Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
File: XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft (raw, json)
Hash identifier: czo5rS3ESxJOh33KH1RsdEhgoUzAeIR7Obn16VoISkg=
Subject key identifier: AE:F5:19:4B:C3:0F:24:12:57:42:46:27:EF:A1:26:E8:B3:6E:25:60
Authority key identifier: 5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
Certificate issuer: /CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Certificate serial: 019D284D4432197203FDF8FDD80E0043D952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 04:00:45 +0000
Manifest this update: Thu 26 Mar 2026 04:00:45 +0000
Manifest next update: Fri 27 Mar 2026 04:00:45 +0000
Files and hashes: 1: XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl (hash: nv4sIhkD5S0iSK4UUtHbag5GGAnnJ4Tfp13oSeoiL54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:44:32:19:72:03:fd:f8:fd:d8:0e:00:43:d9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Validity
Not Before: Mar 26 04:00:45 2026 GMT
Not After : Mar 27 04:00:45 2026 GMT
Subject: CN=aef5194bc30f241257424627efa126e8b36e2560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:ed:30:f1:5b:28:73:84:e8:29:d6:75:76:
a4:d4:f0:7e:c2:d9:8d:e3:58:d1:93:cc:53:78:3a:
c6:31:a9:e0:e9:d0:73:c8:54:97:c2:fa:d5:40:b5:
d7:c5:a0:62:97:c3:fb:47:36:d1:c7:86:59:13:fd:
3e:3b:3f:67:28:80:51:dd:15:a9:82:88:c4:85:87:
16:e7:f8:03:2b:f7:5f:d9:31:68:57:22:80:d5:34:
4f:9f:83:46:33:2b:5e:47:7d:ce:50:12:40:42:95:
31:de:d4:b4:0f:e2:93:70:58:33:ec:7a:53:e6:6b:
9e:2e:84:7a:3c:fa:d7:70:b1:ba:09:56:08:15:a1:
f0:3b:c6:da:d2:d7:f0:74:0a:99:b4:2f:26:dc:b8:
ad:d3:1e:73:f5:81:5d:ba:51:df:15:74:c6:45:db:
6e:69:69:97:32:4c:25:6b:b7:c3:3f:49:13:65:0d:
18:16:cd:78:86:5b:07:f6:a3:65:64:a3:5d:51:7d:
25:9f:3a:75:4f:a1:40:32:58:9e:13:54:8a:e9:a9:
d6:9f:c8:53:f7:3d:23:80:34:7f:cc:88:af:6e:8e:
14:c7:96:9d:64:33:34:78:12:ce:c8:1c:b7:4a:94:
a7:ff:06:54:04:ec:2b:ac:d1:1b:47:13:e3:10:6c:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F5:19:4B:C3:0F:24:12:57:42:46:27:EF:A1:26:E8:B3:6E:25:60
X509v3 Authority Key Identifier:
keyid:5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:71:d9:41:3d:17:50:53:8f:12:2b:14:7b:d4:e7:52:af:d7:
e4:aa:7e:97:7b:56:73:29:58:ab:41:4a:4a:a4:7a:ef:24:f9:
a7:31:e9:35:51:77:3a:f0:c2:ef:a1:91:46:27:5f:7a:7f:10:
ad:14:49:14:81:df:d2:b4:78:dc:de:f1:8f:e1:d0:f8:d7:48:
79:ae:5d:50:84:26:f0:c1:71:74:c3:b8:05:65:86:54:12:f5:
f0:dc:43:bd:fe:d9:cf:08:75:b5:30:11:74:0b:4d:3b:81:18:
91:2e:f3:59:80:b0:39:68:c8:e4:1c:77:b9:b1:cf:dc:ed:58:
56:fc:50:e6:e2:51:a7:e0:9e:9c:75:a3:96:05:06:b7:47:eb:
b5:44:2d:17:0e:7a:0c:e5:9c:e9:2e:3e:0e:2a:de:42:e6:14:
6f:3d:8c:3e:62:34:0b:1a:f2:0c:c2:7a:1b:9b:9f:15:73:b6:
e9:33:a9:4c:ab:19:8b:e3:db:54:fe:1e:82:79:b3:63:d8:7e:
40:b5:ff:c9:29:80:87:68:c5:99:03:96:ee:8a:24:c4:26:47:
c7:ef:98:5a:b9:1b:44:cd:20:92:85:4d:dd:61:a6:53:3b:96:
7a:23:1e:48:4b:b7:0b:21:94:dd:cc:81:96:52:fa:99:1e:59:
28:57:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:31 2026 by rpki-client