Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
File: Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft (raw, json)
Hash identifier: +59ytFmHcJ3K4OFs7Sm0Jlynwch279BYjjir+FvKgcU=
Subject key identifier: 9D:53:F3:D3:46:EE:50:D1:1F:0B:56:02:6E:40:BF:07:13:54:20:AF
Authority key identifier: 5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
Certificate issuer: /CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Certificate serial: 019D333F04EB99A87282DA234FF47D1DF4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
Manifest number: 169B
Signing time: Sat 28 Mar 2026 07:01:01 +0000
Manifest this update: Sat 28 Mar 2026 07:01:01 +0000
Manifest next update: Sun 29 Mar 2026 07:01:01 +0000
Files and hashes: 1: Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl (hash: 0p+hoh3AQFp9O6mx41F/1RLEI9VzoMpNN+tbPrQBbqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:04:eb:99:a8:72:82:da:23:4f:f4:7d:1d:f4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Validity
Not Before: Mar 28 07:01:01 2026 GMT
Not After : Mar 29 07:01:01 2026 GMT
Subject: CN=9d53f3d346ee50d11f0b56026e40bf07135420af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:fb:b4:75:ca:31:54:7e:ed:ac:5c:b6:70:
4a:62:83:c0:fb:14:1a:33:21:9f:c7:b1:30:4b:70:
e9:cb:d6:82:26:90:12:86:3c:39:8a:7b:fd:f6:52:
62:6d:b1:3e:c8:d6:df:61:ec:0f:d8:0b:0f:a8:0c:
46:5a:55:76:15:f5:6a:0c:3b:3c:43:60:21:28:78:
91:8e:dc:51:fc:13:a3:f9:ee:f9:da:dc:6b:2b:6c:
fd:e2:2a:62:6a:2b:74:24:3d:f3:57:58:b9:00:79:
f5:5e:61:9c:80:b1:b7:f5:4d:c2:e5:95:a9:d9:02:
b0:0f:6d:aa:7d:04:4e:a1:af:49:69:97:11:8a:7d:
59:c8:aa:c3:27:c4:98:0a:a1:9d:c9:a0:bd:1d:01:
e5:a8:2c:f6:fc:d0:2d:66:ea:1c:dd:84:a7:ec:78:
b6:b6:e5:fe:3e:2a:4e:b2:3b:78:9e:7a:af:56:0a:
b9:65:c3:f0:b9:45:ee:c4:f1:e0:c2:74:f7:7c:6b:
c9:bc:c1:e9:05:df:aa:d8:84:59:4c:97:0d:a8:0d:
f7:19:8b:ac:e0:3d:00:6d:58:8e:bf:b1:90:fa:35:
d3:19:db:3b:43:82:df:d9:45:0a:0b:11:b7:0b:76:
86:17:ae:66:21:6d:24:37:a7:96:fb:29:dc:35:b0:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:53:F3:D3:46:EE:50:D1:1F:0B:56:02:6E:40:BF:07:13:54:20:AF
X509v3 Authority Key Identifier:
keyid:5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0c:46:97:23:84:48:00:52:be:18:8c:e8:80:f1:49:d3:85:
91:18:d6:a2:28:fb:89:bc:2b:4f:e3:c5:42:b5:03:d2:b3:7d:
58:e3:5f:ae:a4:b2:41:83:44:09:90:5f:4a:fb:c8:20:27:f9:
f1:f5:67:38:be:df:66:7f:61:02:41:3e:0a:5a:6e:59:d9:47:
a1:3f:93:26:f5:c0:a3:5d:2f:12:0f:a7:df:c1:3d:d1:4a:11:
30:99:5d:22:9d:d4:bf:b3:f8:7a:c3:af:56:87:74:be:15:eb:
b9:70:15:28:4e:87:c2:fe:54:9e:e7:9f:5c:8e:79:d0:07:d3:
57:24:41:2d:b1:de:b1:36:0d:32:38:15:cb:dc:94:5d:d6:df:
5c:66:76:8e:fa:af:80:2b:9c:12:50:26:22:db:aa:1f:b8:4c:
7c:43:05:4a:49:22:5d:7d:a0:dc:f7:00:c2:10:de:2f:48:b7:
f7:1d:c1:f3:b6:71:39:14:6d:aa:b7:64:68:66:04:23:49:25:
15:f9:e3:59:f0:59:35:5d:b6:27:23:33:b3:c6:d7:3e:a5:29:
e1:b7:d3:0e:af:e9:9f:5a:8d:5e:a2:9d:39:a2:11:bd:34:f6:
a7:db:ab:95:cf:86:b6:b2:1e:5b:a9:f4:fb:e0:61:71:78:0e:
84:ec:9c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:03 2026 by rpki-client