Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
File: x0oNp1cJLW7M99lO3idYdToc14Q.mft (raw, json)
Hash identifier: Pw7frpR+1PuO8VoQUzlgmiX6MVZvbPiMSOJVFwkeVKI=
Subject key identifier: 9A:32:1E:26:BC:3D:49:D9:BB:7D:21:CB:DD:D1:E9:8A:48:50:00:17
Authority key identifier: C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
Certificate issuer: /CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Certificate serial: 019D33081E759BDC6846213C8E24452F4BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
Manifest number: 1784
Signing time: Sat 28 Mar 2026 06:01:03 +0000
Manifest this update: Sat 28 Mar 2026 06:01:03 +0000
Manifest next update: Sun 29 Mar 2026 06:01:03 +0000
Files and hashes: 1: x0oNp1cJLW7M99lO3idYdToc14Q.crl (hash: ds0S2Q574X57AdUKiMOWot8nCQXbn8XOnt+Ffr252go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:1e:75:9b:dc:68:46:21:3c:8e:24:45:2f:4b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Validity
Not Before: Mar 28 06:01:03 2026 GMT
Not After : Mar 29 06:01:03 2026 GMT
Subject: CN=9a321e26bc3d49d9bb7d21cbddd1e98a48500017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:1c:19:10:fd:32:cf:54:bb:93:b5:41:38:
9d:7c:d5:96:1e:47:c6:a3:ad:70:c8:3b:5b:48:ad:
d0:d4:ad:9b:76:20:e4:3f:67:f1:42:bc:04:6c:bb:
1e:5a:c8:76:53:43:bb:6c:d5:b0:1b:4f:57:ed:b3:
64:22:94:cb:b4:5d:20:5b:ff:55:59:1e:ca:25:74:
fe:73:f8:49:78:c2:63:da:44:53:43:08:a9:fc:3c:
44:e0:72:c5:46:e3:bb:85:86:c5:dd:f9:c8:f3:32:
fe:62:e8:9c:0a:84:7d:bd:5d:53:cb:35:78:ec:d7:
26:80:48:4a:c3:84:0b:43:35:7d:19:28:f8:b7:e5:
ec:49:0d:5e:7a:dc:d9:96:43:cd:03:7a:cf:51:4b:
7a:e6:9a:e0:2c:bb:63:dc:5d:ae:f4:80:da:b6:9b:
18:b2:9a:fe:1f:c2:8d:a4:8a:4e:c0:e6:5c:ce:d4:
45:c1:9c:a6:4f:9d:e9:11:5c:e2:2b:ab:04:f6:35:
30:30:41:f1:29:6d:ca:f5:46:36:1f:53:5b:3b:b8:
c4:fa:ea:d9:29:08:7d:be:46:3f:bc:8b:44:39:dc:
4b:c9:b0:b7:08:ba:8f:83:33:fb:50:c1:16:29:95:
2b:4d:f3:c9:39:0d:77:14:87:c6:71:57:26:04:12:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:32:1E:26:BC:3D:49:D9:BB:7D:21:CB:DD:D1:E9:8A:48:50:00:17
X509v3 Authority Key Identifier:
keyid:C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:60:75:00:bb:ab:c4:e9:80:c9:16:76:e8:a1:81:0c:b1:e2:
08:04:20:a5:10:84:5e:5d:22:a9:73:b3:8d:cc:54:f3:36:24:
09:f7:e6:8c:0f:7d:1e:de:fc:02:93:96:b7:d9:af:c5:3c:2c:
12:20:f6:db:f8:2c:b8:0f:bc:4e:06:a5:04:98:38:e5:23:a1:
ee:e7:a5:2f:13:f1:2c:91:f4:c5:c4:47:c3:d7:7b:5b:05:42:
1b:16:79:2f:2e:50:20:2f:59:83:4f:d2:55:6e:6a:6f:bd:fb:
c3:d8:57:2c:2f:2a:5e:b5:f3:4c:0b:83:98:18:8b:71:9b:b1:
2c:48:90:31:81:65:0c:32:b3:5f:52:1d:76:d4:37:28:d5:52:
44:59:e8:21:9a:39:98:c2:b6:4a:f7:32:e5:75:d5:ad:12:e8:
d8:51:ec:8f:a3:e6:b3:97:20:57:d5:3b:59:3b:1e:5a:a4:13:
c7:89:92:a8:38:1e:01:41:b7:c8:0c:81:df:6f:6f:af:0d:b8:
0f:b3:64:4e:32:b9:3b:39:8d:14:0f:c6:a0:14:c6:ea:11:23:
d0:7d:8f:b7:22:9d:fb:f3:db:f5:5d:a1:1c:0a:9f:9e:de:b1:
63:68:78:66:05:5b:93:8e:6b:99:8d:43:e4:02:fc:aa:eb:54:
63:6a:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:37 2026 by rpki-client