Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier: wuB/ft5dmiis5SdTPIV69cC7gqDVsYjdSgu8b0AuCOs=
Subject key identifier: 90:99:37:90:4A:FD:D4:34:57:40:DB:90:F6:57:C2:AD:47:64:7F:0F
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial: 019D2B4E8DEC35CB4C1AA2DC04BAE60D0E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number: 1038
Signing time: Thu 26 Mar 2026 18:01:01 +0000
Manifest this update: Thu 26 Mar 2026 18:01:01 +0000
Manifest next update: Fri 27 Mar 2026 18:01:01 +0000
Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: Alm0JzNmlTBaKH5JqYIC0PPiEZDdk23f+XB/f19aWUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:8d:ec:35:cb:4c:1a:a2:dc:04:ba:e6:0d:0e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Validity
Not Before: Mar 26 18:01:01 2026 GMT
Not After : Mar 27 18:01:01 2026 GMT
Subject: CN=909937904afdd4345740db90f657c2ad47647f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:62:39:09:fb:d3:60:10:43:48:ef:78:9f:
92:c7:c3:13:45:cf:e9:8d:d2:13:a2:87:18:3c:a6:
ee:88:25:f2:0b:81:8f:2d:53:4a:cc:e1:78:7a:bf:
f8:58:fe:b5:c5:dd:85:ab:ea:35:80:c7:e5:cb:16:
c3:07:c5:ba:42:36:9e:2e:d8:f5:43:96:96:5e:61:
d4:6f:55:56:20:76:3c:dd:ab:47:e4:da:82:3b:d7:
5e:f7:52:cd:88:d2:92:8a:f5:7f:ac:22:86:a7:3f:
fd:f9:eb:06:ca:13:5a:88:87:8f:dc:bb:bd:e3:75:
27:ae:02:e4:04:1b:d2:9b:73:84:b8:00:dc:74:e6:
4c:5a:fa:ef:ac:6a:0e:f1:41:67:61:57:96:80:d2:
36:02:47:5b:12:1b:d3:4e:9d:cf:c5:9b:6a:15:44:
e8:73:00:c8:18:d7:d4:65:3f:ac:f9:fd:28:db:1d:
a1:25:4e:28:76:4b:17:a8:2e:59:7c:85:b4:7b:96:
a0:d0:7f:51:78:7a:54:5a:87:b6:4a:81:f4:cb:b4:
8b:39:72:17:32:3a:e3:64:f6:69:bd:a4:22:03:c2:
c8:af:6d:d9:8b:d0:71:df:5b:a0:89:59:b2:8a:ff:
2d:cb:f8:12:79:2e:56:ea:e7:db:d6:b9:a7:b1:39:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:37:90:4A:FD:D4:34:57:40:DB:90:F6:57:C2:AD:47:64:7F:0F
X509v3 Authority Key Identifier:
keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:82:af:fa:4e:a7:3f:a6:36:ce:90:30:fd:c5:fb:fe:46:08:
3f:28:7d:08:0c:c2:5e:5d:4c:95:56:d5:d4:15:7b:d7:56:00:
2b:38:a3:61:3f:f5:65:89:03:d8:4e:ee:07:6b:a3:df:fe:ef:
18:54:db:50:31:c9:bf:32:15:64:e9:c2:ee:63:10:0c:96:b9:
0e:77:dd:5d:ea:17:05:b3:19:36:96:11:9a:9f:97:e7:9c:d7:
3a:18:bd:9a:a1:f5:ad:27:ea:26:27:c4:6f:30:e9:ed:77:7d:
16:01:53:ca:bf:b6:12:a7:31:58:da:de:57:2a:e2:28:2a:97:
97:d0:10:64:bf:ed:46:96:e4:e5:9f:73:62:86:8a:3a:06:1c:
89:46:83:43:08:19:39:71:f7:0b:29:82:3f:f0:eb:72:4d:73:
20:9c:10:0a:8e:e0:9e:55:3c:ab:bc:a9:30:4c:70:60:bc:27:
d6:b5:3b:b6:55:17:0f:a4:c9:b7:88:3a:d4:50:bc:f6:18:97:
96:bf:ce:86:51:df:95:82:43:b2:8d:50:b7:00:a3:b8:74:34:
69:36:3b:f3:bf:b2:55:f7:2d:d0:e9:bf:12:d9:09:88:1c:a5:
3d:fa:9b:34:26:05:4e:40:4d:1d:be:f0:d9:1b:42:29:2c:da:
05:65:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:06 2026 by rpki-client