Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: r1RiNgb0u+DeVQqParQ0fSHT4umuqfn6gzwJKbmpwrk=
Subject key identifier: 47:1D:C0:0A:3B:3E:72:A1:40:D0:5B:E5:F4:89:2F:A7:46:4F:51:FE
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 019D27040614BA7DCC2901DF6283AA9E4133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0DB6
Signing time: Wed 25 Mar 2026 22:01:08 +0000
Manifest this update: Wed 25 Mar 2026 22:01:08 +0000
Manifest next update: Thu 26 Mar 2026 22:01:08 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: GAtPcLr4BeCbZNlCwx46lewZm3QlrtAD9R9whoXomCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:06:14:ba:7d:cc:29:01:df:62:83:aa:9e:41:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Mar 25 22:01:08 2026 GMT
Not After : Mar 26 22:01:08 2026 GMT
Subject: CN=471dc00a3b3e72a140d05be5f4892fa7464f51fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:27:73:16:c8:aa:1f:1c:4d:11:bd:7e:da:
17:86:72:77:82:9e:35:c6:0a:d9:69:97:62:6b:bf:
c2:c0:80:97:63:5e:97:d4:a6:69:1b:40:93:e0:cc:
e7:e3:31:7a:96:58:36:b2:b0:4c:13:4f:36:92:6c:
3b:2e:38:18:59:a1:4f:1b:fc:3c:fe:24:65:b3:a5:
83:b9:96:2c:cd:c7:60:92:ef:32:ad:98:4d:fe:30:
f2:e2:61:c7:04:e8:f0:54:3b:3b:ea:00:68:69:7e:
b3:f6:5f:b6:ce:da:dc:83:cd:b4:db:b4:a6:a6:f0:
6f:af:f5:22:54:63:ec:29:21:16:3f:be:59:6a:31:
56:e6:f7:36:32:13:c0:b2:4e:80:a4:7a:a9:3f:83:
f6:de:99:08:56:45:40:8c:36:f5:e7:07:eb:55:f8:
ac:7a:da:f4:ba:06:9d:df:30:72:54:36:68:93:a3:
ec:b2:62:2b:cb:8b:1c:e3:38:45:30:f5:06:8f:89:
52:ea:61:d0:b6:9f:55:c1:70:4a:ee:63:0a:22:cc:
ec:5e:99:8e:d5:bd:39:ba:44:38:d5:84:42:a1:dc:
40:c9:e6:81:38:83:62:e9:53:aa:9f:cc:ae:4f:3b:
da:ec:89:fb:64:0b:5b:48:8d:0f:51:70:a3:04:dd:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1D:C0:0A:3B:3E:72:A1:40:D0:5B:E5:F4:89:2F:A7:46:4F:51:FE
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8c:e9:23:b2:14:69:4f:c8:4d:ba:40:eb:3e:e0:88:6b:41:
75:30:60:96:d0:2d:9a:3c:dc:77:c1:a4:e8:fb:9a:89:84:d1:
f0:44:a6:7b:3e:23:07:9e:2e:0f:f7:1f:de:33:f1:47:77:b4:
74:05:e6:b9:d6:c1:53:97:4d:e0:ff:93:d6:f8:5f:cf:d7:5a:
77:ca:4c:fb:02:a4:b0:70:da:c4:12:50:a3:69:43:b4:2b:c2:
fa:20:dd:d7:56:7d:45:72:b2:3b:51:2a:92:be:97:41:be:db:
d9:44:6d:a4:1a:05:95:e9:7f:f3:ff:0a:15:fa:47:f3:29:ff:
25:07:69:db:d2:f5:cc:88:2e:45:08:57:4c:3b:71:47:50:2c:
b7:03:8d:73:06:6d:94:e9:0f:4f:1f:c7:68:88:54:e6:1b:77:
ec:f2:06:49:e9:bc:50:89:c6:dc:69:24:91:74:21:c1:be:ec:
d1:0b:73:9d:1a:21:98:d6:d6:2f:60:79:f6:f1:0c:cc:02:07:
97:e1:16:30:7a:1a:9a:68:6b:0e:4d:d4:da:b6:fe:3d:b1:b8:
8f:44:d0:42:7e:49:27:3f:68:f9:a1:c9:39:d5:8a:92:b5:e2:
84:1b:60:16:cc:61:d8:97:7c:73:23:f4:53:df:84:41:ae:8d:
aa:bf:1d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:48 2026 by rpki-client