Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft (raw, json)
Hash identifier: bn3o7yMHUYbcjC72+y/fQK5yqsiaF79ZQxGDs1CoFtc=
Subject key identifier: F6:51:DD:96:C4:91:D0:31:11:9B:CC:92:03:87:67:BF:1D:77:DB:41
Authority key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
Certificate issuer: /CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Certificate serial: 019D330802DB660E634AE5EBFCFBE7D35E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
Manifest number: 05A6
Signing time: Sat 28 Mar 2026 06:00:56 +0000
Manifest this update: Sat 28 Mar 2026 06:00:56 +0000
Manifest next update: Sun 29 Mar 2026 06:00:56 +0000
Files and hashes: 1: xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl (hash: 0p7vPuxZIJRblLB4pMAX0JpmEaPQMT0JcBKh9BIq7C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:02:db:66:0e:63:4a:e5:eb:fc:fb:e7:d3:5e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Validity
Not Before: Mar 28 06:00:56 2026 GMT
Not After : Mar 29 06:00:56 2026 GMT
Subject: CN=f651dd96c491d031119bcc92038767bf1d77db41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:34:f6:0c:aa:4c:6a:14:12:02:b1:b8:47:
40:3a:0e:5b:4e:ad:09:f5:e2:55:e3:d4:f0:41:db:
19:7e:78:1a:ab:8c:c6:66:c2:be:a2:9a:bc:d4:fd:
24:db:0d:f9:89:39:a9:36:ff:8e:ae:32:5f:09:e0:
c2:b6:ba:f9:34:e9:2c:14:70:fe:a5:14:7a:2b:9f:
70:1a:87:b9:00:32:e4:73:94:c0:bf:43:ce:08:df:
cd:86:95:ae:be:94:8f:2a:e4:f0:32:6a:6e:e7:ca:
4b:5a:5d:4c:a8:be:92:fa:d0:98:b2:6c:71:9d:eb:
73:c3:93:8f:25:8e:58:f2:20:10:90:be:40:95:46:
3d:46:96:3d:a8:f4:c0:3e:ec:70:ee:44:1e:ba:8d:
73:53:25:f2:92:9d:e6:fc:df:28:b7:c1:b9:db:a6:
bd:77:40:3d:e2:42:56:cb:dd:ff:9d:cf:43:9d:24:
21:f6:b0:97:98:2e:28:cb:1e:e6:2e:ee:ff:24:57:
57:dc:02:73:fc:be:46:b5:0a:fd:7e:fa:10:28:43:
1d:28:3b:2a:57:f1:45:f9:74:e8:62:0e:4b:8f:f5:
13:7f:19:57:e6:2e:5b:b0:20:79:17:92:55:a6:a0:
2c:69:8e:89:19:50:b2:79:2b:eb:48:6d:c4:8b:97:
89:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:51:DD:96:C4:91:D0:31:11:9B:CC:92:03:87:67:BF:1D:77:DB:41
X509v3 Authority Key Identifier:
keyid:C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:85:43:5f:55:a5:29:0e:86:6e:35:b1:59:cc:b2:89:12:34:
12:5f:04:1d:8f:e1:cb:1d:ad:e8:50:fc:4e:18:2c:ab:c2:be:
f3:cb:2f:3e:c4:11:f3:60:43:b4:99:fc:c7:10:c4:e7:5e:e6:
4e:cf:19:43:ea:8f:f1:fe:b3:d7:bd:7c:47:b1:1c:e1:36:50:
cc:82:09:c7:ac:b7:13:94:87:d4:e5:51:7a:0f:68:ec:47:78:
d8:4d:90:94:5d:4d:62:95:43:5e:2b:b7:f0:7c:76:94:10:ad:
e3:ab:0e:49:5d:bc:0b:58:b9:82:5c:b2:60:d3:63:bb:28:81:
5b:31:fd:62:49:52:fc:27:57:b3:fa:1f:1b:01:bd:52:b3:2b:
ae:e4:44:70:a5:05:5a:8c:83:64:fd:05:66:f4:1f:52:b7:41:
1b:d7:4c:65:f9:59:7a:0d:6c:0c:ae:b7:c2:b9:19:da:2c:df:
62:32:3e:4d:be:34:ab:0b:cc:3f:7f:c9:93:fd:cd:bb:52:dc:
b9:d4:01:3a:c4:1b:09:72:67:e4:b8:5d:5f:4e:b4:53:d7:e4:
70:cc:de:db:e7:86:21:39:95:98:53:e0:9c:aa:7c:4a:6f:8d:
a9:b9:aa:c2:61:f0:c6:91:61:ac:5a:06:52:06:75:ca:25:42:
86:8d:0f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:08 2026 by rpki-client