Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File: C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier: HtS2zkuqPDR1Dext+v+qlSL47UUzluTgRnOSSdacS40=
Subject key identifier: B9:4F:64:F7:9F:07:F6:8C:4B:77:57:C1:B7:8C:25:EE:AB:83:03:9A
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer: /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial: 019E1CB546696B8D863C78231442293CF603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 15:01:42 +0000
Manifest this update: Tue 12 May 2026 15:01:42 +0000
Manifest next update: Wed 13 May 2026 15:01:42 +0000
Files and hashes: 1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: d1IwcAmQ6oRkCISHFbLyQ30W5pjBydEKcKRhdqIdiEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:46:69:6b:8d:86:3c:78:23:14:42:29:3c:f6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Validity
Not Before: May 12 15:01:42 2026 GMT
Not After : May 13 15:01:42 2026 GMT
Subject: CN=b94f64f79f07f68c4b7757c1b78c25eeab83039a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:43:6f:1a:1f:55:b6:c1:a3:2b:20:69:19:
59:70:97:8d:db:d0:d9:7f:14:14:d4:1b:9c:db:36:
c7:c2:d0:6e:e9:87:38:f6:c8:c0:98:ad:57:bc:e7:
ca:5d:84:bd:38:12:a6:d0:bc:3d:6a:54:46:85:e8:
7d:66:ed:a8:d8:69:4e:af:f0:67:2a:38:3f:41:b1:
d1:4e:82:9e:e9:79:6f:86:c9:bd:08:fd:f1:8f:f1:
05:a0:88:3b:25:5e:eb:70:2f:de:60:e6:48:73:bc:
b2:69:cc:50:92:5d:5f:af:6f:90:49:25:80:7f:ff:
b2:e0:58:9b:91:28:68:eb:1c:40:38:0f:78:a6:84:
92:24:a4:ae:67:67:22:f9:64:63:c6:ed:a0:08:6f:
59:c0:85:89:f6:8b:ae:28:20:ec:92:89:37:20:a6:
40:64:7a:83:08:a5:b7:bf:d9:54:62:6e:d2:c9:0d:
7d:ec:63:dc:07:aa:1b:da:d3:88:67:3a:cd:7c:af:
d4:02:8e:68:12:4f:78:57:d5:99:f0:4c:bd:8b:05:
ba:c7:41:03:f8:14:96:02:f4:5b:f8:f2:0e:ca:45:
30:73:a9:18:d9:74:89:8f:49:70:75:01:ce:a3:0a:
9e:22:8e:a9:65:ee:94:8c:cd:a3:9e:61:e5:06:fd:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4F:64:F7:9F:07:F6:8C:4B:77:57:C1:B7:8C:25:EE:AB:83:03:9A
X509v3 Authority Key Identifier:
keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ee:d5:cd:81:c6:e5:d7:ad:9f:e9:f8:b0:e5:65:a8:13:80:
53:e3:a5:59:8c:6a:d1:f0:00:c3:ea:d1:da:e4:c5:54:47:a7:
ad:ea:09:92:cb:0b:9f:cc:90:e7:85:48:6c:e1:f3:36:8e:2c:
37:70:25:a4:ca:98:90:0b:4d:22:15:cf:0f:b2:63:93:8a:b2:
f7:52:56:32:ac:3f:79:47:61:fc:9f:1b:2c:1e:6f:b5:69:b8:
87:c9:5d:3f:14:6e:18:6a:f8:10:75:a9:97:ba:27:16:cb:77:
3a:aa:1d:0c:3a:13:b8:a8:33:e5:6c:0a:fe:e1:01:a5:6e:6c:
4a:d0:00:a6:a9:23:71:9a:46:38:de:d2:b9:52:61:d2:eb:7d:
86:65:33:d8:9a:5c:66:63:0e:4b:72:18:02:60:99:6f:c5:2f:
cc:6f:05:ba:5b:57:40:e6:6f:3c:df:c2:22:e7:04:7a:ad:59:
e5:89:9e:c7:56:58:c2:0d:dd:bf:45:c5:fe:3f:1c:fe:f7:32:
e1:00:cf:42:ff:28:36:38:38:7b:6e:91:6a:b5:95:c6:37:dd:
74:6c:b2:1e:92:79:81:9e:f3:72:21:e4:6a:b9:2c:7b:ce:c6:
82:bb:8d:b9:79:3e:f0:8f:49:20:60:48:13:b3:b1:79:84:26:
72:d9:e3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:50 2026 by rpki-client