Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File: xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier: dhaqmZejjE5x01VGaUf/dxCQ+hdBw9Q8h+ov0/7m3ZQ=
Subject key identifier: 46:41:5A:DA:C6:37:D6:FE:27:16:00:22:17:00:68:D8:80:A8:96:7F
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer: /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial: 019D25F1DB97EC879BD9FF9B7667224153B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number: 0560
Signing time: Wed 25 Mar 2026 17:01:40 +0000
Manifest this update: Wed 25 Mar 2026 17:01:40 +0000
Manifest next update: Thu 26 Mar 2026 17:01:40 +0000
Files and hashes: 1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: 66LCKHIbxbqqkgDeKPEnjrfgBDq+Wgw5EJbZiZwaK9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:db:97:ec:87:9b:d9:ff:9b:76:67:22:41:53:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Validity
Not Before: Mar 25 17:01:40 2026 GMT
Not After : Mar 26 17:01:40 2026 GMT
Subject: CN=46415adac637d6fe27160022170068d880a8967f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:f2:6a:b6:e8:20:02:e3:8d:b7:a9:44:d9:
27:c4:bd:1e:97:38:d2:76:d1:ef:9f:c3:51:eb:d6:
14:04:dc:36:37:9e:76:43:13:33:81:9c:94:2f:60:
34:61:55:72:7a:9c:f7:64:16:d9:a0:17:01:e9:57:
85:11:a6:92:10:e9:e7:87:13:b0:cd:85:7a:7b:f7:
8e:bd:83:e1:57:31:a1:2f:6a:0a:74:6d:17:1a:9e:
31:83:94:c5:82:70:31:da:f8:9c:a9:5d:e4:8b:a8:
e2:a3:67:32:9d:1b:bc:ec:ad:74:db:87:56:ff:7d:
14:69:0f:82:d5:37:ca:f7:09:59:88:77:6b:e5:5b:
71:e0:0f:34:07:98:c4:3a:c1:6f:cf:06:57:a9:89:
ea:e1:78:a7:45:3e:69:a9:5a:85:ed:4f:8f:f8:93:
5c:06:b1:3d:cd:d2:64:c9:61:56:1d:63:7a:4a:c4:
f7:ba:3f:dc:94:24:6b:11:fa:9a:5e:98:72:08:1a:
9e:20:17:bf:86:1e:4e:3d:42:17:a9:6d:40:2f:4f:
83:a3:84:44:5c:20:1d:b7:bc:92:0a:09:94:c2:66:
98:2b:84:eb:52:e7:09:b0:ac:2f:06:37:68:0f:d2:
f3:36:b6:de:fa:24:96:d8:a4:41:67:18:98:0f:e8:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:41:5A:DA:C6:37:D6:FE:27:16:00:22:17:00:68:D8:80:A8:96:7F
X509v3 Authority Key Identifier:
keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:69:5e:89:d6:0b:5c:6f:1e:01:d5:76:9f:de:b5:b0:fb:b3:
8a:86:31:95:de:14:a4:9f:f7:41:9b:f6:96:99:cf:61:b7:94:
e8:3e:65:ed:83:71:35:7f:ac:ca:db:f4:02:40:99:1a:2b:93:
06:0c:56:9e:b0:bf:1b:b6:e2:b6:19:a5:7b:44:d3:92:19:ea:
71:3e:4b:7d:e0:0f:22:e2:a2:0d:d3:e0:a4:1c:6c:c0:ca:d8:
ae:6e:4c:86:3b:b9:99:0b:3d:99:6b:1a:e8:2c:8b:52:68:aa:
a6:68:82:60:70:9c:ae:70:20:02:41:e9:04:eb:af:2b:5c:f3:
06:78:1f:3d:51:cd:39:00:05:d3:c4:2f:ba:70:db:7f:24:f1:
f1:7b:7f:1c:db:08:e7:ff:75:a7:a5:46:41:6d:cf:5e:6e:2f:
e9:6a:dc:c9:a5:a1:f5:0f:c4:44:71:5f:3d:a6:fa:8f:4c:97:
e4:a7:72:64:89:5d:4f:fb:a8:3d:4d:cf:f4:e1:aa:ac:f7:c2:
b4:56:6b:ed:85:a0:12:ae:ae:f7:1f:a3:3e:a6:a9:bb:bd:0d:
e6:30:08:4f:36:ba:9a:75:85:93:40:82:f3:66:33:1e:ee:09:
e2:01:6f:d5:bc:66:c5:19:8a:0b:8f:99:36:cd:bf:10:46:ae:
9f:cc:7e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:50 2026 by rpki-client