Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
File: XHOCiOHdRuIcmgORGXJEtHjQqyY.mft (raw, json)
Hash identifier: PHQ7E8Lm13W00XfFfAKjT4m/L9II1BRkLjwo9qwmdyc=
Subject key identifier: C1:9E:C5:23:B5:37:D1:BF:95:61:B7:C4:FA:87:CC:78:C1:28:FC:CD
Authority key identifier: 5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
Certificate issuer: /CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Certificate serial: 019D2704D841FC307F6F1376EE46F20F2D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:02:01 +0000
Manifest this update: Wed 25 Mar 2026 22:02:01 +0000
Manifest next update: Thu 26 Mar 2026 22:02:01 +0000
Files and hashes: 1: XHOCiOHdRuIcmgORGXJEtHjQqyY.crl (hash: CZJ+AsYgVY2xh/rniQphhvOfbo+urhUM8fFNpX9g7VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d8:41:fc:30:7f:6f:13:76:ee:46:f2:0f:2d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Validity
Not Before: Mar 25 22:02:01 2026 GMT
Not After : Mar 26 22:02:01 2026 GMT
Subject: CN=c19ec523b537d1bf9561b7c4fa87cc78c128fccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:86:45:16:64:80:5d:f6:e3:18:a3:e4:d0:
57:a6:5d:ef:f0:08:f0:f2:b7:a5:f7:2c:d1:21:31:
90:10:33:1a:71:02:9e:dc:55:4f:31:bd:c5:b6:4d:
ca:e7:9a:d6:bf:1f:e5:75:57:c3:5b:d1:77:06:76:
86:11:2f:d4:52:a0:52:2a:fa:82:aa:00:06:4b:01:
22:fa:bd:72:03:2b:eb:11:d6:c7:49:4d:60:c0:16:
0f:e0:a8:11:3b:a4:5e:71:a3:93:3b:b4:be:d2:2f:
05:cb:9b:a2:a9:b3:f7:5c:fc:10:1a:51:09:e4:38:
d4:20:7d:73:6c:a2:1b:58:ae:a1:d2:3f:6d:73:ba:
d3:ff:b4:94:91:59:f1:72:cc:47:88:eb:36:8f:2f:
3a:c9:0f:be:7b:0e:8e:06:b3:7d:93:ee:5e:1f:a4:
c4:ff:b9:1b:7d:6e:ef:f8:ea:76:4f:fd:45:59:75:
0c:92:70:bb:9c:e7:15:ed:64:b7:ce:1a:e5:8a:8f:
1e:c9:d5:a9:ad:3e:5d:c2:b6:67:39:6a:fc:7f:e5:
82:5c:e4:d7:c5:54:75:5b:57:26:a0:29:c1:8b:09:
c8:42:94:f9:82:6b:42:71:b4:f6:44:ae:07:48:4e:
48:0f:6b:ad:8f:db:07:57:05:f4:cc:e9:74:45:39:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9E:C5:23:B5:37:D1:BF:95:61:B7:C4:FA:87:CC:78:C1:28:FC:CD
X509v3 Authority Key Identifier:
keyid:5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d7:fb:4f:bc:e6:6f:d7:94:0f:0e:4a:f1:1d:66:9c:16:29:
4d:fa:fd:82:a1:39:65:51:a6:d2:2c:f2:da:d7:d0:65:a9:29:
a6:71:43:97:81:3a:03:ca:a8:a1:22:bb:fa:ae:e2:82:5f:b2:
43:44:cb:43:c5:a6:aa:e1:63:31:ea:13:12:b7:23:72:a3:f3:
fa:9f:87:cf:99:cf:d8:43:f9:95:47:e9:ef:34:0c:27:3b:da:
da:aa:c9:e3:f1:c7:41:97:4e:52:4d:3e:7f:7b:de:c9:bb:61:
c1:5e:bf:1b:03:df:6c:94:c2:8b:33:12:7b:94:af:b4:84:e8:
02:ed:c8:55:ad:82:ce:dc:07:ab:c1:0f:72:69:51:b2:33:ab:
f7:8f:d2:70:01:a2:7f:8c:a8:0a:8e:ba:ac:ff:ff:f7:1c:f6:
82:12:c4:a5:50:4c:f6:85:14:5d:89:18:74:b9:4c:cc:de:14:
a3:3d:11:7a:68:c4:19:18:ec:c7:eb:2e:97:17:8f:8a:31:90:
cd:a7:8b:55:61:46:26:76:f9:7a:e8:3b:e3:b2:94:1e:4d:29:
2c:0c:3b:8d:27:53:ce:a3:aa:ab:b7:d0:30:bd:e5:2f:c0:a9:
39:98:42:ed:44:ba:fd:7d:2e:f3:21:35:64:b5:07:f5:7a:d0:
03:e8:cb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:57 2026 by rpki-client