Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
File: xf9_LizUq2EooxIgpTBBqUmlbDk.mft (raw, json)
Hash identifier: dLaoPjiMGfR1cxFOW5NIzLMn6xqoJpzlV3mUhTC21TY=
Subject key identifier: D4:5C:A5:80:0B:F8:4A:08:33:21:9E:A3:01:C4:9B:D4:5C:03:D3:E2
Authority key identifier: C5:FF:7F:2E:2C:D4:AB:61:28:A3:12:20:A5:30:41:A9:49:A5:6C:39
Certificate issuer: /CN=c5ff7f2e2cd4ab6128a31220a53041a949a56c39
Certificate serial: 019D2B4E7FED2787419D532814F51A2D4AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
Manifest number: 0221
Signing time: Thu 26 Mar 2026 18:00:57 +0000
Manifest this update: Thu 26 Mar 2026 18:00:57 +0000
Manifest next update: Fri 27 Mar 2026 18:00:57 +0000
Files and hashes: 1: xf9_LizUq2EooxIgpTBBqUmlbDk.crl (hash: Po60rlJ90MDWbivN9BHxm4xW0E56+cHYDiMskSuhnS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:7f:ed:27:87:41:9d:53:28:14:f5:1a:2d:4a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ff7f2e2cd4ab6128a31220a53041a949a56c39
Validity
Not Before: Mar 26 18:00:57 2026 GMT
Not After : Mar 27 18:00:57 2026 GMT
Subject: CN=d45ca5800bf84a0833219ea301c49bd45c03d3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:22:32:cd:e6:8a:d9:b5:cf:7d:1d:38:61:
ac:42:60:59:a0:f5:42:5e:2d:a3:c2:1e:ad:97:4d:
51:5f:8e:18:b4:53:43:c0:fb:73:f1:a7:45:53:19:
19:d3:61:ff:4a:f9:82:0b:9a:5f:8d:81:cb:e2:7f:
3f:b0:95:f4:60:89:1f:4d:15:51:78:ea:dd:9a:49:
87:be:e4:14:b0:e6:bf:ea:44:c3:42:26:a4:16:f3:
0b:9e:23:a3:af:e3:09:7b:be:de:93:a8:5e:56:75:
43:18:99:2a:e5:23:8f:e5:d6:8d:62:e9:ea:63:22:
0d:65:a7:c7:99:b4:f4:4c:06:eb:a8:91:1e:41:1f:
33:6b:2f:4c:47:48:c1:06:c9:53:81:02:95:af:55:
8c:20:95:e2:4b:77:bd:45:28:3f:17:66:b2:4b:46:
57:80:81:34:b6:94:5f:b2:2d:cb:f3:a3:8a:af:52:
65:0e:d5:ba:56:44:20:94:71:f9:86:3b:7a:52:7c:
9b:7f:31:8d:4e:5f:13:a2:97:6a:b2:90:cb:1d:8d:
ce:a6:fd:28:25:c4:e7:26:29:36:fa:bb:5f:c1:d3:
a6:bb:56:76:87:37:b1:40:e2:01:a1:df:f0:59:49:
47:b8:8f:84:3d:84:95:a8:65:b0:22:af:39:10:78:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5C:A5:80:0B:F8:4A:08:33:21:9E:A3:01:C4:9B:D4:5C:03:D3:E2
X509v3 Authority Key Identifier:
keyid:C5:FF:7F:2E:2C:D4:AB:61:28:A3:12:20:A5:30:41:A9:49:A5:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:13:cd:df:e8:0b:55:4b:d2:83:73:3d:f4:3c:cc:17:dd:f4:
53:4b:d6:dd:9f:d8:d8:2b:fc:78:d2:ea:43:ca:2e:cc:db:de:
f5:02:0b:fb:55:4b:9d:99:24:f8:92:43:d5:46:e5:f9:a1:cb:
81:a2:4a:cc:df:d3:e7:f1:71:93:1f:4c:3d:27:cd:1c:1c:84:
d5:f8:78:08:8d:cb:e9:ef:a2:aa:72:c4:d0:0a:ac:46:da:67:
72:4e:fd:2f:e0:29:71:4a:e5:5c:76:e0:26:82:3f:02:16:fc:
92:60:8e:e6:3c:95:a0:d3:c2:63:80:3a:39:43:00:85:dd:1d:
32:6b:47:6a:86:f4:c5:8f:d7:7d:01:16:50:c1:86:6d:37:ef:
16:11:f6:a8:c8:ef:14:fc:4e:92:7f:78:b1:d1:77:2d:0c:2c:
16:8e:a6:76:8f:35:ed:7d:d9:2d:33:0a:5f:65:5b:a9:73:7e:
e5:d0:06:5b:e7:d8:02:b8:1d:fa:21:3b:4d:99:13:18:2f:17:
c2:0e:ed:be:73:3b:04:94:58:ae:36:51:f5:bb:55:0b:4e:62:
41:d2:4f:4e:37:44:db:21:ff:53:02:46:84:16:85:9d:e3:a1:
f3:de:16:ef:5c:bd:c2:f5:1a:f3:11:27:5d:b7:7e:54:4b:d6:
9e:fc:c9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:04 2026 by rpki-client