Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
File: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft (raw, json)
Hash identifier: +ZnVMw324JPce6VbxbFWIIZYfgh1gaU/UVTsjbLs2Xg=
Subject key identifier: E1:EA:0D:A1:EE:29:4A:E7:8A:4C:33:0C:75:42:70:E9:81:DD:23:B8
Authority key identifier: 5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
Certificate issuer: /CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
Certificate serial: 019D270420A5A0A6F2290511A088CF16E4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:01:15 +0000
Manifest this update: Wed 25 Mar 2026 22:01:15 +0000
Manifest next update: Thu 26 Mar 2026 22:01:15 +0000
Files and hashes: 1: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl (hash: Kj/e5g7A6fkYzbB45LiG1zmlZprBhDDdZm+f/pR49Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:20:a5:a0:a6:f2:29:05:11:a0:88:cf:16:e4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
Validity
Not Before: Mar 25 22:01:15 2026 GMT
Not After : Mar 26 22:01:15 2026 GMT
Subject: CN=e1ea0da1ee294ae78a4c330c754270e981dd23b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:3e:63:1c:aa:e0:3e:3a:16:3e:1c:81:9b:
78:11:aa:df:4a:0d:9a:87:01:2a:61:29:d3:42:64:
99:5e:31:89:8c:f5:d2:7e:c8:55:29:f5:15:7c:c6:
7d:4b:f2:30:6b:ec:f3:0e:e3:3f:30:ad:c5:1a:01:
4b:59:3d:0a:5c:1d:17:82:f7:9f:e1:16:3a:25:eb:
6c:39:24:72:6e:ad:80:8a:ac:92:3f:ed:5a:11:5b:
e4:87:e6:bb:80:49:97:86:45:8a:b2:59:35:ea:de:
9a:5b:02:0e:4e:2f:ff:aa:38:1b:47:9b:7e:35:c1:
4f:05:79:af:93:c7:30:a3:1e:f7:db:6b:ff:53:11:
f9:5d:71:59:78:1e:90:b0:13:19:1b:a4:97:60:a4:
2d:93:3d:5d:0c:fe:46:4a:93:6d:e9:fc:2e:fa:37:
68:10:8b:cb:84:4b:62:67:e2:79:91:90:40:dd:8e:
82:31:dc:b2:55:ce:f2:d7:dd:b5:68:5a:4a:e4:68:
41:c3:7d:e3:50:b3:53:f3:61:9e:cb:6e:05:15:7a:
57:b8:95:ac:a4:d0:5a:d8:fa:87:ee:72:d5:29:c3:
f1:fb:8b:d5:09:62:80:b3:43:24:05:f3:dc:70:d1:
cc:a7:0e:e5:91:d4:c0:32:a0:4f:bd:3a:39:2d:e7:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EA:0D:A1:EE:29:4A:E7:8A:4C:33:0C:75:42:70:E9:81:DD:23:B8
X509v3 Authority Key Identifier:
keyid:5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:4c:b9:7b:98:5f:4c:13:60:ee:ee:16:c9:48:86:0c:3a:12:
81:19:70:7c:98:4b:9e:17:39:96:50:5c:0a:72:f5:67:d7:cc:
d8:8a:2d:09:88:cd:4e:9b:1c:6c:79:49:d1:2f:34:d6:9f:ef:
60:24:22:1b:11:82:d6:e1:15:d7:03:60:8b:67:18:dd:72:1f:
2f:2c:37:0e:e8:c8:ae:33:df:65:01:0e:33:ca:ce:ae:0a:74:
89:2b:f8:74:55:ee:57:be:1f:bd:c5:af:71:0d:50:06:cb:53:
54:ec:e9:14:74:fc:ec:7c:c0:3a:e6:a0:d0:3f:d8:4e:53:35:
1e:45:4c:27:b8:a5:10:37:fa:78:90:56:b6:77:2e:4e:3d:91:
0f:cf:68:f5:ba:ad:c3:71:0a:01:59:47:9a:cb:a9:75:89:c2:
c2:de:6f:aa:2d:6f:d5:13:22:4b:49:3a:dc:b2:af:b4:e9:f2:
c7:ff:20:a4:12:8c:51:4f:8a:be:ff:5e:5c:3a:b9:9e:2b:bd:
71:83:97:c9:22:9c:42:44:ad:8b:a6:0f:ae:a7:78:cc:8a:63:
37:d5:f2:10:00:7a:1a:87:bd:7e:ee:cc:bb:ec:80:77:c5:27:
27:3f:78:2d:cd:81:5c:7e:2e:cf:01:6b:59:db:85:e1:ef:25:
fe:e5:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:02 2026 by rpki-client