Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
File: XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json)
Hash identifier: nPcs1ZAXE9daBI+KOcDJ/7oit8R60kzq2r5/PQtntVk=
Subject key identifier: 67:05:D2:69:3D:6E:87:91:95:78:9C:46:CB:D2:0D:3E:31:B3:23:31
Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Certificate issuer: /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Certificate serial: 019D2703D31D054EBCA956C04E3B467865EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
Manifest number: 1815
Signing time: Wed 25 Mar 2026 22:00:55 +0000
Manifest this update: Wed 25 Mar 2026 22:00:55 +0000
Manifest next update: Thu 26 Mar 2026 22:00:55 +0000
Files and hashes: 1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: tQBkj4AebemKfPo1l1EgSFjLoBR+Fgh9l3pwSpqcVdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d3:1d:05:4e:bc:a9:56:c0:4e:3b:46:78:65:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Validity
Not Before: Mar 25 22:00:55 2026 GMT
Not After : Mar 26 22:00:55 2026 GMT
Subject: CN=6705d2693d6e879195789c46cbd20d3e31b32331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9d:1d:08:89:dc:a0:4d:df:8e:d6:60:aa:36:
93:2f:21:9e:cf:7c:33:2d:6e:f3:a1:4f:c5:81:d1:
61:c3:ee:92:ba:0f:99:dd:03:21:99:bf:1f:be:21:
ae:42:88:c7:65:a5:27:1d:49:be:c6:8f:cf:28:da:
9c:c9:ce:ae:cc:72:9a:72:4f:11:22:2c:85:d3:1b:
3e:86:63:ca:0e:ad:22:a5:9f:0a:34:23:c7:25:fd:
83:2c:8c:18:3f:2c:70:96:8b:96:3d:6c:f3:22:4f:
ef:e8:2f:29:e0:99:70:c9:a9:d9:4d:5e:8d:52:4c:
dd:11:a3:0f:fb:7f:c5:2f:30:bf:74:02:98:d1:4f:
ae:00:48:35:a8:6d:f2:c6:1a:35:f2:f1:8a:d4:f6:
8e:79:92:e9:b0:ed:d9:8b:79:03:32:5d:a5:6d:e4:
2e:6e:24:af:72:26:06:7c:86:0d:7d:eb:2f:28:2d:
5b:8e:76:7b:dd:e9:ec:5b:71:a2:c9:da:ae:21:04:
90:63:04:3e:b3:eb:f9:88:f7:cc:38:24:97:c7:26:
33:89:54:88:79:27:74:36:7b:9a:80:b5:b6:39:12:
51:4c:2f:07:15:2b:91:81:2c:5c:5b:8d:97:ba:dd:
e5:fa:03:73:80:98:a1:5e:d2:55:c6:dc:95:7f:01:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:05:D2:69:3D:6E:87:91:95:78:9C:46:CB:D2:0D:3E:31:B3:23:31
X509v3 Authority Key Identifier:
keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2c:91:5f:8a:3b:af:a0:52:f7:9f:c5:7a:77:57:3e:35:5b:
5b:f8:02:31:72:1f:60:6a:8b:cd:96:c4:16:e4:dd:b7:65:f1:
d3:7c:57:93:c9:ff:a0:2b:51:ad:30:7b:13:d1:ba:77:4d:72:
44:ac:9a:c0:05:0c:ed:cd:17:eb:33:1a:c8:94:36:32:82:f8:
67:b0:88:3d:45:da:82:b4:9c:b4:3d:9b:d3:52:fe:17:ba:ea:
7d:74:da:07:cd:dd:a5:c2:cf:de:0e:32:19:1c:0e:c8:4f:0e:
14:22:70:cd:8d:2f:8a:8f:3b:ec:b7:df:9c:ab:c7:b9:51:7e:
72:79:2e:49:b5:1b:a8:ca:d2:9d:c1:be:3a:a2:8d:f4:b6:c4:
75:9a:92:13:46:93:e7:a1:41:ac:fb:74:5d:a8:d1:53:08:2d:
fa:ed:c2:34:08:44:86:34:7b:0d:c0:28:99:2a:5d:b9:77:e5:
10:1a:b5:9e:93:04:36:c5:2f:e2:90:0b:de:b6:94:f3:d7:71:
2b:32:46:42:b9:46:f5:bf:14:05:34:d0:2c:b3:86:45:99:d7:
37:2c:d5:7d:16:e8:f9:bc:f4:6e:b1:50:10:67:a9:d3:04:22:
3f:b0:6c:a0:72:b5:4d:10:95:e9:fe:ae:42:39:e3:d9:00:40:
24:f4:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:34 2026 by rpki-client