Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: /Y0mV0/itq0bdE6+UEV61vUGTmgeITxjIKEmC5N4PXY=
Subject key identifier: 2A:F6:AE:DE:A5:89:DC:18:0E:58:76:F7:01:5A:ED:8C:AC:49:4B:C9
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 019CA9EB7A1F99A3EA889BB792A1903F45B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 177F
Signing time: Sun 01 Mar 2026 15:01:47 +0000
Manifest this update: Sun 01 Mar 2026 15:01:47 +0000
Manifest next update: Mon 02 Mar 2026 15:01:47 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: W/TCUjV4IJ8DE627tLB4M2YjxynF38UCen8sLeQN3Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:7a:1f:99:a3:ea:88:9b:b7:92:a1:90:3f:45:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: Mar 1 15:01:47 2026 GMT
Not After : Mar 2 15:01:47 2026 GMT
Subject: CN=2af6aedea589dc180e5876f7015aed8cac494bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:17:da:f2:6d:d2:7a:a3:90:b0:45:1a:45:
8d:ca:19:66:6c:d4:47:ba:b7:9b:30:ac:03:43:56:
75:df:db:cd:dc:44:53:75:54:56:30:cf:c9:99:5c:
85:b8:03:4d:04:d8:52:b8:3a:9f:93:f3:bb:2d:de:
04:d9:b5:60:91:a3:33:95:89:e2:62:e1:d6:57:12:
8a:70:63:9f:49:c6:c9:e9:82:38:e6:fa:a9:02:07:
82:6b:97:92:1e:9f:3d:d5:1b:6e:4d:4d:d3:2d:9c:
d3:30:66:d5:c9:0d:cb:29:66:40:14:73:be:6f:7d:
cc:73:cc:da:98:d6:8d:24:8c:c5:73:fd:64:c2:6c:
1e:e2:35:da:b6:c8:41:fc:b4:11:87:51:15:32:57:
e1:0b:56:2c:c5:81:50:5d:b8:70:1d:6a:ce:8e:09:
ea:11:7d:de:d8:d7:0e:cc:11:ed:c5:13:40:1a:de:
54:3e:ae:a7:48:0e:4a:b5:e4:a1:8c:48:de:9c:f0:
cb:10:22:37:87:40:e6:1f:7b:17:ed:ba:9c:49:3a:
70:26:21:10:47:18:a4:19:51:18:43:36:d3:38:91:
af:de:c5:51:1b:16:c1:94:d7:a2:24:7d:6c:b0:8b:
f6:4a:a8:50:9a:c1:3e:77:d2:7d:9d:16:7f:14:09:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F6:AE:DE:A5:89:DC:18:0E:58:76:F7:01:5A:ED:8C:AC:49:4B:C9
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0f:5c:50:a2:e6:7f:e9:30:a7:95:55:e7:2e:0c:23:6a:35:
89:4f:71:a3:bd:0f:dd:99:57:16:06:10:0f:e2:a3:e3:f5:02:
73:b6:74:74:8f:59:b8:0c:7c:33:1e:3a:d1:7e:3f:4e:c0:56:
24:90:f8:24:f1:df:ee:86:77:92:37:ad:a2:da:54:4b:9a:55:
b5:93:a2:1e:d4:df:96:b1:d1:89:06:f8:fe:e6:ca:76:95:ee:
a3:12:d7:e3:28:d3:a3:37:37:b6:f5:82:68:8d:de:1d:2e:29:
8a:21:62:30:68:af:b2:47:ac:f8:d7:c2:a2:eb:04:f4:b0:a0:
b3:a7:6b:41:91:e2:3b:3a:e7:e7:0d:15:05:bf:23:0b:ee:ae:
5e:09:cd:d0:47:14:6b:85:c5:6d:7b:25:ba:49:2f:cd:ce:b4:
85:cf:f8:d2:a2:46:4b:c7:cb:3e:82:76:d3:34:6e:a8:9c:b4:
f6:8f:44:3d:81:00:79:fe:ac:83:f9:4c:2e:69:dc:f7:b9:a3:
ed:26:0a:45:67:03:fa:9a:b0:6e:b8:f7:8b:6c:d2:18:70:16:
a4:21:22:28:34:ce:38:c4:82:aa:44:66:ae:cb:af:16:0c:3c:
29:54:f2:8b:f8:cf:40:06:6b:f5:c2:ca:31:f1:81:55:b3:30:
69:d3:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:33:24 2026 by rpki-client