Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier: QEe4EF9Ly+Z3pf7knXIOBvy3z6nUMRrooxrqfs0YCjc=
Subject key identifier: A5:A1:33:DA:DE:11:9A:C5:B8:D0:3C:35:64:E4:80:B5:CD:0D:D1:CC
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer: /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial: 019D2AE0DE9A45A999856838C0557B71D666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 16:01:12 +0000
Manifest this update: Thu 26 Mar 2026 16:01:12 +0000
Manifest next update: Fri 27 Mar 2026 16:01:12 +0000
Files and hashes: 1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: 87BYbBLbLisjB7VhNF2Klo3d7QhXYHH3waLStYH0mMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:de:9a:45:a9:99:85:68:38:c0:55:7b:71:d6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
Validity
Not Before: Mar 26 16:01:12 2026 GMT
Not After : Mar 27 16:01:12 2026 GMT
Subject: CN=a5a133dade119ac5b8d03c3564e480b5cd0dd1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b0:19:db:df:e5:5b:f2:55:34:6a:5d:87:7f:
01:96:56:2f:62:e7:ee:02:4e:6d:d0:92:4b:d4:1b:
43:ac:6e:62:45:b9:81:2c:75:c8:78:4b:3e:a4:6d:
68:3b:f9:50:a0:48:ab:b6:ed:6f:5d:3c:9d:fd:17:
c8:2e:25:2d:28:93:4b:c5:4b:fc:03:d2:5a:cb:cf:
d1:f9:a2:73:03:7c:d9:5d:87:ef:08:54:3c:24:dc:
a5:99:8d:ed:0e:a0:5e:04:6a:56:82:9c:31:c1:5a:
69:7f:f6:00:0a:57:18:44:d6:f4:b5:b0:c1:77:79:
ad:db:51:16:a3:91:99:1e:76:bd:a6:c6:85:1d:84:
c6:0e:a0:ed:89:24:9a:69:01:17:e5:0b:41:07:9e:
dc:34:d8:bf:8f:0d:e9:2f:ce:f1:36:bc:cd:84:63:
28:e2:c8:e2:94:10:8e:f6:a6:2b:fe:fb:fd:23:c2:
8d:4c:96:8c:1e:e9:71:8e:37:13:5b:f8:1a:4f:a2:
62:ad:e6:11:d5:8d:80:9d:70:fc:7b:b0:fc:2e:b4:
c8:1b:b2:c3:4b:85:08:78:99:88:a3:df:d1:84:77:
ff:64:24:0f:81:5a:d2:c6:a5:78:ae:be:33:ff:6b:
07:f6:39:33:53:3d:de:95:21:dc:72:f3:12:05:00:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A1:33:DA:DE:11:9A:C5:B8:D0:3C:35:64:E4:80:B5:CD:0D:D1:CC
X509v3 Authority Key Identifier:
keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:39:0e:1e:2c:58:0e:d4:a5:d2:fb:be:db:38:04:85:a4:0b:
ed:0f:9f:1e:af:e8:45:52:fb:a9:bc:9c:e8:0e:a0:0c:00:a4:
13:b1:30:10:5a:4a:29:2b:b6:b8:33:ab:1d:26:1f:c9:e4:16:
61:f7:13:38:0b:5c:76:ed:07:73:57:a1:1a:8c:5d:8e:66:40:
bb:b3:a0:d9:3f:18:7f:c8:31:67:2f:76:f3:e6:ee:87:d5:c3:
d0:2f:db:c2:45:c7:43:23:9a:ee:c2:36:2c:d8:86:57:51:41:
03:0a:73:24:4d:7c:7d:66:20:90:0e:8f:ca:ce:ab:fb:c9:8b:
81:32:15:e5:bf:d6:f3:69:6a:63:93:57:81:17:61:43:7b:1a:
04:26:3c:4d:71:b8:b8:85:c7:b6:01:d0:f1:e6:3f:d5:6a:50:
5f:ff:bc:3c:b6:84:82:80:a0:4b:0f:29:32:ba:23:d5:91:42:
a2:5e:d8:40:f1:1b:b1:5c:a1:8f:3f:27:82:d7:ac:9f:36:ce:
bc:e3:88:7f:51:8d:31:07:09:de:13:22:ba:17:73:2e:4e:97:
da:e7:28:e8:0c:f7:85:6e:4e:d3:2a:51:90:8b:e7:2f:15:96:
23:9e:c7:30:ba:55:72:0a:ff:34:5e:f9:57:7c:2b:f2:1b:22:
54:7d:07:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:59 2026 by rpki-client