Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
File: XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft (raw, json)
Hash identifier: CtUsLjZbzSmRr78/glUzfI9wEMA71bFhy9XF7lfm1T0=
Subject key identifier: 8F:36:71:AC:64:2A:FC:E9:60:F5:3F:2D:60:12:6A:88:AD:C2:2F:B8
Authority key identifier: 5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
Certificate issuer: /CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Certificate serial: 019D2960C40BA9ED0596C042E16799A8743B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 09:01:40 +0000
Manifest this update: Thu 26 Mar 2026 09:01:40 +0000
Manifest next update: Fri 27 Mar 2026 09:01:40 +0000
Files and hashes: 1: XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl (hash: NNfs0t7WONTlFDDs/PPFCNNat7Nc6wwE0zSjrRuLQM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c4:0b:a9:ed:05:96:c0:42:e1:67:99:a8:74:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Validity
Not Before: Mar 26 09:01:40 2026 GMT
Not After : Mar 27 09:01:40 2026 GMT
Subject: CN=8f3671ac642afce960f53f2d60126a88adc22fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:a8:6c:6d:5f:89:11:1a:fe:78:fc:69:1f:
5e:cb:c6:80:99:dd:c8:65:1b:41:c5:f6:68:8a:d2:
c7:38:31:74:de:df:f3:92:2b:15:76:cb:c4:cb:c5:
a8:bc:5c:c6:7e:44:90:20:a2:a3:88:9e:fa:5c:d4:
bf:0b:38:c3:ea:2a:13:a5:f2:68:d4:bb:56:56:82:
ce:48:7d:ac:7b:77:55:69:63:a5:76:05:e1:48:d4:
45:65:da:fb:0d:75:92:13:3c:68:0c:a0:22:c4:82:
e6:2b:80:87:d0:24:61:14:ab:dc:f5:7b:15:f4:5d:
02:cc:e9:82:89:94:16:e2:49:cb:19:1a:7c:cf:7d:
02:5e:c0:e3:6c:f9:3c:d2:ee:9d:24:29:80:ad:f1:
37:f1:c4:c2:5e:d7:0b:32:d7:4d:be:93:d6:53:8d:
87:ee:be:12:cc:a2:52:31:35:db:25:bd:ab:63:e3:
a9:7a:93:48:15:39:14:41:3e:5d:1a:e0:99:47:a4:
a3:29:d2:d8:02:b0:3b:ac:33:5f:04:01:48:20:b4:
26:38:66:2f:a2:8b:35:d5:90:01:d7:09:4b:49:17:
58:b3:a0:28:63:1f:ac:3a:4a:9a:3b:7c:6d:4b:b5:
3c:93:93:31:00:5f:0a:bc:31:5a:7f:94:b6:ce:60:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:36:71:AC:64:2A:FC:E9:60:F5:3F:2D:60:12:6A:88:AD:C2:2F:B8
X509v3 Authority Key Identifier:
keyid:5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9d:a2:b0:41:4f:67:27:a2:e2:a7:57:85:bf:3e:f9:d0:32:
ac:8e:31:bf:e9:46:e4:19:ed:80:27:03:1b:e9:50:63:31:7d:
eb:ed:e2:3d:09:3f:55:d0:45:0c:b2:1a:a6:c7:65:a7:5b:b5:
35:97:01:74:32:f7:7f:6e:32:00:45:e7:4b:b7:11:89:90:40:
6e:9a:70:7b:4b:64:fa:f3:5b:48:b9:2b:a7:9d:0c:f8:5f:dd:
16:4f:a0:26:31:2e:28:95:d3:14:3c:f3:c6:25:b5:59:94:d3:
65:63:96:17:e1:69:5b:44:6f:1a:c1:96:85:5f:89:87:75:c4:
0d:18:7a:66:cf:41:90:b9:4d:0f:3f:06:47:dc:87:3f:81:fb:
a9:81:c0:f8:d8:9d:ae:b6:ca:18:43:52:33:ab:db:85:56:c4:
0f:9e:ac:53:54:9e:4f:b8:a6:14:a1:b2:2a:36:bd:96:19:13:
03:7d:d7:8b:4e:a6:f5:42:b9:7c:a5:03:46:4c:5c:fc:bb:93:
0a:75:73:11:d6:57:cd:cf:b9:f8:4e:16:4c:04:bb:1e:ad:a6:
18:0b:ef:57:5b:6a:d2:0a:57:78:e8:fa:a4:ad:29:a9:0c:95:
c8:fd:77:fe:87:cc:e2:0b:91:ee:2f:c6:ac:be:b4:ff:e2:23:
95:71:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:14 2026 by rpki-client