Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File: C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier: ubNxxeTsivXvp45RcxILCdBED9iJq3OT8LgLgC0MKAc=
Subject key identifier: C0:AB:15:8D:D1:FF:93:20:BC:1F:33:D1:C6:79:EB:4C:B4:66:BF:92
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer: /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial: 019F17C3604883801515FDD4CB6203CD5F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 09:01:47 +0000
Manifest this update: Tue 30 Jun 2026 09:01:47 +0000
Manifest next update: Wed 01 Jul 2026 09:01:47 +0000
Files and hashes: 1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: 2ECfNizuSalbrJdCX2660aggthBvv6rBCnBJwHM2vHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:60:48:83:80:15:15:fd:d4:cb:62:03:cd:5f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Validity
Not Before: Jun 30 09:01:47 2026 GMT
Not After : Jul 1 09:01:47 2026 GMT
Subject: CN=c0ab158dd1ff9320bc1f33d1c679eb4cb466bf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:6b:09:8e:ee:b4:15:43:62:65:d4:ff:79:
f0:43:7c:81:99:07:f6:8e:6d:46:bc:4b:3a:9d:7b:
04:e2:5f:be:8e:08:b9:27:93:7c:95:7e:65:0a:22:
70:3f:1b:1d:d2:19:04:e1:5f:5e:58:c8:8c:cb:23:
f2:28:33:4d:aa:bb:36:a0:af:10:a5:93:f1:1e:92:
19:a3:b9:0b:43:da:ac:44:75:ab:bf:99:03:1a:ff:
80:8b:47:fb:d7:d8:61:92:81:4d:10:18:63:13:b4:
fc:22:e5:89:9a:db:cb:54:fc:cf:19:cd:87:aa:38:
30:f3:62:c2:f3:6b:87:f0:c5:ce:d3:75:f0:bb:9d:
40:4e:1f:89:95:6e:a0:44:1c:6d:97:1a:a8:0b:f9:
f8:3e:22:61:fc:52:50:68:15:a2:22:93:c5:0d:41:
9d:1a:92:eb:b4:d3:78:61:59:e7:00:85:41:de:3d:
82:5e:39:c1:33:43:14:9b:a9:9c:30:dd:17:61:26:
0a:1a:a8:c5:58:8f:c3:6a:c8:41:7c:30:db:14:e5:
bd:ec:49:20:db:d4:39:99:7f:65:06:71:43:a6:ac:
f3:b9:14:b6:94:09:c6:bb:5c:d3:34:40:17:0b:d6:
8e:9f:56:9a:7a:f9:a5:4a:97:df:14:27:43:f2:ea:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AB:15:8D:D1:FF:93:20:BC:1F:33:D1:C6:79:EB:4C:B4:66:BF:92
X509v3 Authority Key Identifier:
keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7b:84:b3:f8:d0:b1:86:62:cc:00:70:18:cc:66:93:2f:77:
fc:e7:67:c9:46:03:b0:ea:23:29:37:76:e9:b5:3c:b1:41:da:
ee:f8:7f:4b:3a:e7:6f:78:6e:63:fb:6f:36:21:97:79:ba:cb:
89:48:da:f5:90:61:37:26:3f:5f:0b:3e:bb:e7:80:77:80:c8:
3a:0c:c9:a4:7b:fc:ed:e8:1c:9f:ee:0f:09:51:8c:05:df:42:
fe:bb:da:76:9c:aa:1d:0e:1a:e6:6c:9e:17:27:e8:fb:72:2e:
0c:7d:38:48:6c:6f:b4:e4:32:9e:38:07:d7:43:33:61:6b:db:
d8:e1:67:a3:6c:62:86:4f:e4:db:c4:8b:9a:9b:82:37:d4:86:
e8:b3:62:b6:62:ed:fe:e8:4f:d7:4b:05:9e:86:25:8a:37:2d:
bd:66:10:27:0c:93:d2:40:00:a6:83:2d:20:30:58:98:8d:b1:
d9:69:30:6f:5e:69:ea:5c:80:a4:90:b3:7d:ff:a8:4b:a1:f4:
4f:c6:96:4b:6b:e9:47:1b:85:b0:67:70:40:ea:b2:4b:90:d8:
0c:06:af:da:1f:42:86:ca:46:bd:e0:7a:67:01:8f:26:06:1d:
2c:07:4e:08:4f:16:3e:0c:c9:ae:6c:25:ec:73:21:43:82:08:
27:cb:82:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:21 2026 by rpki-client