Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: dslOelpnz2WFkEMCPCV9sYKALN2sYP0KKaC3EZ9/kbk=
Subject key identifier: E8:E4:66:3A:DB:9D:22:6D:AE:CA:6E:20:B1:7C:E9:CC:06:B1:E7:9F
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 019D284E4CE3950194ADC2A5ED5532CEF535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 1776
Signing time: Thu 26 Mar 2026 04:01:53 +0000
Manifest this update: Thu 26 Mar 2026 04:01:53 +0000
Manifest next update: Fri 27 Mar 2026 04:01:53 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: WIEQOzxpRLDGAxjuWpNJdM786GPt9zpDPmiSH+4yO38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4c:e3:95:01:94:ad:c2:a5:ed:55:32:ce:f5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Mar 26 04:01:53 2026 GMT
Not After : Mar 27 04:01:53 2026 GMT
Subject: CN=e8e4663adb9d226daeca6e20b17ce9cc06b1e79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:20:04:f2:da:2f:bc:97:cb:6e:63:ed:7a:
11:d8:83:08:1a:35:da:6d:f5:bd:a3:09:ae:8c:3c:
31:51:01:63:e1:ec:43:58:da:a2:04:08:e8:14:23:
2f:d0:65:83:6a:c8:b3:f6:2c:f1:38:74:b7:c4:c6:
2a:a9:67:60:24:dd:26:5d:c7:fb:e3:ab:8a:7b:79:
80:be:2b:85:af:b6:0e:96:bc:4d:0d:6f:6c:6d:b9:
0f:60:eb:25:97:43:c9:3e:e8:e5:25:85:f5:42:98:
1e:a9:bd:fc:8a:89:2d:98:0e:35:53:af:c7:af:ec:
09:4b:ca:e4:85:0d:7b:5d:e3:97:10:13:2a:cb:01:
d1:42:57:65:62:c2:09:8d:90:aa:64:80:55:3c:24:
d8:bd:48:1b:0b:02:d7:f8:e5:f0:c0:a2:76:4f:5e:
78:c1:57:6b:57:43:e5:3f:ed:b7:10:85:25:08:ec:
7f:fb:e8:31:1b:58:87:34:09:8d:4e:1b:b8:6b:c8:
62:8a:bf:04:f8:48:10:f8:aa:c9:f1:8e:4c:ca:78:
c2:4e:53:04:43:0b:38:bd:b2:ac:f0:b2:d2:15:55:
d2:c7:82:67:6b:e5:23:1f:c2:64:1b:ec:0c:be:16:
cb:4a:61:b6:9a:fc:c9:d8:7d:e5:43:62:89:be:c8:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E4:66:3A:DB:9D:22:6D:AE:CA:6E:20:B1:7C:E9:CC:06:B1:E7:9F
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:67:ad:88:4b:6a:8c:cf:52:10:a5:af:a1:42:fd:ae:fa:30:
a7:aa:76:d4:88:f6:a2:f5:95:49:62:dd:d8:67:69:0f:34:f0:
25:68:44:cc:2b:b6:d5:e0:5b:77:92:74:56:d9:0a:5b:9c:62:
3e:dc:fe:6e:8d:1f:46:5f:ba:c2:c5:eb:fb:94:b6:fa:73:85:
1e:5d:c7:16:19:4e:ea:3a:22:1a:44:50:4d:b0:ea:a2:51:13:
54:aa:e7:a5:e5:3b:79:cd:25:d4:98:f9:79:8b:a5:7c:da:66:
d8:c1:a6:9d:da:f0:7e:9d:15:83:fb:fb:aa:60:b2:d4:5b:f9:
9c:fb:bf:0f:85:6f:de:47:79:ce:c2:0e:91:1f:57:27:9f:95:
54:18:15:3b:47:fd:d2:73:e1:47:aa:e4:f9:c2:f8:f0:1e:07:
e3:38:e4:21:6a:ee:51:7a:5b:19:ad:18:d6:11:a4:1d:eb:dd:
18:f8:f3:0d:96:2b:94:80:88:b9:6c:cd:2d:bd:d1:67:2a:64:
f3:92:37:bd:3a:2e:a0:44:a5:36:ca:6e:54:7a:72:b6:14:08:
86:69:3b:bd:ab:b4:c3:66:f8:f2:83:54:d0:c7:16:64:d2:49:
bf:33:a1:d8:73:59:89:a0:d8:55:7c:38:e2:7e:59:a3:5b:08:
22:f5:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:23 2026 by rpki-client