Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
File: x-0gqk1F1WHiTZJvWbF1J42bAcg.mft (raw, json)
Hash identifier: /JvEdvpOI5ujye5uDBF2t1jthN4O4wpWp5jccEsQTKk=
Subject key identifier: A2:48:2F:79:02:D0:23:B3:18:F7:EB:60:48:03:40:9F:0F:5F:FE:40
Authority key identifier: C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8
Certificate issuer: /CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
Certificate serial: 019D265F6762B0EBD0339A56CCC5C91B25EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
Manifest number: 14F2
Signing time: Wed 25 Mar 2026 19:01:19 +0000
Manifest this update: Wed 25 Mar 2026 19:01:19 +0000
Manifest next update: Thu 26 Mar 2026 19:01:19 +0000
Files and hashes: 1: x-0gqk1F1WHiTZJvWbF1J42bAcg.crl (hash: SXOm2XgMXYOEb1WOn+O1n9RwAPI/83xyc+hSSh0rS5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:67:62:b0:eb:d0:33:9a:56:cc:c5:c9:1b:25:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
Validity
Not Before: Mar 25 19:01:19 2026 GMT
Not After : Mar 26 19:01:19 2026 GMT
Subject: CN=a2482f7902d023b318f7eb604803409f0f5ffe40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:67:46:65:11:7f:14:aa:93:98:b3:69:61:
59:6c:7d:d0:33:4c:94:a2:ca:82:c4:d8:94:70:c8:
8c:cb:15:1d:8f:42:95:d3:7b:d5:7b:ce:67:53:3c:
e4:3c:2b:9a:38:36:d4:30:17:56:a8:16:cc:f4:e8:
db:8d:b4:ef:f8:e9:da:d1:df:e6:73:44:8b:d3:ac:
35:28:a1:e4:e8:23:17:25:e2:be:6f:2b:2e:7e:28:
61:cd:8e:d7:71:33:de:dd:90:44:2b:f3:89:02:37:
a1:73:69:df:7a:87:fa:02:09:ea:13:57:65:67:fb:
3a:03:5a:f5:6f:d5:97:b3:ff:cd:ba:67:b7:30:80:
da:fd:18:fe:ed:38:ba:0c:38:74:dc:a2:3a:56:4f:
c3:ee:92:81:b0:99:e5:a1:9b:39:cb:89:cb:79:74:
3b:d3:67:3f:f1:7e:f6:f0:c6:e0:7e:ed:df:2c:af:
dd:c1:db:be:ac:74:13:d7:57:fc:ab:1e:e1:50:b2:
78:fd:d4:a0:31:90:a9:33:46:d5:b7:4f:cf:95:68:
9f:34:bb:61:f0:6e:75:da:1b:64:79:5c:3f:67:a2:
a0:9d:fd:dd:5e:20:d1:42:41:ed:ab:fd:48:14:40:
d3:d3:10:a5:41:28:e3:69:50:a0:4b:99:2a:ee:85:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:48:2F:79:02:D0:23:B3:18:F7:EB:60:48:03:40:9F:0F:5F:FE:40
X509v3 Authority Key Identifier:
keyid:C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:76:87:a2:dc:ce:53:db:b8:87:52:16:78:14:f0:61:f3:aa:
9b:ae:1c:c2:51:7e:7e:0f:7a:11:2e:1c:ef:cd:32:30:80:67:
aa:23:a8:75:f7:ab:f8:22:fb:f4:c6:b3:72:9b:65:33:5c:c5:
e6:02:d1:4d:78:e1:7c:2e:64:a2:0e:99:37:8d:c2:f9:34:75:
bf:c5:fd:37:c0:88:89:10:a2:ad:35:6a:18:61:32:07:b5:b6:
ae:ee:f1:63:86:dd:d8:0e:ed:2c:79:da:b7:e1:57:42:4b:05:
79:21:27:3c:3f:2a:2c:88:a6:c1:37:89:ba:0e:6d:f0:f3:03:
75:43:b8:01:88:49:21:52:2f:8f:af:62:ef:73:9e:86:78:cb:
a9:40:85:12:ba:f4:ba:e4:63:2a:57:bb:5a:63:f6:f5:e0:94:
04:91:6b:21:12:e0:16:ce:09:5e:69:f8:63:d5:75:5d:4e:ce:
ec:61:2a:1f:dd:69:77:05:11:18:ac:67:14:3c:c3:c5:85:0b:
64:2c:c2:9b:43:c6:d7:f9:a0:78:bf:e2:e3:0b:1d:c9:80:34:
21:62:59:58:17:9a:7b:a9:58:a5:2c:80:80:79:3e:0c:60:cb:
be:7b:04:fb:e0:85:30:cb:8d:b2:7c:14:30:27:7c:37:1e:8c:
b3:92:e0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:26 2026 by rpki-client