Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
File: X9-gmGf3f6_At75-PE3iDirEN3A.mft (raw, json)
Hash identifier: atQwCJ0iXJz/N4jFpvcd/FFnLlN9Rp/Rgu50U3wsX8E=
Subject key identifier: B4:DC:18:EB:BE:FE:B3:08:09:77:7C:F6:3F:93:0D:F8:D1:17:E6:B3
Authority key identifier: 5F:DF:A0:98:67:F7:7F:AF:C0:B7:BE:7E:3C:4D:E2:0E:2A:C4:37:70
Certificate issuer: /CN=5fdfa09867f77fafc0b7be7e3c4de20e2ac43770
Certificate serial: 019D2997735C5A3BA466116D5353838125DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
Manifest number: 01A0
Signing time: Thu 26 Mar 2026 10:01:24 +0000
Manifest this update: Thu 26 Mar 2026 10:01:24 +0000
Manifest next update: Fri 27 Mar 2026 10:01:24 +0000
Files and hashes: 1: X9-gmGf3f6_At75-PE3iDirEN3A.crl (hash: QAZcGZmDpqoqFyb8jK57tjZyfsA0BL/R+m6pVVY+vVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:73:5c:5a:3b:a4:66:11:6d:53:53:83:81:25:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdfa09867f77fafc0b7be7e3c4de20e2ac43770
Validity
Not Before: Mar 26 10:01:24 2026 GMT
Not After : Mar 27 10:01:24 2026 GMT
Subject: CN=b4dc18ebbefeb30809777cf63f930df8d117e6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:1b:e7:36:e0:e3:fb:e2:9b:00:88:14:15:
98:6c:e1:36:66:28:4e:03:47:81:15:98:36:5f:24:
ba:40:e0:84:09:cf:db:3b:24:28:04:32:ed:ff:c8:
59:55:ed:e8:f6:aa:12:79:6f:bf:0d:13:71:77:bd:
54:6e:d9:1c:cb:17:6a:aa:41:12:a6:99:91:22:3e:
03:d3:9e:c5:a2:e2:f7:7c:6d:c0:89:c0:87:bc:b4:
d4:e9:ce:83:97:1d:27:c5:88:2e:34:53:76:32:5a:
0a:ae:42:b4:ac:1d:22:8c:e8:12:fd:6e:1b:f1:26:
b9:cb:8e:4e:f1:da:55:22:27:d5:3e:06:12:52:fe:
e1:ed:ab:0c:6f:35:54:73:12:80:72:c4:66:08:dd:
f9:cf:40:3b:6d:d5:84:f5:5f:bd:aa:97:46:c2:a9:
d8:13:c7:8d:5c:dd:8c:b1:e1:45:10:01:5e:92:59:
4a:54:48:e8:83:61:3d:2e:c0:0b:7f:70:90:14:e9:
24:1c:c4:28:24:29:5f:1c:05:3f:c3:ab:6a:a1:e6:
7f:73:4a:54:21:29:97:fd:9b:7c:14:9b:a9:ba:2c:
13:2e:00:fa:ba:8a:ce:f3:b4:7e:b5:a9:f0:1d:89:
64:7b:99:e3:4e:dc:4e:c2:1b:8a:a0:b9:7f:e7:d6:
3b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DC:18:EB:BE:FE:B3:08:09:77:7C:F6:3F:93:0D:F8:D1:17:E6:B3
X509v3 Authority Key Identifier:
keyid:5F:DF:A0:98:67:F7:7F:AF:C0:B7:BE:7E:3C:4D:E2:0E:2A:C4:37:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5c:19:6a:a1:d1:d6:70:ad:29:11:e3:53:e2:6c:b5:03:c4:
2a:72:a4:8d:da:30:43:6b:30:47:26:ff:b7:4c:ef:f2:76:6c:
29:73:ff:ff:23:17:d7:52:68:35:88:cf:4d:5f:04:da:35:07:
8b:3f:2e:f7:31:d4:2b:37:1d:2a:96:db:ef:9d:56:03:81:f5:
d5:b7:da:be:40:38:c1:0d:85:c0:f3:a7:14:9a:34:ce:68:df:
85:84:de:d2:a1:00:aa:dc:02:7d:96:40:01:39:fe:bf:7f:20:
82:82:fb:09:df:67:dc:30:09:65:ab:2e:b9:ae:b7:d4:12:f9:
f7:0f:9f:2c:75:62:bd:67:fb:98:d1:60:d1:c7:40:df:7e:2c:
61:9b:15:78:e9:40:77:ec:c7:64:1d:bd:e6:8a:5b:d6:7f:0e:
57:cb:de:d0:ff:d4:a4:02:3e:84:76:d8:67:50:2a:6b:a8:83:
77:46:d5:91:b4:9f:a7:0e:ed:4d:63:06:da:af:bf:53:ff:a2:
75:a4:01:79:07:c3:5e:d0:59:f3:02:e6:c2:67:c5:c4:5f:68:
b5:a5:85:ca:41:3d:26:7e:68:a7:17:d7:17:8b:7c:be:a3:58:
e3:eb:ec:44:19:05:0c:d5:85:c8:94:ea:67:d8:83:16:bf:63:
84:71:39:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:50 2026 by rpki-client