Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
File: X1G82J639bOrCIBu9Rp8L265jvw.mft (raw, json)
Hash identifier: mdNEqhyBhskKqrIzZg34dPZx1hCzyg9nGsHE8SbAyiI=
Subject key identifier: 6B:FA:FC:04:97:44:EC:4E:E7:B6:2C:76:98:E7:E0:A7:F4:A7:C3:0A
Authority key identifier: 5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
Certificate issuer: /CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Certificate serial: 019D27049BE67244A44DF1FCBC228D898CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 22:01:46 +0000
Manifest this update: Wed 25 Mar 2026 22:01:46 +0000
Manifest next update: Thu 26 Mar 2026 22:01:46 +0000
Files and hashes: 1: X1G82J639bOrCIBu9Rp8L265jvw.crl (hash: lz3x/Y0pwyYrZi7eW+rY4jCsdD0vSI0GuQ1iccR1Rhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9b:e6:72:44:a4:4d:f1:fc:bc:22:8d:89:8c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Validity
Not Before: Mar 25 22:01:46 2026 GMT
Not After : Mar 26 22:01:46 2026 GMT
Subject: CN=6bfafc049744ec4ee7b62c7698e7e0a7f4a7c30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:49:e5:ea:0b:78:0f:86:ca:01:85:23:12:
10:e9:0b:ef:71:8d:4e:15:bb:36:b3:8c:60:3e:e0:
20:66:57:52:7d:e2:5f:a6:ae:0f:0d:1e:81:35:90:
d6:9f:d9:ff:c7:36:f5:85:78:01:bb:ed:24:a8:be:
3c:e8:9d:5e:72:ae:17:e6:49:8c:82:60:0c:a5:88:
76:18:ee:74:28:65:29:d7:74:9c:1d:10:71:b4:98:
26:98:1a:50:2c:9a:af:71:a5:87:a7:e5:a3:6a:f3:
66:6c:80:c1:5e:2a:b0:7e:91:64:00:a0:53:ba:a5:
17:83:ef:ee:b0:5b:03:da:a5:16:56:36:49:8d:e2:
80:9e:f3:5f:f5:5c:44:6d:f0:98:ad:e9:eb:43:11:
11:cc:43:7f:43:29:ca:69:aa:57:8c:1e:88:1a:d3:
e3:5d:66:e5:b0:6c:d5:a3:f1:83:44:c3:11:91:39:
63:df:76:60:98:97:a4:c8:22:9d:97:86:f8:c8:76:
62:f2:37:73:68:ce:cf:b5:f5:6b:e7:05:e7:13:31:
31:09:26:b1:d1:cd:25:2e:81:9f:e5:a2:30:fd:64:
eb:6d:1d:5e:6a:54:fc:4b:96:3c:25:38:f9:b4:04:
e2:ba:16:bf:cf:85:d6:02:c7:69:48:88:1e:2a:ba:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FA:FC:04:97:44:EC:4E:E7:B6:2C:76:98:E7:E0:A7:F4:A7:C3:0A
X509v3 Authority Key Identifier:
keyid:5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f3:4f:a4:40:a9:3b:02:7e:ac:9b:61:21:ba:fe:1a:1d:ec:
56:09:b5:18:75:db:ad:74:c5:94:4d:67:db:39:c8:91:3b:b5:
b3:2b:f9:53:36:4f:d5:b4:59:87:6b:45:02:6d:36:b4:5a:55:
d0:92:30:11:1d:0c:50:78:09:70:c9:d2:a9:7f:08:4e:0c:eb:
48:14:a3:d6:f9:ab:52:13:2e:20:a3:d3:1f:cf:68:a8:7f:b7:
c2:4a:85:57:cc:1b:d9:48:f8:fa:01:de:b3:95:0a:f2:43:aa:
40:f7:0c:57:10:ae:91:17:d0:d8:56:1b:12:b2:3d:f5:44:cb:
8c:70:b8:86:f0:ee:88:35:9d:2d:6e:cd:70:84:4e:af:21:51:
c6:a2:ff:10:11:97:3f:c2:9e:39:9f:53:34:c5:c4:fb:fb:4b:
d5:5a:1e:6a:fd:c6:7a:1b:e4:9d:13:cc:91:4c:fc:88:e4:a3:
b5:60:19:bc:73:42:d3:7b:5d:44:fe:4a:05:49:3d:13:ec:f7:
cb:fa:4b:48:82:20:bf:4b:ea:55:99:c6:8a:8d:d6:0f:b3:4f:
68:86:c8:06:77:c6:f5:39:b6:85:b2:3e:ad:d4:e5:de:7f:6c:
25:29:16:ec:58:d6:35:e2:ca:a3:c1:a1:c4:93:6b:ac:79:9f:
e7:df:ef:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:06 2026 by rpki-client