Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier: BObfvHjuTb5Crynbp408LZpZ6niNOoOYPKsS0MlXwvg=
Subject key identifier: 2D:88:59:C8:02:C0:18:A2:92:BB:10:A7:34:5E:9B:96:BA:A4:12:EE
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial: 019D2B4E4F4C06229FC517F682001AB83AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number: 1256
Signing time: Thu 26 Mar 2026 18:00:45 +0000
Manifest this update: Thu 26 Mar 2026 18:00:45 +0000
Manifest next update: Fri 27 Mar 2026 18:00:45 +0000
Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: 7D3FJdG6eOMQTB30xevhlnwQ2TRhAoGQbLCRaZTg74A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:4f:4c:06:22:9f:c5:17:f6:82:00:1a:b8:3a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Validity
Not Before: Mar 26 18:00:45 2026 GMT
Not After : Mar 27 18:00:45 2026 GMT
Subject: CN=2d8859c802c018a292bb10a7345e9b96baa412ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a8:4a:6d:63:e9:a7:a9:2e:f8:04:c9:5a:44:
96:d7:b8:4e:08:fb:23:ac:6a:b8:ff:99:46:8e:87:
98:de:db:8d:58:84:2c:e4:9f:ab:fd:8e:46:f5:a7:
36:7c:24:ff:01:79:cb:01:d3:9c:67:4a:9f:8a:c2:
83:93:a3:63:54:d3:c8:63:27:7a:1a:67:d2:bd:ca:
2c:36:fd:6c:9c:cf:c5:2a:23:bf:30:c6:82:52:54:
3c:bf:4b:29:45:a9:cc:82:dd:be:ec:42:55:6c:1a:
36:1f:7f:77:ab:e0:ec:07:dc:5a:7b:d3:a2:31:71:
71:9a:0c:6d:80:59:16:44:4d:11:20:4e:a5:b6:11:
dd:c4:97:d2:13:4d:66:e9:65:34:ff:66:8b:20:2a:
4d:89:95:76:22:6b:3e:6e:d0:50:6f:9e:f1:ac:d7:
3f:90:3c:b8:c1:14:01:9c:7a:14:46:f5:30:3c:0b:
58:6f:52:07:d8:46:04:ed:81:ce:a3:98:64:3b:73:
3f:ce:c0:e4:53:53:18:33:1b:43:5e:77:3d:b1:8c:
d7:cc:e1:29:3b:9a:f2:87:54:43:aa:0b:bc:2d:28:
d2:00:d4:04:cf:ed:f2:7c:a3:0f:32:a5:0f:b8:52:
f1:e6:64:70:25:9f:d5:ad:62:51:fc:18:c2:3f:8a:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:88:59:C8:02:C0:18:A2:92:BB:10:A7:34:5E:9B:96:BA:A4:12:EE
X509v3 Authority Key Identifier:
keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:85:dd:a0:69:bd:19:c6:5e:cc:5e:04:11:78:ab:1d:9c:bd:
cb:2b:44:67:d8:4a:55:10:1d:18:02:ab:51:05:7a:58:c2:c3:
70:15:63:d8:ef:2c:84:78:f3:75:b3:b0:e5:bf:3b:06:77:5f:
6f:33:64:41:a3:aa:05:f5:56:8f:af:55:44:27:8f:38:5e:2e:
34:f2:18:44:17:b5:a6:75:40:0c:07:da:89:ee:73:b9:3a:10:
42:b4:8e:97:f3:12:f2:bf:74:a0:a9:73:b4:8c:e6:6f:21:c6:
33:cc:ab:c5:60:e2:90:9f:40:38:f6:36:c4:45:55:ec:2a:26:
91:e3:32:58:8c:74:cf:0a:f7:0d:03:b6:49:83:b3:37:6e:4d:
86:a0:cf:8b:33:2e:23:44:ce:6c:55:d7:15:81:f8:77:d1:ec:
1e:93:ad:6d:73:29:19:8f:27:73:9b:6b:93:da:86:1b:33:36:
f6:d6:c0:25:38:a6:01:19:bb:d0:de:c1:3f:18:17:4e:32:bf:
06:bb:15:dd:f5:83:3c:1f:88:99:d4:47:d4:5b:7e:aa:d7:3c:
32:39:7a:2a:93:0f:81:2a:30:a9:04:f5:e4:a4:30:a5:a5:9c:
18:ca:b3:ae:1b:b1:29:fa:cb:af:66:4a:84:54:8b:1a:d9:3e:
d1:2f:eb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:46 2026 by rpki-client