Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
File: rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft (raw, json)
Hash identifier: oDU9R7GrRpoNL1HkVlg5oF17eaA+koNPDFJYkWUVMxc=
Subject key identifier: EB:99:1C:E9:C8:C1:A1:02:5D:8B:D2:84:2C:BE:69:7D:D2:07:C7:E5
Authority key identifier: AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9
Certificate issuer: /CN=aec5c7ab5b72181e4e4211322215e9776b4900f9
Certificate serial: 019D2AA9D3643E4451E11879B4F1655BC0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
Manifest number: 0D85
Signing time: Thu 26 Mar 2026 15:01:05 +0000
Manifest this update: Thu 26 Mar 2026 15:01:05 +0000
Manifest next update: Fri 27 Mar 2026 15:01:05 +0000
Files and hashes: 1: rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl (hash: VmHcoW5PSHFaoL1PJLiEF+pXZbc11cO1OW4pF18q4/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:d3:64:3e:44:51:e1:18:79:b4:f1:65:5b:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec5c7ab5b72181e4e4211322215e9776b4900f9
Validity
Not Before: Mar 26 15:01:05 2026 GMT
Not After : Mar 27 15:01:05 2026 GMT
Subject: CN=eb991ce9c8c1a1025d8bd2842cbe697dd207c7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:53:72:99:89:f0:04:06:86:e3:0c:6a:1a:
99:5c:a7:21:b2:e6:77:52:83:ea:d2:c6:8a:60:63:
ab:f0:89:e0:aa:60:d4:70:47:3b:d0:5a:41:f2:23:
92:50:89:cc:b7:d5:09:1d:a2:79:ab:7e:10:03:a7:
42:3f:08:d2:a6:84:0e:27:08:21:70:cb:18:26:b6:
15:91:e9:b2:cd:ef:87:3a:15:82:8c:dc:76:e5:37:
2a:be:ba:06:53:c3:ed:a5:d3:5a:9b:87:e2:4e:90:
0c:4e:4b:84:aa:b3:ab:46:9c:e9:7f:d8:ee:04:c5:
1b:b1:cc:f4:f0:4f:a9:c3:d0:14:25:53:39:87:fc:
70:b9:04:5e:39:89:88:90:b5:73:0b:fe:d9:be:01:
88:a0:d3:2b:88:c4:f7:47:16:fa:4f:2b:7d:94:22:
eb:d9:2a:a1:9b:55:b1:3a:a9:25:c1:10:e4:7a:7c:
79:ae:4a:ce:f4:3d:ef:84:3b:4c:e4:e6:28:86:16:
3b:d0:98:77:b1:8d:60:82:7b:fd:5d:91:94:0c:09:
3e:9b:1b:b6:c3:c0:cb:fe:72:e6:a4:3f:e1:35:4a:
2f:9f:3b:a7:f0:bb:ac:1f:95:85:ce:64:02:c6:5c:
fa:df:1e:38:b4:17:3a:98:dc:38:ef:f6:21:0e:96:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:99:1C:E9:C8:C1:A1:02:5D:8B:D2:84:2C:BE:69:7D:D2:07:C7:E5
X509v3 Authority Key Identifier:
keyid:AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6e:74:ea:22:76:0f:3e:fd:48:45:9d:5f:71:f5:e9:85:2f:
17:ba:9b:f5:66:64:47:57:20:9e:b6:6f:01:24:e2:b4:21:db:
1b:f5:7c:b0:ba:5d:87:77:2a:fe:90:24:99:d6:b6:7a:bd:21:
35:18:e2:a3:4b:02:b4:71:df:1b:7a:f5:35:12:75:3a:73:fd:
ad:24:0e:80:6d:a3:86:9c:5a:6d:96:40:6a:c3:ae:0e:ab:3a:
e5:cb:06:aa:ca:b9:80:7d:c3:4e:79:da:e0:dc:18:8e:fb:04:
5f:d6:e4:4c:e1:fd:ac:45:5d:a0:2b:6d:af:b6:3f:41:ca:83:
4b:50:f0:7c:78:a2:7e:36:9a:f6:0e:fe:a8:aa:31:7a:70:75:
c4:cb:07:7b:14:2f:c8:1b:63:5c:1e:a4:8f:e2:01:d6:88:8e:
1a:b7:32:08:76:0c:f9:a7:60:78:ce:7e:0a:d0:9c:21:07:9e:
df:0b:cf:93:5c:3c:fe:3b:ac:0d:28:c0:e8:42:b4:84:e0:1e:
25:57:1f:cb:bf:48:56:e6:f8:c5:9f:f1:56:4b:06:fe:ce:08:
bd:15:9c:21:88:f6:74:a0:ae:43:db:c5:60:da:b4:c9:db:46:
ed:90:01:3c:ca:31:f8:a4:10:db:58:56:a9:3b:ba:20:e0:42:
e7:df:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:34:51 2026 by rpki-client