Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.mft
File: x1KtRhPu9BzbgSTyfc-b-HJNHAw.mft (raw, json)
Hash identifier: I6e2MtEecHSvnPz0gECLkK/BMArprohV/K5whXdrpCY=
Subject key identifier: E9:1B:10:08:CD:3B:16:1C:8D:55:7E:54:3A:32:D5:93:3F:D0:C4:B5
Authority key identifier: C7:52:AD:46:13:EE:F4:1C:DB:81:24:F2:7D:CF:9B:F8:72:4D:1C:0C
Certificate issuer: /CN=c752ad4613eef41cdb8124f27dcf9bf8724d1c0c
Certificate serial: 019D27DF947A0D131D42350B5DD837705D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1KtRhPu9BzbgSTyfc-b-HJNHAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.mft
Manifest number: 0150
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: x1KtRhPu9BzbgSTyfc-b-HJNHAw.crl (hash: 9DHFBZFgGXMqv6s2noFb0ljR1Uoe7dZl83h/TZ6fWj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1KtRhPu9BzbgSTyfc-b-HJNHAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:94:7a:0d:13:1d:42:35:0b:5d:d8:37:70:5d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c752ad4613eef41cdb8124f27dcf9bf8724d1c0c
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=e91b1008cd3b161c8d557e543a32d5933fd0c4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:ab:d7:94:f6:c7:36:f1:69:44:4f:2e:01:
35:14:28:ff:8a:2f:6a:87:59:02:b6:db:8b:c5:89:
4a:b1:57:68:70:5b:05:63:f4:50:9e:29:55:4e:1f:
75:a7:80:36:71:c7:05:23:a0:e5:5d:b5:fa:e2:20:
2d:85:ab:d1:28:e0:54:aa:01:21:ac:9a:78:b6:e4:
17:ec:e1:1a:49:e0:6b:ec:22:bf:b7:dc:e4:e0:71:
39:fb:c9:b6:83:45:d9:ca:0b:cf:b9:45:d5:73:d1:
95:bf:c5:78:6a:2e:83:f2:81:ad:f5:4e:19:36:98:
84:b5:7c:ab:17:af:1f:70:6c:83:6b:74:6f:f9:fc:
40:1b:4a:92:10:1a:19:4c:88:d4:8e:6b:42:0b:72:
59:1e:17:5b:69:16:0e:a3:ef:60:f7:33:a8:a0:be:
32:e4:ae:2b:29:0b:e7:84:a3:23:85:15:eb:d2:b6:
53:d2:89:a6:6b:51:33:ce:45:d4:72:7c:e7:75:32:
69:cc:0c:08:23:64:4b:3e:5b:66:c7:be:fe:4f:d2:
b5:66:00:5e:67:5b:d9:a4:88:ac:8a:2d:30:5c:f5:
ff:c7:81:29:17:a8:35:bf:94:bd:17:c4:78:8d:f5:
d0:3f:0f:ff:7a:37:63:17:14:70:5a:3f:cf:c4:15:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1B:10:08:CD:3B:16:1C:8D:55:7E:54:3A:32:D5:93:3F:D0:C4:B5
X509v3 Authority Key Identifier:
keyid:C7:52:AD:46:13:EE:F4:1C:DB:81:24:F2:7D:CF:9B:F8:72:4D:1C:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1KtRhPu9BzbgSTyfc-b-HJNHAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:28:16:a5:d1:fb:5e:36:e9:f2:96:90:27:bd:44:3d:7f:8a:
47:57:1a:cc:94:01:c5:2d:38:97:e9:cf:cc:53:10:c4:d6:e5:
af:35:a4:98:51:1e:1d:4f:21:f8:f6:22:94:cf:d9:a6:3a:a4:
df:8b:84:b2:a4:4b:72:c9:60:78:55:c7:0b:6e:3d:dc:93:7e:
ab:47:0c:6d:3f:d5:c6:2b:cd:76:19:07:07:ff:83:1e:16:1c:
a4:18:70:13:97:21:c0:75:b9:91:12:a1:84:6c:e3:6f:c4:dd:
3f:f2:31:90:8c:69:56:da:0f:a8:d9:76:8b:bb:d2:d8:7f:bb:
36:85:4c:cc:11:57:22:5b:0a:da:d8:61:e2:ea:47:a4:53:7d:
8e:8f:06:1a:33:80:a4:61:b0:25:01:98:ad:15:0e:cc:37:82:
e5:98:2a:17:aa:d8:af:62:39:90:77:c2:1d:38:c8:cd:fe:14:
d0:af:d8:fe:74:53:f4:b1:64:06:5d:20:e5:c7:c0:9a:6d:f1:
9b:b7:44:1a:51:a6:11:6a:6f:b5:e3:c8:b9:da:2f:b6:0d:7a:
2c:83:8f:df:ce:1a:3d:9d:5b:71:21:e9:f4:05:6f:18:f9:05:
80:8c:b0:c7:dd:98:23:ee:9d:da:40:d3:ea:d3:ef:7a:5a:fd:
ee:a8:ef:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:50 2026 by rpki-client