Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
File: XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft (raw, json)
Hash identifier: tyMyQabGjFLZuDMqcsYt1ejJKG+8FaNWeOpzAdCmOlo=
Subject key identifier: F8:4A:A2:87:21:8F:4B:CE:C4:81:8E:55:74:2F:2A:A8:DA:4B:8C:32
Authority key identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
Certificate issuer: /CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Certificate serial: 019D2AE11F5CDCB7BE23662B510F8C2C0035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
Manifest number: 0C94
Signing time: Thu 26 Mar 2026 16:01:29 +0000
Manifest this update: Thu 26 Mar 2026 16:01:29 +0000
Manifest next update: Fri 27 Mar 2026 16:01:29 +0000
Files and hashes: 1: XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl (hash: 7p19TqvHAqGVQY632CpxykWPTMxSftD8nb36wVKsVc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:1f:5c:dc:b7:be:23:66:2b:51:0f:8c:2c:00:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Validity
Not Before: Mar 26 16:01:29 2026 GMT
Not After : Mar 27 16:01:29 2026 GMT
Subject: CN=f84aa287218f4bcec4818e55742f2aa8da4b8c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:79:42:af:1c:27:7a:3f:b2:e2:57:4f:3f:
69:1e:1e:28:0f:7e:76:64:46:63:b0:49:44:1e:ac:
3c:dd:b3:d6:6a:21:3b:3d:15:84:5f:71:21:9b:1b:
6c:ac:19:23:00:6c:d9:c9:6e:fd:0b:2f:bd:21:c7:
39:8c:15:33:71:44:38:e6:1a:e1:c5:01:d2:66:30:
10:81:e9:6e:41:f8:fd:8d:d7:ee:8f:4d:e1:1a:65:
a5:8f:79:7a:09:9a:45:1d:63:a6:66:37:ca:6e:c5:
c2:05:27:1b:fd:43:82:07:03:63:ef:58:cc:c8:00:
31:e6:59:37:77:53:76:d9:37:28:86:5b:59:ab:0c:
75:af:2b:ad:f6:5f:4d:91:3f:0e:b0:48:ac:95:6b:
e0:98:97:14:46:14:91:34:1c:2f:62:5c:2e:4d:36:
b7:66:f5:24:8c:5e:f8:a4:68:f4:cd:4e:d6:61:14:
13:4f:5b:90:78:99:f4:de:58:87:90:49:3e:06:3d:
87:f4:fa:1e:1d:4f:c0:e0:f0:17:e5:24:29:f8:ab:
fb:bb:2b:3d:98:ed:d4:f4:a4:ff:f9:02:dd:6e:49:
5a:65:2c:04:3b:2d:92:64:a5:4a:6c:b2:63:70:01:
6d:43:11:4d:b9:6e:5d:b7:c2:14:69:fa:0f:e1:1c:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4A:A2:87:21:8F:4B:CE:C4:81:8E:55:74:2F:2A:A8:DA:4B:8C:32
X509v3 Authority Key Identifier:
keyid:5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9e:fe:d3:61:e2:2b:aa:3c:45:39:e4:f7:e8:c5:b3:a9:b7:
19:ed:e2:7d:cb:fe:cc:6f:0d:52:58:70:4b:80:ce:d1:f8:7f:
68:56:21:97:85:84:7a:e8:95:12:92:79:6d:3e:a9:e0:4f:1e:
b2:88:5e:a9:7a:10:65:af:34:56:00:c7:d0:b9:f6:5c:67:65:
f4:f0:8d:e0:ab:d1:fc:59:34:6b:d9:7d:9f:79:98:08:cd:48:
0b:28:e3:b7:a7:ce:1c:98:f6:11:e7:ca:21:6f:11:e5:cd:6e:
9a:71:23:86:e9:80:6a:1d:be:81:13:59:48:11:66:8d:16:b4:
e7:98:d4:68:4f:5a:47:65:ef:07:5d:1a:44:de:f4:77:68:21:
09:e1:21:c2:f1:ef:a9:6c:c3:fa:55:a3:f6:78:3b:22:2f:39:
86:f8:d7:40:24:57:06:f1:77:99:4b:69:d6:7c:ff:ec:a5:58:
b7:15:62:bd:2c:8c:fa:e4:42:a0:02:7b:af:a0:d5:42:15:d9:
3c:fe:a5:8c:97:d7:4e:67:12:c9:ed:da:78:53:54:e2:4b:e9:
eb:b5:7f:e1:78:6f:89:1b:7f:3e:2d:85:5b:22:05:ba:2e:63:
31:d7:63:70:1d:cb:76:6c:75:1f:7f:b5:bd:a4:28:50:84:16:
6f:08:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:36:33 2026 by rpki-client