Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
File: xbqElpIUKuxW19DdyN1N20HPg8E.mft (raw, json)
Hash identifier: iNfcF231fdPHxdY1Mdoc5CVZp/Zf2SrCj9KOVpoUFW8=
Subject key identifier: A8:D0:19:30:0A:F4:57:2A:C4:92:F7:57:2B:5F:8B:AF:9B:81:7E:ED
Authority key identifier: C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
Certificate issuer: /CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Certificate serial: 019D25836C6A28FA1BC034279B8279432707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
Manifest number: 1185
Signing time: Wed 25 Mar 2026 15:01:03 +0000
Manifest this update: Wed 25 Mar 2026 15:01:03 +0000
Manifest next update: Thu 26 Mar 2026 15:01:03 +0000
Files and hashes: 1: xbqElpIUKuxW19DdyN1N20HPg8E.crl (hash: TYQ37U9RokMEv2PGRIzCo54+IVbsM+F6b4w1TVzK+0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:6c:6a:28:fa:1b:c0:34:27:9b:82:79:43:27:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Validity
Not Before: Mar 25 15:01:03 2026 GMT
Not After : Mar 26 15:01:03 2026 GMT
Subject: CN=a8d019300af4572ac492f7572b5f8baf9b817eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:e8:16:d8:87:2e:10:3f:b6:f0:75:08:a1:
04:38:34:46:b6:23:2d:12:13:5b:54:2a:86:6c:56:
0d:7c:b2:79:18:c6:fc:14:55:6b:f1:b1:08:10:07:
99:e3:56:d8:2c:4f:2b:b1:83:09:c2:38:86:a9:96:
3f:10:21:67:a1:05:93:52:84:f5:af:cb:36:5e:86:
ac:22:ee:fe:4f:e2:e2:39:ce:c6:23:af:ff:44:e3:
f3:80:42:d8:df:93:6d:03:cc:6d:0f:bf:82:cc:40:
77:f4:80:37:c8:5b:ee:02:da:13:0b:30:8f:14:d4:
58:5c:29:8a:1b:17:e5:87:2e:1c:55:ad:d7:3b:a5:
04:f3:20:a0:0c:cd:69:ce:7c:84:1e:07:b3:ee:52:
40:00:b2:a9:1d:92:f0:3a:f1:3a:0d:4d:72:16:55:
81:09:b9:32:82:f1:ff:80:0c:ce:a6:f2:77:c9:bf:
c2:a5:7c:c8:c7:32:91:78:ca:13:68:3f:9f:fb:d2:
0e:2e:3f:25:ac:db:a7:cf:4e:44:7a:05:01:1c:06:
0d:2b:b0:27:e3:75:70:41:b0:b6:5c:5f:ce:a3:85:
51:d8:94:79:5c:2b:21:1c:54:4c:d5:54:fd:5d:1d:
18:e7:c4:5b:41:e1:27:0c:f9:85:24:7b:aa:01:fb:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D0:19:30:0A:F4:57:2A:C4:92:F7:57:2B:5F:8B:AF:9B:81:7E:ED
X509v3 Authority Key Identifier:
keyid:C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8b:53:d3:1b:8b:85:46:6a:1f:22:91:b6:19:a2:38:ce:97:
00:2a:00:04:a9:31:88:52:dc:b0:e3:83:56:ab:f7:c8:6f:ea:
d3:19:f6:06:bc:b9:5f:7f:82:8e:2a:1b:73:da:b8:44:36:33:
fa:eb:e1:35:a0:a1:c1:fb:d2:1b:2e:e0:91:b5:cb:20:48:37:
f5:9e:56:ed:be:ee:74:49:07:f6:dd:5a:92:f6:9d:5e:79:e5:
7a:73:a9:c9:f8:2c:3d:ca:9b:ef:0c:36:94:2d:c9:94:25:5d:
7a:80:67:8d:59:82:9c:79:6c:3b:0f:39:64:da:f8:7e:2a:38:
2a:23:02:81:7b:42:e6:58:b0:94:0c:9e:c5:dc:71:4f:16:78:
9a:57:e7:2e:c7:64:4d:35:1d:5e:81:41:1e:bd:e0:6c:92:e9:
d5:72:fd:5b:40:f0:08:53:8a:fd:c4:6b:7a:5b:14:d7:30:8d:
30:9e:94:b5:b9:2b:fa:07:46:67:f1:23:bc:2d:ae:e1:fe:17:
57:05:25:4d:2f:0d:d7:75:61:95:05:ef:bc:05:9e:3b:1d:c2:
0b:2a:ab:72:f8:35:a9:15:7d:3d:37:bd:9b:72:48:79:05:b8:
b3:fb:33:29:0c:5e:47:b6:50:cf:0a:dd:f7:26:2c:49:c2:1f:
a8:16:c0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:57 2026 by rpki-client