Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
File: XwNIeIMukX__nNPIbA-h5WX4IdM.mft (raw, json)
Hash identifier: XsmIG0QHK3RW8zyTuIGT2/fr3U3c7E+5pD9SHhLzZvc=
Subject key identifier: 3D:EA:66:F3:E0:41:38:D7:1E:D6:FD:E7:AC:E2:C8:56:C4:4A:6A:EA
Authority key identifier: 5F:03:48:78:83:2E:91:7F:FF:9C:D3:C8:6C:0F:A1:E5:65:F8:21:D3
Certificate issuer: /CN=5f034878832e917fff9cd3c86c0fa1e565f821d3
Certificate serial: 019D284E5C9EF47C1F9BBFFE1CF4E03715A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
Manifest number: 13D4
Signing time: Thu 26 Mar 2026 04:01:57 +0000
Manifest this update: Thu 26 Mar 2026 04:01:57 +0000
Manifest next update: Fri 27 Mar 2026 04:01:57 +0000
Files and hashes: 1: XwNIeIMukX__nNPIbA-h5WX4IdM.crl (hash: 01oSSQaya+OFx5Ykn6yNXXFRjzhKDPcdIsn7naPQ7qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:5c:9e:f4:7c:1f:9b:bf:fe:1c:f4:e0:37:15:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f034878832e917fff9cd3c86c0fa1e565f821d3
Validity
Not Before: Mar 26 04:01:57 2026 GMT
Not After : Mar 27 04:01:57 2026 GMT
Subject: CN=3dea66f3e04138d71ed6fde7ace2c856c44a6aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:df:cd:dd:f1:de:df:3c:d4:87:2b:63:bf:
b6:45:1b:18:f4:c0:62:1d:c1:51:89:2c:7e:d6:28:
cf:70:27:01:83:1e:43:f9:b6:f5:17:23:c5:6a:18:
24:e5:48:e6:5a:ac:2a:f9:f3:3d:a9:5e:e2:13:59:
83:3a:03:b7:3e:6a:9e:bd:29:61:d4:64:50:9c:22:
1d:8b:c0:83:5a:8b:42:f8:6b:3a:48:94:b7:e4:8a:
2c:1f:58:d9:46:bc:8e:40:04:86:99:2f:01:d7:82:
08:ae:bf:26:53:ef:55:e4:5e:71:ed:2b:a4:ee:1b:
d9:44:95:92:64:7c:73:c8:e4:44:2a:3f:a4:a7:eb:
db:e2:88:a0:b8:56:40:83:66:19:42:f9:df:44:f6:
68:9e:44:e9:96:6c:57:d0:23:70:19:0a:24:0e:7d:
da:e2:bb:8f:94:74:c1:d8:da:b4:82:1f:55:ed:d9:
51:5f:0e:90:f1:ed:d1:06:86:a7:78:f3:50:dd:9a:
10:a3:38:70:bf:e0:3c:02:ca:58:56:e6:31:c3:f0:
d9:a7:5d:3f:d8:9f:42:58:ad:e0:6d:9f:0f:8a:93:
67:a2:7f:24:a3:d7:c0:41:c3:62:5a:ec:f3:be:f9:
d3:30:74:c1:fa:a1:7e:a8:38:b2:4d:51:fa:10:02:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:66:F3:E0:41:38:D7:1E:D6:FD:E7:AC:E2:C8:56:C4:4A:6A:EA
X509v3 Authority Key Identifier:
keyid:5F:03:48:78:83:2E:91:7F:FF:9C:D3:C8:6C:0F:A1:E5:65:F8:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d4:1c:c1:ce:6a:97:96:00:2d:00:74:0d:06:2d:0f:af:69:
b7:fb:48:be:cf:52:5f:b6:3b:eb:e9:df:41:11:f4:fd:01:0a:
4e:22:a1:49:ec:8a:f1:3e:3d:1c:fe:28:f8:e1:0b:85:d5:ec:
7e:1e:b0:44:0f:b5:99:55:70:aa:e3:11:a1:e3:1d:9f:c6:fd:
2c:cc:49:86:04:00:c5:71:f4:b0:bc:58:cf:9c:75:60:88:c5:
cc:93:0c:60:ce:59:a8:01:33:e2:9b:92:9f:74:3f:e2:50:ac:
be:cb:98:95:71:fd:59:1d:df:e6:31:89:9d:4a:f8:57:b4:55:
0b:00:8d:3c:40:04:e8:c3:83:d6:e1:5e:0c:cc:85:40:45:3e:
be:9d:95:0b:f8:bc:ab:cf:13:ec:83:e2:70:8d:fe:50:44:ef:
47:28:5d:dc:88:6f:58:21:ca:5d:0b:9a:37:2f:8e:a0:3d:a5:
b9:23:4f:ad:6b:1b:1b:e5:70:94:cd:eb:81:da:70:05:9f:47:
fe:f1:c5:6d:67:14:e3:97:d3:16:1e:cd:75:48:45:e3:f2:f4:
e6:a1:3f:5f:5c:b2:ea:1b:f8:8b:1d:c0:f0:27:b5:fb:44:1b:
6b:e4:e0:69:13:80:2c:94:10:e8:70:24:68:1d:fd:87:84:35:
f2:26:38:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:47 2026 by rpki-client