Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
File: xVRM5A0R1h07gKfRAyMBI_t9aKU.mft (raw, json)
Hash identifier: qd8lMKrrvj0eKORcIqPQDnzU7nmmv5S8SMc0sh3K6P0=
Subject key identifier: BA:BD:82:53:50:20:65:B3:77:8C:0D:B6:45:FB:1C:CE:04:B6:81:CB
Authority key identifier: C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
Certificate issuer: /CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Certificate serial: 019D284D31B0EF4A0241F13DBF6BB81E03BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
Manifest number: 11A6
Signing time: Thu 26 Mar 2026 04:00:40 +0000
Manifest this update: Thu 26 Mar 2026 04:00:40 +0000
Manifest next update: Fri 27 Mar 2026 04:00:40 +0000
Files and hashes: 1: xVRM5A0R1h07gKfRAyMBI_t9aKU.crl (hash: IUqXQaExK7AB7oMhWm3yFytKYFa1O/hBHYxR5kaEXbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:31:b0:ef:4a:02:41:f1:3d:bf:6b:b8:1e:03:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Validity
Not Before: Mar 26 04:00:40 2026 GMT
Not After : Mar 27 04:00:40 2026 GMT
Subject: CN=babd8253502065b3778c0db645fb1cce04b681cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:c7:92:df:12:f6:10:49:3c:4e:1f:d6:a3:
a7:39:4f:59:5e:92:94:58:4f:ab:bc:a6:e4:06:46:
25:88:98:b2:06:bb:0b:6b:6c:6c:16:5e:03:29:a8:
fb:9d:0e:12:62:ce:8d:24:13:a9:ef:44:b0:51:73:
87:4a:a8:c9:98:42:fa:08:30:8d:fa:3c:bd:61:aa:
03:d5:48:e2:1f:a2:f0:4d:d3:d8:bf:e4:f1:f0:5d:
34:e8:a3:8d:87:cb:5d:ce:c9:d7:d0:c0:51:11:ce:
63:54:6b:c1:e9:1f:bf:ac:ff:27:f1:67:4d:a7:0d:
f6:a9:22:ca:a2:3d:a5:4b:01:8c:7f:87:2f:bf:43:
6f:89:03:39:61:4f:d3:c1:a1:1b:13:45:b2:b1:56:
1e:03:4d:60:75:0c:0d:80:02:12:23:41:80:11:b5:
5f:a1:23:77:5a:ee:9c:4d:53:8e:63:fe:a0:f4:a5:
4a:33:dd:c5:9d:84:05:c6:14:27:78:59:99:1b:fa:
8d:09:00:96:5e:d4:15:67:69:11:b3:23:28:60:44:
9a:f2:97:09:12:80:ad:56:8a:1b:55:93:43:e2:99:
fe:81:19:ec:20:8c:40:ce:e8:0a:9c:6a:cf:2f:47:
57:19:0d:44:ab:dd:da:6e:62:8f:ed:23:e0:26:dd:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BD:82:53:50:20:65:B3:77:8C:0D:B6:45:FB:1C:CE:04:B6:81:CB
X509v3 Authority Key Identifier:
keyid:C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c2:02:bb:00:9a:2a:a1:4a:f3:61:fa:0f:d6:77:33:63:a4:
c7:09:9b:df:b8:ea:8e:1f:58:d0:2c:44:15:af:7d:c9:78:ce:
2e:09:fe:03:2b:01:ef:f4:2f:a9:2f:9b:95:5a:94:1a:01:66:
5e:30:8f:3d:fa:07:72:fc:27:d6:15:c5:e7:ef:c8:db:e3:d5:
b1:9f:98:b5:5a:64:33:5d:af:81:73:24:47:36:f9:90:9e:d3:
92:54:ff:c6:b6:e7:6a:66:05:96:58:48:74:51:fa:d3:4d:a8:
30:38:72:f5:6e:bc:4b:fb:ff:8e:02:d9:2e:6a:2b:b3:c2:44:
ea:93:22:6c:f2:d7:b2:68:66:80:48:e2:79:be:1c:ae:26:f6:
12:53:bb:90:88:f5:a2:52:15:50:7a:28:99:cf:51:67:24:1d:
40:a2:7e:1e:b5:7c:f0:16:bb:f4:22:52:15:85:2d:58:ed:3a:
79:2a:5c:92:63:78:f8:90:96:50:ea:a1:11:45:4f:ec:0f:96:
02:d5:d8:d1:11:c6:f6:06:96:0a:c2:5c:bf:a3:54:50:43:e1:
11:48:36:9a:48:f2:0c:0e:c3:23:72:d9:db:c9:dd:f8:00:89:
a0:3c:29:32:7f:9d:c8:57:46:72:1b:d4:34:ca:b3:5c:31:e9:
27:da:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:12 2026 by rpki-client