Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
File: xc_pCq_i6Ahev28AU5YLlrd4BJE.mft (raw, json)
Hash identifier: 3pIJWrLgRye/OI4PG7qvN7UCsowBYyDsbvDcRZlKdJI=
Subject key identifier: A9:D5:6B:31:61:3D:60:A8:CF:84:F4:F4:61:FE:F8:18:34:7E:11:D5
Authority key identifier: C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
Certificate issuer: /CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Certificate serial: 019D25BA9BB15C935DAB907E618B8AFD5717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
Manifest number: 0A95
Signing time: Wed 25 Mar 2026 16:01:19 +0000
Manifest this update: Wed 25 Mar 2026 16:01:19 +0000
Manifest next update: Thu 26 Mar 2026 16:01:19 +0000
Files and hashes: 1: xc_pCq_i6Ahev28AU5YLlrd4BJE.crl (hash: YIcjKGCWkuxwWj12sYeYCRbiCaD5l7Fe9XSGGITFEWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:9b:b1:5c:93:5d:ab:90:7e:61:8b:8a:fd:57:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Validity
Not Before: Mar 25 16:01:19 2026 GMT
Not After : Mar 26 16:01:19 2026 GMT
Subject: CN=a9d56b31613d60a8cf84f4f461fef818347e11d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:5b:0e:18:cd:04:c6:23:a9:77:42:63:7d:
db:00:55:e5:62:e2:1d:a5:df:8a:5b:83:94:bb:89:
86:0e:72:6e:45:0e:86:83:76:8c:12:e3:c9:ea:f5:
00:9f:af:8e:ef:6d:1d:e5:d4:c1:a4:83:d8:b6:00:
85:69:e8:1e:d9:e5:9c:c0:ba:07:a2:af:c5:4c:ae:
86:ff:44:45:f0:98:18:81:8d:e9:01:41:64:0c:7e:
a4:4a:89:40:c6:97:89:75:2f:30:1b:e5:39:80:96:
b6:ac:88:76:f2:d1:bd:10:e7:b5:f3:5a:d6:17:39:
ea:32:a5:79:9a:43:bc:51:6d:2a:ef:3b:44:56:c5:
50:5f:4c:82:28:4f:d4:a4:40:dc:33:84:4d:8b:81:
e8:99:e4:f8:93:41:29:a1:fc:98:08:97:ca:72:23:
7c:31:dc:ba:ed:f7:0d:fe:9b:6f:50:00:9a:0c:75:
b5:06:b2:4d:5f:65:37:c6:3e:c2:46:4f:87:b9:b5:
02:52:22:ec:13:1c:d5:cf:6b:e3:d0:76:bd:32:82:
af:67:f3:9c:38:e7:57:20:84:83:2f:90:6f:f0:e4:
f5:4a:14:3a:0c:9b:4c:f6:cc:3e:bd:33:b2:f5:97:
85:58:55:a0:64:a2:ff:63:34:87:84:6b:0a:6b:b8:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D5:6B:31:61:3D:60:A8:CF:84:F4:F4:61:FE:F8:18:34:7E:11:D5
X509v3 Authority Key Identifier:
keyid:C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:99:fd:38:2e:a9:17:9c:b2:04:9d:79:1a:65:bb:31:e9:9b:
77:81:75:0c:db:52:1e:54:12:47:3b:22:e2:a3:70:73:8b:6f:
f6:ee:e5:a5:2b:3a:83:74:35:d5:14:ec:37:7e:ba:18:60:c7:
95:57:a3:89:62:4e:1f:a1:af:55:5e:64:ee:70:77:0d:8b:a0:
0d:18:94:d4:c1:f8:49:48:9c:f4:cd:38:d1:b5:c8:14:12:44:
d4:cf:76:ab:95:0b:89:09:b9:37:f0:1a:4c:80:26:1d:fb:06:
8d:ea:72:88:47:65:3d:e8:13:a8:c4:49:40:d2:9b:ce:1f:a5:
1f:77:e1:0a:78:ba:5e:2f:6f:4c:f6:de:79:b9:46:3c:06:eb:
dc:bc:d4:66:9b:3d:d4:2a:dc:2b:01:01:3b:61:13:44:45:99:
5b:44:fa:64:9d:4b:83:00:9e:d2:f2:a7:0e:12:1e:70:48:32:
f3:4c:f8:86:7a:53:fb:a8:c8:3c:e9:14:ed:e1:13:2c:0e:7b:
0c:f6:d2:43:b0:5b:cd:ff:2e:ee:26:86:f9:07:48:fb:00:2a:
82:35:d5:1b:fc:4a:e0:6b:a7:b9:e0:6e:ab:10:b5:69:3d:ed:
1d:11:5c:1b:d8:e4:19:f6:6f:f1:21:39:db:5c:1f:83:8f:bc:
e4:2c:a7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:35 2026 by rpki-client