Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft
File: xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft (raw, json)
Hash identifier: rfyERoSPx5AcaRj9Qv7zdGHGbsnFffiP1J5dyR4wbkU=
Subject key identifier: 1C:1E:F6:93:6C:6C:01:99:76:B8:BD:A7:2D:FF:83:D7:62:C9:5F:8E
Authority key identifier: C4:13:D7:A3:76:5F:F9:A2:2B:BC:22:99:E0:49:69:1E:29:40:CB:82
Certificate issuer: /CN=c413d7a3765ff9a22bbc2299e049691e2940cb82
Certificate serial: 019D2771E8794DD49E8F304BE06AD70E8E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft
Manifest number: 15F7
Signing time: Thu 26 Mar 2026 00:01:09 +0000
Manifest this update: Thu 26 Mar 2026 00:01:09 +0000
Manifest next update: Fri 27 Mar 2026 00:01:09 +0000
Files and hashes: 1: xBPXo3Zf-aIrvCKZ4ElpHilAy4I.crl (hash: bbxnQSbtnP3vwgbJPwyrYkIF9vkgdxEQiqL2E6Ekk7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e8:79:4d:d4:9e:8f:30:4b:e0:6a:d7:0e:8e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c413d7a3765ff9a22bbc2299e049691e2940cb82
Validity
Not Before: Mar 26 00:01:09 2026 GMT
Not After : Mar 27 00:01:09 2026 GMT
Subject: CN=1c1ef6936c6c019976b8bda72dff83d762c95f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:a4:b4:59:2a:15:f3:55:13:8b:96:9a:df:
3f:aa:44:3b:d3:5f:91:c9:12:68:f9:32:a8:ca:b1:
5d:03:5c:2f:a5:1d:af:81:13:06:a6:e3:6a:da:bb:
e4:af:d2:86:85:71:4d:2e:b3:40:1b:03:67:d5:1f:
86:9c:d3:66:9a:72:4b:1f:7e:2e:dd:fb:f5:34:de:
ae:a1:f4:79:f3:8e:c9:5c:73:cc:5c:77:5c:81:4e:
ac:44:52:33:22:10:bc:d3:fc:2b:b3:23:8b:88:16:
f0:e9:61:63:79:6d:a2:79:be:c2:7f:89:06:5b:b1:
5e:1a:9c:e7:fd:42:aa:98:ce:f3:07:09:3b:c8:31:
f7:3a:3f:a0:4f:49:f2:20:1f:8e:03:dc:c7:8b:df:
a3:ea:9d:f4:b2:96:26:fe:d1:af:73:88:d6:82:58:
58:13:e1:47:c0:89:37:29:c9:8f:fd:77:53:73:7f:
97:9b:9a:d7:6e:9b:15:8e:13:62:11:4a:02:22:79:
6c:33:3c:8d:cf:1e:07:76:b1:3a:2b:4e:73:2f:54:
3d:46:75:91:83:27:21:4b:86:f1:7a:20:e4:b7:86:
ea:e6:20:00:45:8a:b8:11:e8:94:5f:4a:a4:83:05:
13:ac:f4:ce:e4:f0:19:4f:07:04:d4:5a:45:90:fa:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:F6:93:6C:6C:01:99:76:B8:BD:A7:2D:FF:83:D7:62:C9:5F:8E
X509v3 Authority Key Identifier:
keyid:C4:13:D7:A3:76:5F:F9:A2:2B:BC:22:99:E0:49:69:1E:29:40:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e1:72:76:b1:02:c1:bc:c9:fd:de:d8:50:1e:6a:ce:fb:02:
46:f7:70:c6:a6:c2:47:2e:c2:9d:16:cb:d3:3f:9a:a2:0e:19:
7d:19:41:a5:08:bb:44:48:d7:cd:76:f4:c0:a9:33:f6:c3:fe:
95:e1:5d:23:8f:c5:58:9e:6c:dc:bc:e7:9e:0e:75:10:8f:0a:
45:59:56:fe:67:69:ad:94:94:1a:fb:fd:78:29:eb:88:7b:a5:
d0:5e:01:83:b1:02:84:9a:1f:57:aa:e0:1e:e0:de:f6:5f:6a:
a2:95:71:90:f5:87:5e:11:d4:e9:a9:8b:f6:22:1c:43:d4:aa:
21:8a:6c:75:a5:8f:ea:1d:fb:5a:a9:be:f3:73:f6:70:21:a4:
89:c6:dd:78:7f:c4:79:06:01:3f:80:b2:8a:82:bd:97:b3:f8:
ca:3e:2d:d1:48:33:3c:f1:ed:12:18:89:c9:7b:be:94:66:f6:
01:91:22:ee:09:da:21:0f:04:3a:6a:5e:94:1c:0f:59:11:64:
6f:bf:2f:b6:6c:09:5f:80:db:cc:de:1d:72:b4:54:c2:fd:67:
3b:f0:8e:28:91:a2:d7:dd:be:3a:57:1e:1c:c0:b8:a2:bb:e4:
25:57:d7:df:00:59:aa:6d:d3:41:f3:3f:1a:08:1f:2b:fc:d5:
ab:b3:e9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:16 2026 by rpki-client