Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
File: XzoD6voEyDkjvYaTJGGFDfX3gUY.mft (raw, json)
Hash identifier: rgJWwu1eJHFQdC073Q3wDfYDfwwzqt1Zr+34M7l2YAY=
Subject key identifier: BB:3E:20:9D:E2:B7:85:1C:B5:74:50:32:78:54:FD:B1:89:D6:A3:40
Authority key identifier: 5F:3A:03:EA:FA:04:C8:39:23:BD:86:93:24:61:85:0D:F5:F7:81:46
Certificate issuer: /CN=5f3a03eafa04c83923bd86932461850df5f78146
Certificate serial: 019D284D75F10F1D0C62AEA2311423EA2283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzoD6voEyDkjvYaTJGGFDfX3gUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
Manifest number: 14E1
Signing time: Thu 26 Mar 2026 04:00:58 +0000
Manifest this update: Thu 26 Mar 2026 04:00:58 +0000
Manifest next update: Fri 27 Mar 2026 04:00:58 +0000
Files and hashes: 1: XzoD6voEyDkjvYaTJGGFDfX3gUY.crl (hash: Lqb9hC1HRuDj4HRm3HfKU1DtZ8yScBel4EHVOpGG58c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzoD6voEyDkjvYaTJGGFDfX3gUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:75:f1:0f:1d:0c:62:ae:a2:31:14:23:ea:22:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a03eafa04c83923bd86932461850df5f78146
Validity
Not Before: Mar 26 04:00:58 2026 GMT
Not After : Mar 27 04:00:58 2026 GMT
Subject: CN=bb3e209de2b7851cb57450327854fdb189d6a340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:7b:cf:60:7e:91:fb:6a:25:cf:f3:f7:0b:
b9:39:df:36:13:ec:09:8f:c3:06:41:b8:d2:b3:7a:
44:fb:fe:b7:66:97:08:bf:0e:14:61:91:a9:5e:a8:
03:29:5e:ff:16:41:35:8f:b0:de:07:8c:3a:38:c7:
2f:07:26:bf:34:ed:1b:5e:d0:bb:3d:4c:59:43:9a:
3e:1e:ba:fb:e7:e2:cf:ad:d7:4e:e5:f2:2e:c1:89:
49:6f:c7:ec:b9:27:ab:8a:6e:7b:c9:6c:da:8b:08:
f7:60:1a:c9:d5:45:09:6d:7d:2d:a4:a4:73:72:77:
71:5f:b6:89:6a:35:df:04:e8:e5:9b:8d:cd:4c:94:
a8:7f:28:7f:cc:1d:c3:75:a2:0c:c8:93:8b:ba:a9:
27:5d:a6:c5:61:cd:fb:0c:56:45:00:f9:66:b0:13:
46:0d:90:f1:70:09:3d:2e:80:88:bf:25:85:d1:ab:
a7:8c:54:d5:0d:bb:6c:e7:55:f3:56:17:c2:c6:63:
5a:9a:69:61:7b:4d:99:ec:fb:65:cc:e4:d9:01:74:
0c:48:39:12:4a:12:a9:07:6f:b9:22:10:6b:1d:d2:
5a:75:c5:58:ae:10:ae:cc:b8:26:dc:1b:cc:f3:57:
1d:c3:2a:14:94:a7:39:01:40:33:35:75:5e:cf:4d:
9e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3E:20:9D:E2:B7:85:1C:B5:74:50:32:78:54:FD:B1:89:D6:A3:40
X509v3 Authority Key Identifier:
keyid:5F:3A:03:EA:FA:04:C8:39:23:BD:86:93:24:61:85:0D:F5:F7:81:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzoD6voEyDkjvYaTJGGFDfX3gUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f9:79:72:e9:1d:d0:a7:ee:ce:a4:ed:62:e6:ad:c3:46:a5:
00:96:d4:d2:ec:38:c7:e5:ca:ad:0a:3f:b7:e0:7c:a7:00:19:
9a:15:ed:18:8d:0c:73:90:a1:90:d7:f5:7e:67:b2:95:e9:a5:
e6:53:e6:9f:29:d1:0b:c9:a5:e7:74:3a:aa:9f:8e:b9:40:c9:
17:d4:3d:39:2a:47:e9:7c:69:4d:d5:75:35:99:b3:0b:29:af:
3b:7c:3c:e9:c6:90:bf:76:b9:33:35:f2:42:9f:4a:c7:b2:f3:
3c:ff:85:47:a7:99:e9:97:d9:8c:43:2e:2f:e6:2d:27:f5:45:
86:f9:c0:d4:65:b6:53:f8:18:e4:f4:83:85:c7:02:11:ce:32:
23:f0:77:9d:c9:25:f8:bb:75:87:3a:fe:2b:6b:71:fb:24:b9:
3f:8b:7c:73:59:e7:4b:f1:f0:63:da:5e:35:66:2d:61:fb:14:
dc:55:98:d2:ff:8b:68:26:ea:9f:5e:68:1d:86:ac:5e:7f:2f:
66:b2:26:4c:f3:b4:53:47:7a:48:62:34:ac:30:fd:28:28:62:
e2:c8:16:9b:06:49:c2:91:29:70:89:12:10:bd:17:51:e4:12:
22:7f:43:de:ba:92:35:c6:01:52:a4:b6:66:16:12:8f:15:c1:
12:64:f4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:55 2026 by rpki-client