Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json)
Hash identifier: B5MzoUFR1cuB89Wx5/nliEz4qqamtIV0YW2PyZTeX4s=
Subject key identifier: 60:B2:28:0C:E4:1E:4A:11:A7:E3:AF:78:FF:DB:75:DB:8A:93:E1:A5
Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1
Certificate serial: 019D296118256FC67BD67F85D7D2967512FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
Manifest number: 10B1
Signing time: Thu 26 Mar 2026 09:02:02 +0000
Manifest this update: Thu 26 Mar 2026 09:02:02 +0000
Manifest next update: Fri 27 Mar 2026 09:02:02 +0000
Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: R1g4g3RxQywKsj+33IrCpfNJPkhUJhW6yD32Vex6XPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:18:25:6f:c6:7b:d6:7f:85:d7:d2:96:75:12:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1
Validity
Not Before: Mar 26 09:02:02 2026 GMT
Not After : Mar 27 09:02:02 2026 GMT
Subject: CN=60b2280ce41e4a11a7e3af78ffdb75db8a93e1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:5f:28:52:e8:d5:4d:17:fc:b7:91:e9:cd:
bc:ec:22:8f:db:d8:66:92:cf:e9:dd:a6:20:1e:77:
bd:f4:4c:0f:e7:c7:c1:7f:2e:90:ea:0a:cc:96:23:
d1:75:b9:2d:94:fa:b4:33:d2:a3:68:fe:02:9a:a7:
43:71:58:b2:f2:4a:9a:f8:fa:25:5b:8e:c5:e6:a3:
43:a3:0c:e5:cd:d0:b0:33:68:39:89:cb:51:25:24:
d7:81:b8:01:f3:f4:e2:33:4e:3e:5b:b0:54:50:08:
8c:3d:10:95:51:2b:7b:9f:a5:60:45:09:31:f2:98:
a6:8a:82:02:7b:24:e8:9b:9b:29:f9:9b:8c:94:71:
2e:c6:23:87:7f:90:d2:48:8d:19:ea:80:fc:30:0d:
b1:9a:b9:2b:1d:87:55:65:ec:4d:a3:a8:40:dd:a0:
9f:9d:b6:0d:b3:88:b4:2c:db:1b:9b:20:8f:8c:fc:
a1:96:a4:d4:b4:df:82:7c:53:47:3a:7d:db:08:ec:
3a:72:0b:36:e1:b5:e0:e5:33:3c:c8:2b:a2:ed:e8:
82:ac:42:ba:55:45:74:8e:b9:5d:b9:71:8e:f0:fe:
cf:78:6b:56:20:13:ff:40:3d:7c:9d:9d:6f:95:32:
4b:3c:94:22:7d:b4:ea:31:d6:22:05:59:af:01:7c:
d8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B2:28:0C:E4:1E:4A:11:A7:E3:AF:78:FF:DB:75:DB:8A:93:E1:A5
X509v3 Authority Key Identifier:
keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:33:18:82:54:c9:7a:ca:87:bd:6b:f4:33:f3:ca:df:14:36:
4b:55:c3:42:42:d2:d1:95:be:8b:87:d3:c8:05:e8:4b:52:48:
3d:d0:66:3d:ee:de:d7:92:60:fc:b4:7f:8d:be:c7:90:56:d0:
23:ed:da:a9:43:6a:eb:eb:fc:86:43:fa:f6:72:a2:63:0f:db:
97:e4:9f:7f:9b:ba:1e:ef:12:6d:b1:3b:ea:e2:14:13:38:6e:
f8:be:54:39:bd:10:81:7e:5f:5a:c4:6f:e0:bc:b1:a4:2f:55:
10:f1:44:0d:84:1a:99:64:f0:2e:9d:b3:bb:c1:53:2d:f0:dc:
5a:45:81:ba:23:7d:e4:0c:9f:8f:ec:8d:2b:73:54:33:0f:f5:
eb:bd:b1:20:f1:31:d5:c4:55:30:c3:f3:0c:26:10:0b:c7:86:
33:18:ab:ea:a2:ac:67:fe:28:4b:df:e0:09:4d:e8:02:35:d9:
40:2b:a7:ea:99:ca:85:7d:bf:0e:07:a4:9d:4a:01:a6:a0:80:
a4:e2:f1:2f:7f:81:f8:89:74:0c:d0:e7:0c:8e:d8:a4:9f:cc:
f3:31:8a:47:ef:3b:f0:89:26:1b:ba:63:67:52:03:96:4e:2b:
f1:73:de:8c:f1:00:de:c1:04:69:3a:7a:d8:5e:e7:4c:d6:ad:
b0:9d:4d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:37 2026 by rpki-client