Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
File: xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json)
Hash identifier: cUNasdVhtgiHkl66XcU9kSmF1H2ZmQfaUpZn8IKnteI=
Subject key identifier: 46:54:D6:9D:DF:DD:0C:1D:BD:4E:3B:C6:43:90:68:26:83:CA:71:78
Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
Certificate issuer: /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Certificate serial: 019D27045C06B0CBA5D56414629B765EC9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
Manifest number: 15DE
Signing time: Wed 25 Mar 2026 22:01:30 +0000
Manifest this update: Wed 25 Mar 2026 22:01:30 +0000
Manifest next update: Thu 26 Mar 2026 22:01:30 +0000
Files and hashes: 1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: u3P8fyiNaIl4soBXjcqTaReI+1GsUEYJD1DyXA/M44E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5c:06:b0:cb:a5:d5:64:14:62:9b:76:5e:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Validity
Not Before: Mar 25 22:01:30 2026 GMT
Not After : Mar 26 22:01:30 2026 GMT
Subject: CN=4654d69ddfdd0c1dbd4e3bc64390682683ca7178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:28:74:cf:aa:7b:6d:c3:27:0f:fc:89:63:
ee:02:f4:85:74:b4:63:31:5d:61:7a:57:e9:21:bd:
42:b5:06:2b:09:32:3c:cc:9e:fa:c6:9b:af:fe:17:
76:7f:1c:b4:e5:ca:23:cf:87:be:60:39:3f:82:29:
ed:7f:2a:c3:40:20:97:35:4b:37:56:f9:c3:2b:44:
e2:aa:78:a8:6e:82:17:8f:f7:d3:22:5a:ef:06:cf:
63:1c:b0:6e:0b:50:10:98:82:41:da:2e:1e:fb:ba:
20:61:67:da:87:6e:e0:c7:ab:ac:d2:d9:cd:0f:16:
c2:ff:6b:f0:22:90:b8:c0:4f:65:9b:5b:ec:c5:1e:
36:d7:91:87:f0:e8:b3:b6:b2:45:11:cb:9e:5f:d4:
d7:8e:f6:eb:cc:db:22:4f:17:37:62:f5:1a:4b:c7:
9a:7d:86:fe:de:52:cc:86:38:63:e8:fa:13:a5:24:
31:0f:5e:75:31:03:2b:9f:31:9e:a1:a0:59:08:e1:
bc:67:47:35:bc:e6:4e:b2:08:60:64:22:b1:c2:5a:
79:3c:9e:4c:52:92:59:0c:81:77:08:fd:92:66:2f:
c2:42:cb:85:22:2f:e0:18:6b:f4:19:b3:24:b5:a3:
3e:7a:81:82:46:1d:79:60:a6:3e:18:94:ff:d6:28:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:54:D6:9D:DF:DD:0C:1D:BD:4E:3B:C6:43:90:68:26:83:CA:71:78
X509v3 Authority Key Identifier:
keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:24:8a:08:7a:29:73:a5:55:df:4b:88:0d:bf:66:a3:4c:4c:
5c:ff:fa:64:d9:6d:d6:ac:f4:9c:79:cc:c6:7b:d3:33:59:4b:
1b:b4:a2:f1:55:3f:47:87:1f:82:0c:79:55:3e:7f:5c:3b:e5:
a6:41:48:25:86:2c:e6:81:67:40:32:cf:17:6c:bd:68:24:30:
13:1e:eb:0d:23:36:bd:58:0f:13:98:91:32:a0:37:12:c5:5b:
d8:e5:73:13:f2:49:6b:2b:13:96:b9:9d:58:22:4a:b3:62:a2:
9b:09:46:a5:35:4f:36:d3:61:d9:96:fa:c6:5c:37:07:14:f0:
df:9f:b9:cb:37:f9:1e:d4:cb:fb:73:6a:07:ba:a9:d6:a8:b4:
80:67:f8:7a:a5:96:a8:3d:a1:2f:85:54:99:b2:7d:14:38:63:
e0:aa:5c:51:66:b7:d2:ea:d3:14:b3:b2:74:ef:eb:90:ed:28:
a3:d2:0a:b5:32:b6:f3:3e:41:be:42:f1:c1:85:cc:dd:02:d4:
70:bd:a8:ad:cf:d5:a4:22:28:71:05:ba:f5:bc:a1:4f:57:e5:
d9:09:07:5e:65:3e:1e:5a:23:ed:8f:6c:15:11:7c:c4:eb:d9:
74:ac:9f:05:c7:f4:9d:ce:8d:c7:c7:e0:95:f1:a3:a3:01:92:
54:02:5b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:53 2026 by rpki-client