Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: DaPugh8TvKLgan2d9hLIfQEYqtSBryqo3PFj2nMNDeg=
Subject key identifier: 9B:26:82:8E:71:40:FA:EF:D2:0C:07:C2:6E:AE:24:79:14:7A:6E:A6
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 019D29618B9FEC0107597074941E0EF5310D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:02:31 +0000
Manifest this update: Thu 26 Mar 2026 09:02:31 +0000
Manifest next update: Fri 27 Mar 2026 09:02:31 +0000
Files and hashes: 1: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: jNT2067xa/mrnKs0gVlfcsOETrMwsDtUiRo4rjLyd1A=)
2: YboTsZW5E_LquEoNeH4f-DKai2A.roa (hash: rVnU6oaQsX3x5ymp+Ryvp8mswyZTbG+O1Im+gcRa5NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:8b:9f:ec:01:07:59:70:74:94:1e:0e:f5:31:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Mar 26 09:02:31 2026 GMT
Not After : Mar 27 09:02:31 2026 GMT
Subject: CN=9b26828e7140faefd20c07c26eae2479147a6ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:06:3a:70:e4:1e:67:06:62:18:50:da:a6:
5e:eb:f1:e0:d7:97:dc:74:bf:0b:ad:72:8c:54:f9:
6a:0d:71:13:2e:cb:63:93:5e:8a:3d:b0:e8:53:8d:
f8:ba:ce:c2:2e:a7:7b:e7:25:8d:df:06:5d:d8:ef:
61:6b:c8:5c:df:ca:cb:43:1f:9d:c1:1a:6b:52:08:
fe:9b:c0:6d:62:cd:53:e4:71:a9:13:17:6f:33:8d:
ca:fb:c2:95:3a:53:49:60:b3:b0:eb:bc:71:96:a0:
6b:0e:7f:be:ef:eb:d7:09:50:5d:08:05:df:a7:cd:
68:70:9d:2f:86:f7:2a:81:86:27:68:1c:8d:c2:b6:
22:6b:52:da:32:0a:3e:66:47:c6:55:d3:c2:66:e8:
9e:da:80:98:f5:10:dc:16:a1:05:46:98:54:ab:d6:
4c:09:4f:f8:9a:b0:3c:a6:c4:b7:2e:ae:9e:89:cc:
dd:9c:c3:a9:82:6d:74:88:8c:1b:ef:fb:57:ff:4e:
93:c5:47:cb:1b:78:eb:90:0d:14:98:96:58:e5:42:
60:5a:12:a5:3c:ad:5f:dc:e7:03:75:97:fb:d9:07:
57:fe:98:45:45:d8:ce:df:94:ee:45:f7:b0:10:ae:
c1:44:ab:3e:93:61:c9:39:c1:7e:ab:91:14:39:d8:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:26:82:8E:71:40:FA:EF:D2:0C:07:C2:6E:AE:24:79:14:7A:6E:A6
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0d:95:94:54:66:51:5b:97:a8:9d:bf:17:c2:be:81:c5:42:
93:0c:63:d6:36:30:03:c7:7f:23:dc:2b:eb:00:67:03:50:95:
46:ac:c2:e2:aa:44:d1:b8:cd:28:99:6c:7a:84:65:1f:96:b3:
cb:bc:a3:88:a8:dd:70:7d:b7:0c:f1:69:5c:49:3a:df:02:79:
ed:9d:80:50:1b:dc:fa:26:70:3e:7f:8a:b8:e9:eb:91:c8:33:
5b:83:89:39:43:cb:57:d0:9c:02:56:3e:35:68:5b:18:3c:2b:
97:4c:9c:89:31:5f:1c:38:86:95:a4:92:e5:c0:2c:51:00:c3:
b8:1f:a8:0f:9b:7b:96:1a:6f:93:96:5b:ae:85:5b:28:b6:34:
32:95:e2:92:8c:68:4d:f6:2f:81:b0:d7:52:d9:cd:1b:14:40:
eb:7a:66:8d:eb:bb:d4:01:a6:f0:20:f1:06:fd:8d:62:54:1d:
55:d1:85:84:b3:78:6d:54:ca:c4:04:f9:09:08:7e:e5:39:7f:
eb:16:93:d7:55:18:6f:9a:9d:bb:65:b6:5c:1e:0e:84:83:31:
09:20:8d:d5:7b:30:56:ec:f5:0e:cd:a8:ed:55:01:09:32:b9:
4b:4d:83:89:f4:e0:d5:4d:68:42:ae:2f:6d:d2:23:8e:84:c2:
ac:dc:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:16:06 2026 by rpki-client