Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
File: xRg7G2FacNeXwnfPyEC5CjLZaWw.mft (raw, json)
Hash identifier: TuCGnidOfL8zF9CS1myHTJP79wcDPp39Z8twWf+Isd8=
Subject key identifier: BA:3D:F7:AE:72:95:89:7A:28:58:F5:76:F2:F9:5E:FF:F6:F0:6B:AD
Authority key identifier: C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
Certificate issuer: /CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Certificate serial: 019D269625905CA17AA67B5A1DBE729B9ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
Manifest number: 0FA9
Signing time: Wed 25 Mar 2026 20:01:07 +0000
Manifest this update: Wed 25 Mar 2026 20:01:07 +0000
Manifest next update: Thu 26 Mar 2026 20:01:07 +0000
Files and hashes: 1: xRg7G2FacNeXwnfPyEC5CjLZaWw.crl (hash: 6grY7X2QR/LZe3cjVRo3VpPUS5diC1OhULSLasup5zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:25:90:5c:a1:7a:a6:7b:5a:1d:be:72:9b:9e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Validity
Not Before: Mar 25 20:01:07 2026 GMT
Not After : Mar 26 20:01:07 2026 GMT
Subject: CN=ba3df7ae7295897a2858f576f2f95efff6f06bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:8f:af:9c:36:bb:da:3d:79:eb:5c:7e:8c:
22:1b:d5:07:e3:2a:2a:06:c5:c6:0d:6c:85:e7:06:
8e:1b:43:a1:d4:a5:06:98:49:c5:34:0f:8d:cf:4f:
cd:f9:54:ae:8f:25:77:13:ea:3c:b1:ad:d2:aa:62:
84:8d:b1:ca:c4:81:8a:66:38:e4:f1:ce:ce:7a:10:
0d:71:9f:14:6c:e9:f3:14:2d:5d:70:83:8b:c7:16:
27:d4:e5:88:11:56:92:8d:42:cb:31:8d:e7:1e:c6:
00:7a:b8:cf:be:32:58:85:84:0e:1a:9e:ac:9b:b0:
e1:8d:90:5f:31:67:de:fb:a2:12:a3:fc:4b:80:60:
d4:a6:f4:92:e6:02:6d:1f:5d:48:00:f7:a2:ca:47:
63:98:c6:d1:95:95:ac:5a:bb:60:78:12:92:6e:8d:
35:57:4c:25:f0:6a:ff:43:81:f3:95:4c:f8:37:bb:
cd:73:fc:f1:0d:7f:21:3a:ef:46:c8:af:1f:1b:06:
23:06:08:9d:90:38:bb:76:63:82:10:a8:20:2a:a5:
ba:80:82:22:2a:31:cc:ab:ea:e1:7b:c1:96:20:41:
40:d2:05:95:e1:6e:6e:01:f7:f9:91:b5:a1:80:2d:
29:34:62:20:1d:f1:28:c7:54:06:36:3a:d2:0e:4c:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3D:F7:AE:72:95:89:7A:28:58:F5:76:F2:F9:5E:FF:F6:F0:6B:AD
X509v3 Authority Key Identifier:
keyid:C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fe:3e:56:c7:ac:23:aa:6e:c6:db:01:54:a4:df:22:0c:c0:
91:a6:6c:5e:fa:c2:d0:b5:db:ff:2e:68:49:34:bc:1c:8d:ac:
94:5a:69:01:8f:d7:c7:31:57:b9:60:b0:31:6e:28:30:4d:cf:
98:90:98:fc:a6:39:a6:20:63:4f:06:82:3d:e6:4a:a3:43:a5:
f7:8f:2e:a5:92:68:ac:f2:a9:7a:0c:43:d5:73:3e:7c:f8:d5:
4c:47:99:39:3e:d9:f2:4a:c9:6c:c4:91:9b:5e:4e:57:2b:db:
2b:e8:9a:cb:f0:ff:d3:61:7a:fa:a4:29:8c:9e:71:ca:b0:ac:
3b:04:57:5e:00:8a:d3:9c:4f:3b:c7:a4:7f:a0:ab:f2:24:6f:
11:5a:13:58:71:4a:2c:5a:39:2a:5a:e5:be:37:c3:33:c2:21:
51:fa:25:b3:9e:41:db:7a:52:1e:04:fa:23:b3:d5:21:13:fa:
a4:6f:f9:3d:b4:7e:3b:a5:22:a9:06:a9:6b:0b:6b:e0:ba:1b:
f9:c3:93:23:3b:b9:fc:c7:d4:3b:96:ac:ba:3d:7c:cc:f4:03:
37:cc:18:4a:34:75:a1:c4:68:30:c0:66:7d:76:37:2a:47:ed:
1c:16:01:41:3c:44:50:35:8b:f6:51:08:ce:06:f1:4a:42:e4:
33:e1:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:05 2026 by rpki-client