Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: AY8ipF4bk3H5FIFDVO0nWdiMXijmQYg71ubzoUVqYt8=
Subject key identifier: 5B:F1:DB:1B:3D:62:B1:92:FD:21:03:D5:D1:33:15:9E:AC:A5:42:D5
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 019D2961A5740677557AAB14185868DEBDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 0611
Signing time: Thu 26 Mar 2026 09:02:38 +0000
Manifest this update: Thu 26 Mar 2026 09:02:38 +0000
Manifest next update: Fri 27 Mar 2026 09:02:38 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: 4HUOa3WNqJrnmQhl8LZCErJdqqkpNCmfgtFUiu9SEHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:a5:74:06:77:55:7a:ab:14:18:58:68:de:bd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: Mar 26 09:02:38 2026 GMT
Not After : Mar 27 09:02:38 2026 GMT
Subject: CN=5bf1db1b3d62b192fd2103d5d133159eaca542d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:c6:81:65:18:f3:f4:59:24:3e:da:d9:40:
96:02:be:39:9f:02:2a:2d:3b:6f:24:3a:6f:ad:55:
5e:b2:3f:b3:e4:24:1f:07:04:e4:77:00:2b:af:4c:
de:7e:3b:d1:09:b5:c2:31:e5:8b:40:17:5a:58:73:
d5:0f:d3:d6:3e:08:f4:e0:d2:28:5a:4d:23:8e:66:
94:40:a6:70:d3:02:68:42:b1:cb:d8:07:f0:d0:b6:
fc:27:38:37:41:bc:4b:d3:c6:a5:59:ee:c2:4d:70:
e0:f9:83:36:64:e4:61:23:85:55:09:0d:d6:d4:34:
08:03:5b:37:17:71:53:4a:ca:c5:aa:02:c6:c2:c3:
c7:c1:32:cc:77:dd:0f:6f:e9:f1:db:9d:dd:33:52:
d2:31:c5:d2:34:0e:5a:ee:02:0d:e0:90:f9:a2:fe:
dd:54:2d:52:c4:05:28:8b:02:b2:fa:06:82:eb:9e:
75:56:17:8e:5f:6c:54:d5:0b:aa:94:6c:ca:ae:f5:
9e:5c:ae:49:25:1c:68:54:29:ce:be:26:03:39:fb:
5f:19:da:15:37:8d:12:d7:c9:b8:1b:b8:9b:27:ec:
b4:1d:5e:31:c7:b4:8d:8b:1b:b9:ce:b4:15:63:b4:
dc:a2:74:47:5a:d6:93:e4:9c:32:b8:36:a8:8d:09:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:DB:1B:3D:62:B1:92:FD:21:03:D5:D1:33:15:9E:AC:A5:42:D5
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d2:56:2e:5a:0f:72:f6:16:11:10:cb:83:11:b8:de:cc:16:
d6:b6:33:56:c4:f5:8b:b9:aa:0b:58:a5:27:36:60:07:02:88:
43:d1:e2:36:b9:01:70:25:78:e0:41:62:12:bb:8e:28:01:ec:
b8:06:32:75:f0:89:eb:5e:ea:76:90:e6:e3:e1:63:de:f6:6b:
c9:40:8f:54:06:f4:09:ae:d6:82:d2:7c:78:bc:f4:74:2f:95:
3f:d5:74:9b:4a:9a:e3:c9:0b:fd:77:6c:33:f6:80:50:fd:af:
bf:d1:9a:0a:aa:57:68:00:c3:a6:56:8c:27:cd:24:2e:b7:19:
fc:0a:e9:25:a1:d3:ea:1e:0d:a6:fa:c3:c2:e7:8e:69:4a:2b:
02:63:ce:93:3d:40:ba:dc:dd:e8:15:f2:f3:44:b1:06:7c:bf:
9c:4d:4d:76:03:14:ac:26:c8:79:34:0b:0d:d9:47:77:19:2a:
cf:53:7c:66:af:2b:25:81:6c:e1:69:2a:fd:93:8b:d2:d2:fd:
07:ec:6b:4d:53:2e:8f:26:33:df:70:22:4d:35:aa:b2:42:d7:
ec:a4:40:95:50:0a:11:4c:a0:06:e9:7b:0b:cf:ad:ff:2f:6b:
93:7d:08:6e:52:fd:ca:3e:c8:1c:b5:10:38:98:2e:53:d7:ea:
43:16:79:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:05 2026 by rpki-client