Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
File: _x2DMuEYqaIYfqtYhCedZYDxGfc.mft (raw, json)
Hash identifier: C7HiLAIkjDW0JYlcdEQIeyrBykPHp2GmI62aCXokgBM=
Subject key identifier: 53:F0:09:90:7A:7B:49:24:FD:62:3D:8E:A6:17:06:F9:47:1A:D2:51
Authority key identifier: FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
Certificate issuer: /CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Certificate serial: 019CB5B80C8217D4FB83BDEDE33E1BE477B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
Manifest number: 06A5
Signing time: Tue 03 Mar 2026 22:01:03 +0000
Manifest this update: Tue 03 Mar 2026 22:01:03 +0000
Manifest next update: Wed 04 Mar 2026 22:01:03 +0000
Files and hashes: 1: _x2DMuEYqaIYfqtYhCedZYDxGfc.crl (hash: fcCi5SI0g55UYc6YFaFHMhfpSjHTTSK49hvXsbL39Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b5:b8:0c:82:17:d4:fb:83:bd:ed:e3:3e:1b:e4:77:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Validity
Not Before: Mar 3 22:01:03 2026 GMT
Not After : Mar 4 22:01:03 2026 GMT
Subject: CN=53f009907a7b4924fd623d8ea61706f9471ad251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:01:5a:b6:54:88:1e:5b:b8:d2:67:df:47:
1e:12:dd:a5:0d:e7:47:32:63:3d:1e:28:fb:6f:13:
a2:4c:1a:56:90:1b:89:e6:bb:6f:d7:80:f6:cb:4c:
53:b9:13:9c:f0:dd:3b:29:14:a4:ab:85:14:96:2a:
8e:32:96:05:33:aa:6e:ad:7f:30:66:0e:13:a3:88:
32:5f:3b:5c:98:04:a0:c4:ba:97:a2:ed:84:be:db:
0e:e6:bc:49:4e:2d:39:af:c0:24:86:07:f9:58:f8:
28:5f:7b:53:df:5d:0b:3c:61:35:49:b8:c3:39:f4:
e3:94:3f:e5:0b:65:2d:fd:e2:a0:e9:9b:c8:5e:a9:
e3:af:94:41:3c:4d:ce:f2:0c:f5:cd:72:65:a3:96:
d5:2a:a4:ee:03:4f:0a:b1:fb:04:a6:6e:84:1b:fd:
fe:a9:76:cf:20:64:b9:4e:d5:6f:cf:4a:0e:11:32:
1c:e7:6e:f2:92:85:f4:8e:63:86:6a:f0:a6:22:17:
90:9e:cc:4e:61:07:01:76:9c:29:e2:c9:32:35:fa:
0a:8c:cf:71:44:5d:7d:bd:8a:31:d7:29:85:aa:27:
62:17:fb:e1:bd:b4:6c:93:b5:96:5c:dc:d3:be:b9:
10:eb:8d:f5:7c:e1:76:c4:78:72:7a:c6:41:61:0a:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F0:09:90:7A:7B:49:24:FD:62:3D:8E:A6:17:06:F9:47:1A:D2:51
X509v3 Authority Key Identifier:
keyid:FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:25:37:2a:d4:9f:08:c7:64:96:28:3b:4e:36:39:34:6e:4a:
b6:41:38:b0:2a:10:3a:2e:45:a4:24:b7:fd:99:1e:56:b0:d7:
28:ac:5f:70:99:5d:df:3e:a3:b9:b5:a0:44:17:57:2e:c9:78:
43:b9:ed:cb:48:b2:80:59:3e:2c:56:21:ab:f3:8d:5e:1c:2b:
93:92:7d:b3:0a:8e:eb:3a:1f:96:a3:d4:1c:bd:9e:10:b0:e6:
e5:c4:ee:0d:fe:b5:3e:bf:79:f2:e1:03:bf:02:e0:f1:bb:ea:
db:17:2d:0b:e7:f5:b5:90:a5:7d:9e:b5:69:1e:e8:40:93:e1:
81:d0:89:81:a1:75:09:98:65:61:b9:32:8d:49:89:fa:27:ea:
b2:02:3b:dd:dd:d1:c1:06:bc:7c:05:e1:2e:8b:65:69:55:6f:
2a:40:9f:fe:96:e9:fe:b0:b4:6e:13:c9:2d:92:5b:cb:d2:ed:
5d:7c:82:e5:cf:01:73:c9:7b:71:10:46:4a:a9:76:bd:87:99:
d8:af:cf:f6:b5:31:4d:0f:b9:4e:c6:40:38:62:3e:2a:eb:57:
fe:bf:19:13:81:95:b9:2d:55:98:c5:21:2b:79:1c:b9:7a:db:
c4:9b:68:34:db:dc:ac:12:70:04:08:c4:f3:8b:55:df:6c:40:
ef:a6:18:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:19 2026 by rpki-client