Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: gRPUwdcPKiX6vu3adxaeVNTalDam641IAh7YFITZ0Ew=
Subject key identifier: 45:32:48:49:3F:39:CB:1B:10:D2:6B:BE:F3:2B:A2:BE:38:C9:28:6B
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 019D27721852A9ABFCCF0BF36BE1773F3317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 17C0
Signing time: Thu 26 Mar 2026 00:01:21 +0000
Manifest this update: Thu 26 Mar 2026 00:01:21 +0000
Manifest next update: Fri 27 Mar 2026 00:01:21 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: caq7pvu2RBUBnPMgKqT1PZh3DZO1/86OX2hpsvOPLNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:18:52:a9:ab:fc:cf:0b:f3:6b:e1:77:3f:33:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: Mar 26 00:01:21 2026 GMT
Not After : Mar 27 00:01:21 2026 GMT
Subject: CN=453248493f39cb1b10d26bbef32ba2be38c9286b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:b9:04:f7:b0:50:eb:1f:a2:a4:46:ad:f9:
26:53:6e:8e:0c:ee:a5:e8:73:6c:8d:32:f3:72:9f:
65:e1:32:31:9d:60:dd:23:85:5c:3c:56:b5:c7:33:
61:a6:4a:ff:2a:49:51:8f:20:e8:02:b6:44:34:bb:
8a:17:a0:64:ca:fe:7e:75:cb:2f:bc:87:6b:e5:f1:
33:f3:d9:d4:aa:2d:29:49:ba:a5:77:e5:84:e0:90:
bf:09:a5:c7:62:51:2b:44:6e:d0:85:26:26:b6:f1:
0e:74:18:b0:ad:64:41:45:55:62:51:fc:f7:74:08:
d4:8b:6e:83:19:56:2b:f0:3f:28:a9:14:57:e6:55:
f2:0b:a9:c8:57:b2:c6:2c:f4:57:97:fd:a4:29:3f:
33:77:0d:36:3c:ac:11:84:9f:9b:5f:da:d5:d2:07:
ff:3b:1b:e1:6e:db:d4:b5:cd:17:e0:d0:45:09:ab:
0b:19:5d:8d:76:f6:30:42:c4:57:7f:05:fd:6e:02:
df:f4:0d:50:f9:a0:09:14:38:63:73:9b:fc:aa:6b:
88:dc:9a:a0:5e:75:74:e8:19:d0:dd:bb:dc:d6:1e:
ff:01:1a:43:d1:6a:df:2d:7e:fe:69:d7:38:82:9c:
2a:ca:9a:94:99:f7:af:bb:13:88:d4:d5:51:65:11:
af:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:32:48:49:3F:39:CB:1B:10:D2:6B:BE:F3:2B:A2:BE:38:C9:28:6B
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:41:ca:90:12:bf:57:3a:f1:f6:18:b0:bb:1c:33:59:81:b3:
82:43:c9:8f:7f:4a:7a:36:43:75:24:62:af:03:7a:1e:67:50:
28:dc:1a:3d:8c:08:8a:28:18:c7:25:9e:ab:0e:b1:18:76:6b:
73:8c:a0:c8:dc:9e:d1:89:64:97:cc:9f:c8:d4:7f:01:73:74:
9d:2a:d6:e9:d6:0b:b5:4a:e7:57:85:eb:59:cd:41:dc:2c:66:
f6:30:6d:8e:45:2c:29:0e:fe:b0:20:b0:ad:07:45:6b:a2:47:
f0:28:f8:8d:4d:ca:66:64:e9:0c:8d:4f:17:f1:10:ad:11:ee:
fe:5a:48:04:a0:57:69:0f:91:09:77:d9:ff:f8:91:39:65:5e:
ac:2f:60:6c:15:2e:62:e0:8a:5d:1f:2a:ea:97:d2:a1:2f:8d:
d9:d8:c7:4b:80:04:64:cb:68:af:b9:46:db:a3:37:d5:ae:24:
10:25:c8:9f:8d:d2:5b:ca:7d:02:61:19:87:e5:a4:cf:1c:e2:
d6:86:75:5a:88:49:d6:04:da:3a:b7:84:01:95:e2:69:d1:56:
d5:5d:55:91:fe:fe:ee:4f:ac:aa:99:d1:88:fe:49:fc:60:a0:
f4:e2:c2:e0:1c:67:6f:09:77:ea:cf:52:18:21:05:39:0e:fc:
75:f0:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:14:51 2026 by rpki-client