Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: L4VyW+xVtEPAu4OdqCP2pj3fK7Y+4ykP3ZJmnnMqey4=
Subject key identifier: 19:5C:A7:ED:5C:6E:F9:D1:C6:08:78:9C:B4:F4:6F:B9:62:69:0C:DC
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 019DA309E4B86D598BD272502AD45D7CC125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 1800
Signing time: Sun 19 Apr 2026 00:00:27 +0000
Manifest this update: Sun 19 Apr 2026 00:00:27 +0000
Manifest next update: Mon 20 Apr 2026 00:00:27 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: zbVCMCHkirCfmVJ1TAN7XTnQTYF2HRG9gSXEly8CUag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:e4:b8:6d:59:8b:d2:72:50:2a:d4:5d:7c:c1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: Apr 19 00:00:27 2026 GMT
Not After : Apr 20 00:00:27 2026 GMT
Subject: CN=195ca7ed5c6ef9d1c608789cb4f46fb962690cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:de:80:1b:24:a6:e2:e2:11:92:3d:f0:71:
ce:5c:07:3a:5e:bf:94:65:5e:f8:9c:e2:23:23:95:
c5:f2:ab:f6:52:a0:5a:94:3a:b5:53:a5:9b:24:08:
17:62:df:dd:c8:fb:8b:5b:f5:a4:c4:76:37:92:3a:
1c:f2:01:a2:b6:e8:23:e1:2b:3f:1b:27:b6:66:8c:
1d:da:eb:52:ab:21:3d:90:9b:4e:05:b6:1d:26:99:
0f:7f:19:b0:70:25:ba:27:f5:b8:95:18:77:c5:c1:
79:9e:77:1c:af:6e:f4:d7:27:a9:c1:39:b1:ae:1c:
5f:c4:8d:13:fe:84:07:cf:05:f4:0a:ca:a5:9f:cc:
97:24:44:93:ca:89:02:35:ed:98:0c:94:f8:87:2a:
34:b6:e5:17:43:78:64:bd:34:cf:29:9f:42:03:79:
d2:92:54:73:ed:bb:f9:cf:0f:72:01:ab:b3:32:1c:
03:81:bf:ec:1b:18:c5:ae:31:02:8d:0e:5a:84:7b:
cd:e9:fb:3c:a8:e9:ed:63:21:ac:f2:dc:f3:b9:97:
07:92:d5:71:6b:91:e3:5a:56:50:55:99:d5:d2:a0:
a2:90:b3:fe:b5:f7:0a:b6:90:fb:c0:05:44:d9:f2:
eb:60:d3:c7:4a:26:5f:c1:02:da:e9:40:92:b4:4d:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5C:A7:ED:5C:6E:F9:D1:C6:08:78:9C:B4:F4:6F:B9:62:69:0C:DC
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b6:ad:c0:12:3b:6e:c3:cb:fa:50:c9:7c:0c:3e:ff:d7:fb:
e4:d5:dd:9f:4d:a9:3f:29:65:54:c9:62:c8:50:9a:06:55:45:
70:9f:5c:8f:a4:d7:c2:82:5a:60:b7:e7:9d:fc:9c:68:ae:5a:
c4:d0:57:25:9e:b5:c1:9f:91:45:6c:45:e0:37:76:81:05:f2:
35:24:42:71:0f:54:e7:de:15:b3:ef:30:ca:d4:aa:30:14:78:
e3:d6:10:17:22:43:e9:fb:06:08:37:10:fb:0e:c8:2a:d9:e3:
9e:c0:cb:0e:0e:a4:96:7f:c9:e6:57:14:22:e8:5a:9b:b1:88:
63:51:1e:03:58:5c:db:05:90:d5:4a:d9:3f:18:8f:3e:ba:06:
0e:52:07:38:2f:8e:fb:fc:20:9a:51:cb:63:ca:fa:e0:d5:53:
9e:dd:86:61:fd:5b:e1:06:65:c3:8e:aa:18:f3:90:8d:a6:0e:
b4:45:70:96:80:02:d5:df:61:4f:c4:79:28:64:49:20:9a:96:
7a:40:8d:2d:21:77:dd:58:3f:ed:9f:71:c5:58:9d:53:f2:d9:
2f:50:64:c0:47:f8:58:0e:64:3d:7d:51:20:cb:40:2e:20:69:
4e:d0:1d:15:6c:fe:4f:da:44:80:fc:0d:21:14:61:85:19:ca:
2c:59:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:38:01 2026 by rpki-client