Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
File: Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft (raw, json)
Hash identifier: I1/cLYM+QK8H4QwhYdZfQFuGBAJlh1nl6GDX54mlWoI=
Subject key identifier: B2:41:34:1F:92:49:FA:A5:E2:AF:17:39:5D:1C:44:DD:DF:49:17:D4
Authority key identifier: 5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
Certificate issuer: /CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Certificate serial: 019D296193B3D6C74EA16557C1AFF98D3C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
Manifest number: 0EDD
Signing time: Thu 26 Mar 2026 09:02:33 +0000
Manifest this update: Thu 26 Mar 2026 09:02:33 +0000
Manifest next update: Fri 27 Mar 2026 09:02:33 +0000
Files and hashes: 1: Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl (hash: IGo2q7GVJ5qd9SVKfv3a/oq37kuY9sPvlw570wYIocY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:93:b3:d6:c7:4e:a1:65:57:c1:af:f9:8d:3c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Validity
Not Before: Mar 26 09:02:33 2026 GMT
Not After : Mar 27 09:02:33 2026 GMT
Subject: CN=b241341f9249faa5e2af17395d1c44dddf4917d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e8:ac:dc:e5:76:ec:20:e8:8a:e8:1c:fd:b1:
cb:3b:7c:29:df:f1:8f:c6:b8:bf:7a:e6:1f:c4:f2:
ce:d8:65:a1:68:47:52:25:b4:42:6b:51:1f:fd:1d:
c1:f0:0a:bf:b5:dd:20:17:f7:62:4f:5a:81:ca:c3:
cc:44:df:be:c6:4e:97:07:98:04:da:90:28:1e:01:
61:60:3b:f5:fb:6c:e5:93:17:80:5a:ba:24:8b:71:
db:c3:1e:fd:e0:2d:79:99:de:83:7a:ca:cf:ef:fc:
a5:b6:b6:9a:2e:70:b2:01:f0:f6:1a:8b:1f:75:29:
53:e0:bc:6c:95:33:a2:d5:d5:4b:ff:b5:4e:1d:6b:
08:f1:32:37:f7:8f:3c:36:2f:e8:f2:0f:50:95:f2:
c9:5d:ed:e1:06:6c:e2:50:c9:45:29:19:50:71:dd:
88:75:ab:bf:56:d1:a5:a1:80:4c:b4:9a:d5:be:3f:
44:83:b5:4b:77:63:7e:3e:46:02:85:8e:89:87:28:
b6:26:8f:ac:61:c3:07:1e:63:f2:d4:39:5b:05:4b:
7b:a6:bf:0e:bb:e2:1d:0c:94:c1:e7:4a:80:8c:49:
8c:2b:8c:89:95:af:f0:ad:1a:90:9b:3e:20:a2:cc:
d7:53:d9:0c:7e:72:29:e4:8a:c4:e6:88:75:2a:a8:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:41:34:1F:92:49:FA:A5:E2:AF:17:39:5D:1C:44:DD:DF:49:17:D4
X509v3 Authority Key Identifier:
keyid:5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c1:6d:22:7f:39:68:99:fa:a0:11:16:0f:32:8f:7d:09:eb:
dd:f5:52:57:fb:b1:f4:da:b9:ad:fc:b6:2c:1c:e2:cc:dc:5f:
2d:5b:5c:48:8f:f6:78:51:50:7a:4e:1b:c5:ee:68:bd:85:3c:
a3:66:8b:82:12:58:6a:6a:06:be:fb:02:73:96:42:6f:41:38:
50:9f:ef:0a:aa:f7:a0:b8:fe:f6:3d:c1:b9:74:fd:4f:b7:84:
df:c3:87:f0:db:cb:7f:38:58:54:05:a7:34:df:3a:d5:fa:5d:
ac:8d:b7:7c:b7:4d:26:6a:a1:14:4a:5c:74:32:01:2d:1f:6a:
1b:49:5b:df:43:75:be:1d:87:4e:4c:ce:97:d0:94:6a:22:0e:
32:08:6e:69:de:d5:9d:49:ee:24:67:4a:b1:a6:f6:bb:70:34:
60:e1:a9:05:1f:34:b9:a5:80:62:e1:42:00:cb:99:5d:2f:a5:
d1:08:e2:eb:ac:dc:c3:63:e6:2e:64:64:d0:4b:59:a4:93:28:
c6:5a:a7:d7:07:3b:a7:aa:e1:4d:24:de:ca:60:37:cf:9a:26:
f3:b9:df:01:f3:22:f3:68:70:88:f2:8b:9e:ab:25:b0:75:2e:
f1:29:fb:31:22:e6:36:75:0c:37:5b:84:34:97:64:1c:e7:b8:
15:d9:03:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:13 2026 by rpki-client