Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File: xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier: Lh3it7R/SjZNaGBvFqAzAzUnXW2P/5QZMXvjFcwcUUM=
Subject key identifier: C1:DD:87:31:1E:4F:EA:89:56:C6:F6:6C:C1:C0:45:E2:21:75:DB:3E
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer: /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial: 019D2704D5A0CC0625F1FD5D0A136B308E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number: 0BF9
Signing time: Wed 25 Mar 2026 22:02:01 +0000
Manifest this update: Wed 25 Mar 2026 22:02:01 +0000
Manifest next update: Thu 26 Mar 2026 22:02:01 +0000
Files and hashes: 1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: vpFFSwL8tOkK1iXIuuJHS8CuR1C7S74e4jWLmrHDORM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d5:a0:cc:06:25:f1:fd:5d:0a:13:6b:30:8e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Validity
Not Before: Mar 25 22:02:01 2026 GMT
Not After : Mar 26 22:02:01 2026 GMT
Subject: CN=c1dd87311e4fea8956c6f66cc1c045e22175db3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:5a:9e:5e:64:5a:27:b6:27:4d:05:66:29:
03:9a:ee:dc:d8:83:3d:c3:ea:ae:88:60:9f:3b:c3:
dc:3b:04:32:a8:6e:26:12:f3:e3:b4:e9:b2:67:44:
88:39:a7:f3:b9:02:4d:47:e0:2f:42:19:d2:ff:f1:
1d:60:b8:af:0d:c7:be:70:bf:96:25:55:af:00:e5:
5b:74:33:d8:a4:d4:02:9e:07:96:db:af:f0:27:64:
a1:01:78:41:56:42:5a:53:97:5d:e5:e1:f6:94:e3:
10:4f:8b:0c:99:73:3f:3b:29:29:17:50:b2:85:06:
d6:a8:74:90:be:ef:e6:8c:c7:4f:db:87:ce:ed:4e:
93:89:9c:99:f8:19:f5:0f:d1:54:5e:4e:27:e8:10:
24:17:dc:1c:a8:fd:cc:8b:05:e4:ef:14:5d:b7:7d:
f1:57:92:cc:f6:ed:e9:95:85:d9:46:98:8c:96:9b:
d7:e8:55:d9:d7:ad:84:bf:86:6a:60:5a:ec:61:32:
1e:db:87:0e:67:6c:6a:b5:96:c6:60:1f:3b:33:02:
7d:89:cc:37:ef:95:38:a0:7d:66:d1:14:c7:96:52:
6e:e2:6e:d4:e3:d6:94:a2:5b:6f:ea:e3:28:1f:1c:
bf:ba:83:81:c0:52:cd:c4:14:06:68:46:63:e7:1a:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:87:31:1E:4F:EA:89:56:C6:F6:6C:C1:C0:45:E2:21:75:DB:3E
X509v3 Authority Key Identifier:
keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2b:03:3b:53:22:ae:4f:3e:40:80:a6:39:08:b9:95:51:6c:
fa:d0:4f:04:c9:28:2c:12:b6:da:33:aa:6a:a5:6c:81:5d:58:
7d:04:c5:74:ef:77:b1:56:e3:5a:ec:59:a2:b3:18:b7:22:be:
6b:11:1c:57:65:22:f1:fe:48:8c:35:5a:20:a4:2e:3e:96:cd:
aa:f8:1f:41:3f:e7:e2:af:b5:71:e8:82:aa:87:52:5d:2c:01:
ba:b3:95:69:dd:77:ae:88:9f:cc:33:e5:c3:30:95:78:84:0b:
69:b0:3c:fe:d1:71:97:df:1f:23:ee:5f:6e:69:a5:6a:84:d9:
8a:c9:9a:b8:40:76:fd:ce:72:1e:0b:cc:5f:49:4f:29:7c:0c:
e1:5d:63:1d:7c:02:57:67:67:b9:0f:55:7d:58:23:c5:f4:fa:
b2:c4:7e:dc:3c:9f:e8:9c:0b:33:5a:3f:7e:c9:99:0d:41:8f:
c4:1c:21:63:aa:09:7e:6b:f7:96:c4:d9:11:0f:3a:af:17:0c:
7f:99:8d:37:59:13:eb:83:39:f4:63:52:68:25:d9:4b:41:25:
af:f2:37:0c:7e:4d:ff:a9:e3:9b:45:7e:42:02:01:16:a6:70:
fc:16:61:b7:16:ce:9c:6e:38:55:9f:5e:a5:18:85:19:98:8c:
a6:90:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:56 2026 by rpki-client