Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File: C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier: 64SwXJ7sF23sYf5qXAGxTO8Gh1MWAs+YBVDOcYy5oyI=
Subject key identifier: EE:40:E1:E5:35:31:5F:E1:09:13:07:27:BA:BF:D8:01:0D:6F:5E:3E
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer: /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial: 019D38D3072FC99270D8B2175FD7E9E47E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:47 +0000
Manifest this update: Sun 29 Mar 2026 09:00:47 +0000
Manifest next update: Mon 30 Mar 2026 09:00:47 +0000
Files and hashes: 1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: lSk7NxnIhVTmoLMM3GmQtorzfYJ5S6KsA13v2VtRl9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:07:2f:c9:92:70:d8:b2:17:5f:d7:e9:e4:7e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Validity
Not Before: Mar 29 09:00:47 2026 GMT
Not After : Mar 30 09:00:47 2026 GMT
Subject: CN=ee40e1e535315fe109130727babfd8010d6f5e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:e8:c0:8d:17:99:30:ed:f0:c5:4e:3f:4e:
bd:c9:02:2a:6a:a7:f1:c4:a0:f6:5c:04:c6:d4:11:
eb:be:cf:ff:70:88:a9:7d:9b:aa:6d:69:a6:9c:83:
48:23:12:15:2f:03:03:82:3a:81:58:9e:2d:37:7b:
8d:60:6b:2b:f9:f3:09:9c:7d:13:dd:f0:ef:78:1f:
a5:78:8d:8c:b4:b0:26:df:5a:87:67:37:ec:b8:6b:
98:3e:c4:0e:81:07:1c:65:f4:7c:98:4d:c6:f2:c3:
a0:16:85:c6:60:a1:5a:03:ee:d0:5f:a4:9c:8a:8d:
f7:e8:e7:85:45:e8:75:81:5b:cd:0f:7c:84:3f:f7:
9e:c5:8a:67:38:2e:2f:8c:35:0d:8d:1d:8e:71:4c:
8b:c4:7d:18:76:a0:44:86:bd:c7:a7:ba:9e:94:91:
f4:d8:c3:7f:40:20:a6:00:78:f4:33:c5:00:dd:51:
48:62:98:ef:b8:cf:ab:c3:48:91:7d:98:25:3a:7c:
93:13:6a:b1:06:19:58:e4:4d:62:a0:de:8c:e3:12:
20:e5:0b:b9:a3:bd:35:02:db:ba:70:4d:28:05:38:
f9:f0:97:2a:ef:38:73:62:b4:36:98:11:a2:79:7b:
d2:98:76:51:09:a1:8e:85:8b:53:26:d9:2e:96:ad:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:40:E1:E5:35:31:5F:E1:09:13:07:27:BA:BF:D8:01:0D:6F:5E:3E
X509v3 Authority Key Identifier:
keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0c:fa:4f:05:8f:b0:8e:d9:21:f3:3b:f5:c3:3a:2d:e4:c5:
e3:ec:cc:45:e5:9e:70:e7:54:91:8b:7d:5f:93:94:f8:e2:f3:
51:f8:35:6f:24:29:54:35:e5:1b:cd:c1:53:38:58:fe:bb:6b:
61:aa:7b:10:2e:e3:87:59:be:3b:02:43:ff:15:b3:4b:46:b1:
bc:bb:c2:a9:53:dc:1e:6b:cb:e8:91:72:0c:1f:eb:3c:d1:c8:
01:b8:3c:f4:cc:8f:9f:f5:60:4a:f5:4a:70:22:80:3f:04:40:
10:ae:0d:8a:87:50:c3:4e:08:27:a7:15:cd:02:e2:25:11:76:
4b:90:c9:6a:6b:1f:d7:ee:6b:0c:a4:7a:f4:67:e4:e0:47:e7:
0c:c9:1c:14:92:d0:e2:4d:6d:9a:5d:92:3b:90:95:2f:2e:be:
80:c4:aa:8c:18:30:1f:8c:6c:9d:0a:05:a3:39:c2:c5:28:01:
fc:3d:f8:7f:b0:a2:66:86:42:b8:fb:80:33:92:bc:36:fb:36:
4b:3f:bc:ec:a3:6c:1b:9f:c3:9e:b6:ae:b3:13:aa:30:c5:0a:
cf:cd:ac:05:c6:d1:67:0c:2d:b2:f8:fd:ec:c5:3d:e7:3b:36:
a3:44:87:b1:cc:29:96:51:19:0c:9f:8a:dd:5e:49:49:0d:41:
c1:f7:93:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:11 2026 by rpki-client