Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json)
Hash identifier: Lnlp0Z/P+8Ei/bKjItSWSbtBVqOR2xtrVDB/kfaoF4Y=
Subject key identifier: D7:9A:6E:2B:04:37:48:75:F0:AC:55:9B:09:18:68:AE:D6:A0:E4:38
Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424
Certificate serial: 019D26CCE56159C5F65186B713BA383F525A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
Manifest number: 0CD6
Signing time: Wed 25 Mar 2026 21:00:55 +0000
Manifest this update: Wed 25 Mar 2026 21:00:55 +0000
Manifest next update: Thu 26 Mar 2026 21:00:55 +0000
Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: gU14IHu4G7/Lucv2LO6ZlW19B0gSOocq2KcOno6pNi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e5:61:59:c5:f6:51:86:b7:13:ba:38:3f:52:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424
Validity
Not Before: Mar 25 21:00:55 2026 GMT
Not After : Mar 26 21:00:55 2026 GMT
Subject: CN=d79a6e2b04374875f0ac559b091868aed6a0e438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:69:de:0e:86:32:07:13:ab:5c:cd:74:08:
a7:47:f2:be:af:56:3d:16:29:b2:4d:2b:55:18:31:
80:3b:a7:af:42:99:f4:cc:74:7c:ae:4e:1a:d8:5a:
f0:26:2a:ef:7d:e5:d8:43:34:0a:df:fb:c1:45:d3:
97:2b:9c:72:3f:fc:b1:47:08:30:22:c3:8d:40:b9:
e2:92:0d:fe:e5:78:f5:da:af:e6:0a:01:eb:c9:28:
61:10:3c:1e:a5:b1:84:c6:49:b7:f6:17:47:39:58:
e6:be:97:00:3b:29:27:e8:98:9d:72:f4:cc:27:92:
10:b1:54:5f:29:2d:05:77:9d:84:a0:f4:10:7f:b2:
c2:68:a4:9c:87:49:8f:c3:43:7b:e8:b8:95:d2:33:
8f:fe:68:1a:67:f4:7c:66:aa:d4:87:62:26:eb:7e:
d9:56:81:87:1b:a4:22:74:11:14:4c:2b:49:d1:61:
3f:a8:1c:c2:d6:d9:f8:f1:47:88:88:4e:04:d7:52:
26:c5:26:19:e1:aa:b3:1f:e6:0a:11:ae:6c:50:79:
2e:d8:99:f6:50:2f:e1:0a:a5:7e:65:d0:29:2d:b5:
2a:a3:45:60:5f:46:b5:94:78:77:0b:64:51:af:04:
a4:b2:a3:2f:14:58:17:42:82:50:b6:07:ce:8f:a7:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9A:6E:2B:04:37:48:75:F0:AC:55:9B:09:18:68:AE:D6:A0:E4:38
X509v3 Authority Key Identifier:
keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e4:bc:20:0a:0f:f8:5d:4d:09:21:0d:ac:d7:2a:94:af:34:
93:ca:95:02:56:65:5b:7c:26:34:b7:ac:18:fd:75:c3:26:4d:
af:80:78:99:91:4a:33:c4:ba:af:1a:f7:73:c2:1e:9c:99:17:
b4:07:50:b8:ae:37:7c:89:35:38:3d:35:83:76:62:66:b9:87:
db:d4:41:ce:ea:ac:68:c6:a8:d6:56:67:8f:be:47:33:34:e3:
fb:95:41:fd:4c:36:1a:08:21:ee:5e:8f:55:fc:9a:6c:84:80:
55:3b:27:e5:01:e2:c5:d2:bf:30:b0:48:7d:af:01:d5:15:3f:
25:22:54:73:0f:0d:a3:62:d8:60:26:1a:a4:37:6a:62:06:19:
27:85:18:7b:cd:36:ea:a2:2d:bd:c7:30:8e:47:d0:8a:36:7d:
61:3b:41:0e:64:29:1d:0f:a5:72:f2:69:0e:93:7c:36:4d:25:
d8:f2:69:f0:9a:f0:c6:67:f1:75:d3:68:ad:1a:a0:51:65:90:
7d:99:2c:8d:3b:ff:49:6f:03:fd:22:42:a3:9b:7b:b7:87:fc:
a6:91:93:4c:24:78:c9:38:f2:c8:7d:04:36:53:7b:92:4a:e5:
5b:b6:30:da:0a:60:a2:14:a1:1a:17:99:44:01:69:e2:f1:6d:
7b:2f:ee:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:24 2026 by rpki-client