Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
File: XlgQVXywZwvJwJM-An6b2CqxVt8.mft (raw, json)
Hash identifier: mFoKQMkId5E+y/ten9OkehA8tIbsg0KfbxWBj/X7sAg=
Subject key identifier: 18:3D:12:DF:EF:93:75:E4:B7:C7:80:55:8E:B9:03:1D:38:31:09:D6
Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
Certificate issuer: /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Certificate serial: 019D2996E14BA50337F14D776F3068978411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 10:00:47 +0000
Manifest this update: Thu 26 Mar 2026 10:00:47 +0000
Manifest next update: Fri 27 Mar 2026 10:00:47 +0000
Files and hashes: 1: XlgQVXywZwvJwJM-An6b2CqxVt8.crl (hash: o0eNnm0UAXoPRLCPrHvYMqNukXOj3TDtfrMzoogXrFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:e1:4b:a5:03:37:f1:4d:77:6f:30:68:97:84:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Validity
Not Before: Mar 26 10:00:47 2026 GMT
Not After : Mar 27 10:00:47 2026 GMT
Subject: CN=183d12dfef9375e4b7c780558eb9031d383109d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:76:1d:86:bd:2e:58:92:aa:8a:5d:b1:e5:
d5:82:2f:4f:59:84:33:e3:be:c2:c6:3b:88:7d:f1:
5f:4b:07:fe:d5:5f:f3:c5:88:cf:e7:8f:48:1b:11:
7d:72:3c:14:80:bc:77:5c:80:0d:30:c6:8a:84:52:
a0:3e:8c:db:49:3c:ba:50:ac:b3:af:f3:1f:63:fb:
10:90:76:bd:d0:b6:a1:d3:5c:81:44:10:85:61:d1:
cb:cd:c7:07:c0:5a:8c:16:72:e0:61:38:c4:b0:55:
b3:24:5f:78:81:1b:5c:7f:2e:3b:19:2a:b1:dc:c2:
59:63:e8:e4:e5:4b:3c:42:25:8e:f2:13:14:87:c3:
13:89:af:71:47:47:0b:1b:8e:81:8e:09:90:2b:93:
31:5f:9e:0f:00:29:c2:60:17:6f:45:7e:bf:9a:43:
33:24:f0:fa:66:97:0d:99:bb:11:9b:dc:3c:11:e9:
05:c2:e2:b3:c7:db:93:1a:15:aa:ae:8e:01:4b:e4:
22:58:69:d0:ac:38:78:71:e2:33:f7:e0:27:5a:b5:
f9:47:1d:c2:11:5b:70:e9:a0:4f:9c:55:dc:3a:4c:
06:5d:b9:85:8b:83:7c:0c:e1:9a:4c:5e:de:6d:37:
18:09:87:02:6d:91:db:b2:87:48:e0:8b:e9:63:bc:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3D:12:DF:EF:93:75:E4:B7:C7:80:55:8E:B9:03:1D:38:31:09:D6
X509v3 Authority Key Identifier:
keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:44:00:73:2a:ad:04:3e:d6:51:67:e4:85:0a:b9:1d:37:e8:
11:c8:de:e7:23:0d:7b:b3:9a:3d:65:b1:2d:1f:c0:b8:bf:10:
2e:a8:a3:fc:26:06:bd:c9:6d:b5:18:8f:6f:74:7b:0e:6c:b8:
a4:2e:50:f4:ab:6f:71:2c:c7:a0:36:d8:28:96:55:23:fa:08:
b7:45:2f:25:12:d4:b2:d7:25:0a:bc:53:e8:ab:f8:06:69:89:
f4:6d:4f:8f:fd:05:d6:e1:0d:5e:96:f7:75:73:72:db:6b:ca:
26:88:0a:2a:e1:5c:44:97:45:c1:a8:ee:90:6f:d8:28:cc:f9:
9e:21:1d:e1:48:9d:a9:73:a3:fd:37:43:ef:a0:53:9f:fa:7d:
c0:0c:89:c8:7f:5a:1f:90:15:b8:17:6b:11:14:4c:06:c2:50:
5c:23:7c:98:6c:f7:b5:24:b7:85:84:a1:87:14:3c:c2:ed:e6:
53:f7:07:de:4c:de:dd:85:a3:6d:50:41:1b:13:87:0c:66:d6:
eb:22:0f:c0:3b:d7:ef:46:1a:5a:b6:53:28:97:f4:37:4d:88:
96:b7:30:34:83:bb:e2:98:35:5f:a9:ec:bc:3c:38:92:97:dd:
b0:4c:a7:fd:f5:34:21:a8:0b:e7:90:09:cb:1d:9c:04:6e:db:
6f:aa:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:49 2026 by rpki-client