Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json)
Hash identifier: KFL23GxSrouZjT0Qas42If7iCLE0BQb3OHPx3P+vEew=
Subject key identifier: 62:2D:2C:A4:7C:88:87:FB:5F:DA:4D:D5:0A:B0:96:D5:A4:3D:5C:23
Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610
Certificate serial: 019D386680CE217AC672C680CA8E61C32E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
Manifest number: 0F6F
Signing time: Sun 29 Mar 2026 07:02:14 +0000
Manifest this update: Sun 29 Mar 2026 07:02:14 +0000
Manifest next update: Mon 30 Mar 2026 07:02:14 +0000
Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: pc2KnuyZYj45U/4EZdHHInzUyWfTcf5y+B9s/NYljy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:80:ce:21:7a:c6:72:c6:80:ca:8e:61:c3:2e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610
Validity
Not Before: Mar 29 07:02:14 2026 GMT
Not After : Mar 30 07:02:14 2026 GMT
Subject: CN=622d2ca47c8887fb5fda4dd50ab096d5a43d5c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:5b:80:59:95:04:88:8a:11:b8:c5:f5:31:
e3:6b:80:d3:cb:12:26:ff:31:b6:34:23:04:6a:90:
fe:47:4b:26:e9:fe:b0:d4:98:c1:c4:ab:39:01:3b:
18:66:a5:39:12:06:5b:cd:8f:c7:99:84:7e:e3:43:
2d:07:86:0d:7f:e9:6f:48:f5:41:be:37:66:25:2a:
3f:a5:00:67:c0:eb:58:b8:ea:aa:0e:03:2a:01:3d:
bd:98:af:dc:6c:a2:9a:b8:bb:c0:32:42:2a:2a:13:
43:b1:25:a1:70:d9:fa:29:14:7e:43:1c:a3:41:cc:
01:17:e1:37:17:b4:c8:b9:95:61:40:20:df:a1:1e:
97:d7:de:dd:55:77:8e:68:29:c1:c1:be:e8:4b:fe:
3c:3a:7e:84:16:8e:99:aa:17:dc:6c:7e:b1:a5:3f:
67:3c:42:77:11:06:32:b6:8e:61:37:01:59:e6:cd:
41:24:49:d7:e4:6f:ff:4e:d3:12:85:3a:6b:87:25:
cd:43:96:1e:d1:1d:86:14:94:64:26:3f:5e:0c:26:
7d:cf:3d:85:ba:8d:32:b2:b2:62:ae:88:55:46:41:
f2:b6:13:f7:e4:49:69:eb:79:46:32:fe:da:8d:9e:
5f:9d:81:a9:c5:7c:b9:44:4e:61:11:38:73:10:cd:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2D:2C:A4:7C:88:87:FB:5F:DA:4D:D5:0A:B0:96:D5:A4:3D:5C:23
X509v3 Authority Key Identifier:
keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a9:a6:3e:58:e8:35:bb:29:b7:44:b8:3f:2b:88:ea:c8:12:
25:e5:ca:32:32:a0:18:f6:67:ed:bc:14:a5:83:0b:0f:a8:25:
5f:63:3c:aa:67:4c:5e:86:39:37:07:13:2b:97:97:bf:c6:f8:
68:d8:96:60:8f:f9:a8:4e:2f:bf:63:c4:56:89:ee:dd:98:7d:
fa:60:39:2f:57:15:b6:94:0c:7e:35:12:04:11:0c:ba:fb:28:
36:a9:0f:29:dc:de:81:3c:05:f3:de:93:01:40:43:04:94:21:
a1:45:52:e9:60:32:99:e3:10:25:5c:54:e2:b1:93:4f:6b:d5:
84:07:f2:22:74:09:b5:9e:7d:e9:81:9b:9d:08:14:f2:4a:09:
c1:df:17:57:bb:3c:3a:81:0c:46:ed:76:0e:93:da:cc:bc:86:
20:6f:77:7a:04:c7:b3:1b:2d:dc:10:7f:18:28:1e:80:37:5f:
c6:a7:04:7a:22:1e:e8:f5:ef:4e:13:c2:b0:27:4b:65:73:e7:
20:b4:7c:2c:91:18:28:02:09:4b:63:42:8d:1c:43:d4:e9:08:
f5:10:3d:15:72:cf:18:51:25:12:2a:c1:0f:6d:7c:89:39:59:
57:ad:12:15:2e:60:8c:5a:49:21:7b:ff:dc:93:b5:9c:4e:c3:
0f:1f:57:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:21 2026 by rpki-client