7a:13:e9:
be:cf:54:64:bc:14:24:0d:84:ac:ea:96:fb:55:83:
64:91:9c:7b:1e:55:df:52:e9:aa:ce:ba:66:bd:f8:
85:75:d5:96:6c:b5:dd:4c:33:72:8f:bd:46:78:ec:
f2:a2:76:8c:65:f9:62:64:72:c4:ce:9a:ea:51:0f:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5C:3A:55:8F:1D:98:60:11:3D:AA:A0:0C:E5:98:C7:29:7E:D1:F7
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d2:d1:6c:77:61:31:17:1c:6d:56:0e:43:7c:cc:dc:19:9e:
9a:f0:89:c6:6e:ec:19:c3:45:e7:cb:94:61:50:6b:1b:10:14:
e7:70:18:cb:ca:f6:f3:76:ba:d9:71:2d:6c:42:46:2e:58:43:
b1:0b:49:22:33:1c:52:49:a7:d2:fc:00:09:55:e6:7e:86:df:
7b:50:5d:ba:7c:ea:a9:56:e8:83:db:13:59:8c:8e:93:6c:a1:
b4:c1:52:dc:34:b8:dd:4d:12:cb:80:ab:42:c7:3e:19:d9:cc:
8a:e5:44:9f:82:1a:5d:87:25:37:d1:ca:9b:75:b2:76:10:c0:
8c:d3:33:d8:a0:9d:1a:03:27:d5:f0:a5:b2:48:ff:3e:90:60:
06:4e:1a:74:e8:84:29:e0:f3:42:10:dd:31:88:2a:be:ca:68:
e4:11:17:95:8b:a2:a0:4e:3a:18:c5:d9:5c:f9:35:94:4e:3f:
53:8b:16:a7:77:d8:82:27:84:a2:1d:35:61:b0:1b:ad:2b:eb:
6f:45:e2:08:25:be:65:fa:16:6d:28:51:86:65:00:2a:00:6f:
5c:a3:d5:f2:c7:72:a0:bb:eb:f6:51:a6:f1:28:20:71:a2:0d:
4e:c5:a4:80:c1:db:b8:39:16:e6:3c:57:42:b5:52:2c:ca:32:
19:d7:9d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:50:32 2026 by rpki-client