Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File: xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier: PyFhBO4Egt7DoE8wt4DtbdB7ZyH389dcfNrrHiATGv8=
Subject key identifier: 55:33:5B:D0:A1:56:AC:8C:83:BC:8B:7C:F4:CD:32:F0:26:85:7C:D7
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer: /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial: 019D29CE079EFA039F6A51D011C1D9CB4336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number: 1388
Signing time: Thu 26 Mar 2026 11:01:01 +0000
Manifest this update: Thu 26 Mar 2026 11:01:01 +0000
Manifest next update: Fri 27 Mar 2026 11:01:01 +0000
Files and hashes: 1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: nsYNkEe7Pz1qlMegvMyHZyz7Msu3LbdJjwtkrXL0IM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:07:9e:fa:03:9f:6a:51:d0:11:c1:d9:cb:43:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Validity
Not Before: Mar 26 11:01:01 2026 GMT
Not After : Mar 27 11:01:01 2026 GMT
Subject: CN=55335bd0a156ac8c83bc8b7cf4cd32f026857cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2a:f9:d7:9d:ec:ba:f0:00:48:dd:bf:3d:d5:
9a:42:67:27:1b:dd:06:b5:41:7a:65:73:0d:f0:b1:
2f:de:39:85:85:3c:cb:7b:67:7d:8f:7e:a4:6e:eb:
7e:ca:91:a8:e8:b5:ff:ce:75:b5:7e:a1:f7:b9:f3:
c8:c6:3e:a9:da:99:6d:83:39:9b:7e:bc:77:86:94:
8b:e8:27:51:6a:80:91:4d:f3:09:63:6a:15:10:40:
b7:95:27:b0:47:63:96:92:2f:d4:a5:a7:d8:71:e1:
db:42:de:67:bb:14:04:26:5c:4f:cb:10:15:13:b4:
2c:70:bf:05:0b:c9:96:d2:7f:c1:0a:8c:78:fb:d4:
f9:d5:d2:c6:25:3c:1f:cd:42:d4:d6:b9:4f:50:07:
06:35:4e:05:70:1e:d4:a8:0b:db:92:a1:b8:a2:83:
c8:f6:c6:04:55:92:f1:cc:e7:26:34:20:5c:5c:ca:
0f:d2:e7:2f:6b:2c:62:e0:5b:12:0b:c3:f4:c8:53:
ec:8a:af:9e:91:1d:31:c8:b0:03:95:26:3b:7b:c4:
7f:0b:31:62:0a:71:8a:b8:ae:ae:87:bf:0d:f8:c5:
73:94:dd:0c:04:68:62:04:eb:85:4c:5f:71:7c:91:
d8:d8:42:14:3a:f7:1e:ef:ca:71:d0:7a:57:6d:42:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:33:5B:D0:A1:56:AC:8C:83:BC:8B:7C:F4:CD:32:F0:26:85:7C:D7
X509v3 Authority Key Identifier:
keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:48:61:43:a7:c8:c7:c3:db:15:a9:fc:b2:fb:0c:6d:de:11:
74:a6:cc:7c:2c:00:dd:8d:7f:23:70:c6:fb:b4:59:2f:68:c8:
4b:8e:68:4e:a5:0a:94:da:ca:6c:1a:3b:aa:3b:54:a9:27:e5:
d3:c3:fe:10:ca:cb:67:47:6a:c7:ed:67:b3:e5:2f:d9:39:99:
66:8c:8e:9e:00:5b:7b:99:5c:5f:ff:ef:fb:74:d0:49:1b:a7:
3d:4e:3d:0d:17:24:f4:15:c6:31:a4:f1:19:ac:69:52:39:a3:
4b:cc:8a:ce:f9:8b:e5:89:38:15:5b:97:ca:3e:b0:0d:97:de:
e7:a9:7c:8f:9e:03:18:5e:30:04:64:07:6e:b7:35:df:da:07:
31:18:6d:e8:43:28:3b:e3:eb:be:b4:a7:a7:e9:89:ea:41:78:
de:ec:17:9c:b9:f5:b2:0d:21:7b:59:91:59:61:15:62:f5:56:
0a:e7:ec:88:c9:f4:68:86:62:58:6a:81:b2:c9:ce:9d:d3:fb:
fa:7b:c0:55:d8:42:6f:b7:56:17:c1:f5:ac:38:d8:19:f3:56:
37:bb:fa:44:63:23:5c:eb:e8:48:6f:33:8b:8c:28:52:dd:72:
35:89:e6:25:e0:f8:5f:8e:ff:65:db:e0:d3:27:25:9b:45:f3:
15:32:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:59 2026 by rpki-client