Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: PZTn2a7qM/Exi6gfijJosclG59BPp/xZMiYr+97Glyg=
Subject key identifier: 46:FA:53:FF:1C:15:FD:1E:28:1D:71:69:44:D7:94:3E:59:DD:84:71
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 019D26288C825EE956DCFCB78F7EEA1F0D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 18:01:24 +0000
Manifest this update: Wed 25 Mar 2026 18:01:24 +0000
Manifest next update: Thu 26 Mar 2026 18:01:24 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: 4zA6k/MVvUIF5eiCiJ6rU2bAXROTso9n1XDWRzhRX/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:8c:82:5e:e9:56:dc:fc:b7:8f:7e:ea:1f:0d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: Mar 25 18:01:24 2026 GMT
Not After : Mar 26 18:01:24 2026 GMT
Subject: CN=46fa53ff1c15fd1e281d716944d7943e59dd8471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3d:2f:59:3c:43:0e:00:5b:38:28:35:73:55:
d0:62:7e:99:7b:ec:a6:f9:2f:85:cf:16:01:c6:24:
90:a9:ac:59:2c:7c:c8:2d:0e:10:1b:4c:e1:e5:6b:
cf:1b:ef:f9:e6:d2:ab:21:de:fc:12:54:59:78:c8:
2d:67:bd:da:5c:91:c7:8c:ba:71:bc:c8:af:3e:19:
e5:66:4a:14:e0:c7:3a:38:09:00:8b:70:73:4b:d9:
29:78:88:00:f0:10:72:e6:08:84:45:3f:c1:5e:25:
19:25:f3:1b:57:d9:13:78:b1:c1:a1:5c:7e:a0:04:
2a:9a:50:7a:02:95:68:bd:24:62:97:fb:db:61:78:
83:22:f6:bb:7b:4c:0b:3b:df:fe:09:4b:d2:0c:4b:
82:cd:32:fe:f2:62:0c:8c:cb:50:a0:da:90:f7:93:
94:8c:f0:be:48:84:10:c4:de:cc:5a:35:6a:78:77:
10:39:86:d3:dd:40:c3:2a:42:74:d1:6a:80:bb:2b:
ae:06:d8:da:9e:a9:13:9d:57:ea:fc:e8:cd:c8:da:
07:e4:5e:c8:ec:48:89:01:8e:0f:83:e2:d3:c0:55:
7a:93:cd:dd:78:80:93:7b:3c:c8:26:32:9a:8e:86:
12:af:b6:25:88:fc:f2:d4:e2:f8:c0:a0:34:c8:31:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FA:53:FF:1C:15:FD:1E:28:1D:71:69:44:D7:94:3E:59:DD:84:71
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:02:35:c2:2c:5a:2e:2b:9b:4f:bc:41:3a:c3:73:1e:2e:78:
95:14:f1:73:6f:b2:e1:b6:18:a0:97:71:ce:5d:d9:64:da:2a:
84:a7:3f:fc:6e:ee:ec:c8:f8:3d:1b:78:2c:8f:fb:05:99:3b:
c6:8d:a4:59:9d:b1:bb:b0:43:81:9c:43:96:38:ac:c9:c3:b5:
93:fb:be:26:c2:3c:45:b9:bf:9c:94:af:51:24:6f:a0:20:28:
d9:58:17:5a:59:cd:c1:36:d4:fa:48:de:c3:8a:80:87:18:13:
3b:6f:3e:88:01:ee:62:77:96:c5:13:a9:88:19:b7:9d:af:74:
06:7a:21:ac:64:8b:20:59:4f:17:76:d4:fa:9f:1c:6c:11:51:
1f:ca:39:f4:82:30:d0:b4:49:19:dd:c1:2e:9e:b8:74:8c:4e:
46:93:c6:e8:3f:fe:b6:76:a5:65:cc:6d:3e:d2:dc:a5:b2:28:
bf:98:50:36:e5:26:3b:11:6d:f9:a4:69:52:42:7e:07:a9:00:
e7:02:ec:8b:80:e3:9f:24:37:9f:a0:80:c4:d2:5d:79:0c:7d:
2f:3c:7b:58:73:b4:61:95:f8:fd:6e:82:3f:d6:e2:71:75:17:
01:a1:35:61:b1:d7:e1:f6:d7:72:08:f5:15:cb:e8:92:0d:70:
1c:67:46:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:21 2026 by rpki-client