Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft
File: X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft (raw, json)
Hash identifier: 2NpT9aXhpSCdUUvPLz7YaB8wvGsVT8RPgyAtOkWM2fk=
Subject key identifier: 76:72:4A:58:C0:41:77:F3:95:BF:B1:87:67:2B:DE:4E:31:EC:0F:68
Authority key identifier: 5F:B4:FC:39:D5:28:F4:92:0E:21:8B:55:67:D4:16:46:3E:8A:73:99
Certificate issuer: /CN=5fb4fc39d528f4920e218b5567d416463e8a7399
Certificate serial: 019D322C0287586B23F19EE8DEA288EB5641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft
Manifest number: AF
Signing time: Sat 28 Mar 2026 02:00:38 +0000
Manifest this update: Sat 28 Mar 2026 02:00:38 +0000
Manifest next update: Sun 29 Mar 2026 02:00:38 +0000
Files and hashes: 1: X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.crl (hash: MVutfQom9XdHZwICndsBXfVfO34TDBIiz7hl7ddAmvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:02:87:58:6b:23:f1:9e:e8:de:a2:88:eb:56:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb4fc39d528f4920e218b5567d416463e8a7399
Validity
Not Before: Mar 28 02:00:38 2026 GMT
Not After : Mar 29 02:00:38 2026 GMT
Subject: CN=76724a58c04177f395bfb187672bde4e31ec0f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:fa:31:4a:e5:79:ee:f2:b1:97:00:92:27:
28:5a:f1:38:18:be:62:20:8c:76:08:40:84:71:7f:
73:b3:9e:b3:39:19:f0:9f:1b:74:58:d5:df:74:2c:
99:7f:f9:9c:da:c6:3a:1e:25:b6:87:d8:41:51:35:
41:f3:52:ef:96:d9:7e:fe:32:d1:ca:4f:71:73:5c:
23:33:7e:7a:7b:fa:41:8e:27:42:10:82:6c:7d:18:
98:df:93:e1:f0:70:33:55:d3:18:60:dd:e2:4a:ad:
8d:9a:5a:da:ea:d6:bf:99:6b:80:72:d4:ac:cf:38:
36:4e:89:5e:c0:7f:df:8d:d3:e9:81:6b:ec:d2:5b:
0d:14:e1:04:b7:e4:f0:0e:38:7f:ab:22:b8:fc:af:
04:26:67:bd:bb:f4:da:f2:62:fb:69:ca:8c:e7:a1:
88:14:d6:3c:5a:44:9e:d6:84:60:b2:55:e3:f9:94:
bd:2a:a3:86:7b:bc:cd:c4:0c:fe:b5:15:3b:34:21:
29:2f:c9:93:bd:7a:e7:db:ae:9a:91:4d:e4:f9:80:
28:eb:e8:5f:c6:1c:0d:97:38:30:40:7f:51:bb:9f:
7d:13:95:ca:d0:da:5d:55:03:a6:30:2e:68:a1:cc:
61:9c:c5:8d:a2:b9:a5:d7:07:d0:67:32:50:a7:f0:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:72:4A:58:C0:41:77:F3:95:BF:B1:87:67:2B:DE:4E:31:EC:0F:68
X509v3 Authority Key Identifier:
keyid:5F:B4:FC:39:D5:28:F4:92:0E:21:8B:55:67:D4:16:46:3E:8A:73:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b4:f9:e7:c3:7b:d3:2f:32:d0:62:5a:fe:2f:09:96:a4:f9:
35:37:3f:75:5c:15:45:6c:2e:a1:34:9f:15:b2:11:b3:65:bd:
d3:80:2b:94:bf:5c:a7:eb:3c:ed:2c:99:43:db:a5:9f:53:95:
06:e5:c8:61:e8:de:4e:ed:f8:47:35:87:1f:a3:2f:a3:a6:27:
aa:ac:94:d7:bd:86:e4:0e:9e:51:56:17:81:ea:47:fb:13:c9:
0c:5c:87:ea:0c:c1:9b:32:ae:82:1a:d5:25:3e:3d:5c:e0:22:
df:04:51:f3:f3:c4:94:3c:9e:25:bf:db:c2:59:c4:90:01:ed:
a6:de:16:3e:14:33:25:51:bf:8b:ff:f3:81:1b:7e:45:fd:64:
c8:b5:2c:3d:c9:2a:c7:eb:24:7e:27:b6:60:20:6b:ba:67:c0:
ad:36:76:b2:77:23:09:0e:96:0b:de:c2:81:89:11:21:42:5a:
4e:c6:64:52:ad:bf:07:1c:f4:e4:13:a0:f4:f7:1f:17:b1:52:
e9:5d:ee:af:13:65:2b:14:cb:fe:3c:c0:c3:d9:e3:e8:ee:cc:
a3:ed:b7:ae:60:42:f2:98:be:96:a8:1b:8c:5b:07:c4:dc:f8:
88:f6:c1:fa:ce:6c:ef:09:ca:9b:e9:39:7b:28:d8:f8:32:70:
03:d6:6f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:47 2026 by rpki-client