Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
File: xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json)
Hash identifier: j6RjEUbfc86Xz0EjRHSSqgV2uJc1JechcJSFMYcUT1Y=
Subject key identifier: 7E:F1:A8:CA:32:33:96:00:36:D3:BC:82:59:84:49:65:C1:2C:C2:30
Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
Certificate issuer: /CN=c411c339591edfc9667a3e79118dd23c402be87f
Certificate serial: 019CAA21C0A184D52C9F4DDBC06AD7E0BC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
Manifest number: 083F
Signing time: Sun 01 Mar 2026 16:01:04 +0000
Manifest this update: Sun 01 Mar 2026 16:01:04 +0000
Manifest next update: Mon 02 Mar 2026 16:01:04 +0000
Files and hashes: 1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: dOf7FYofOy+6v2F+/bTs6a6VJSpPqm9KW+rVMfr8BIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:c0:a1:84:d5:2c:9f:4d:db:c0:6a:d7:e0:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f
Validity
Not Before: Mar 1 16:01:04 2026 GMT
Not After : Mar 2 16:01:04 2026 GMT
Subject: CN=7ef1a8ca3233960036d3bc8259844965c12cc230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:f0:b4:71:f4:09:18:07:41:1f:8c:3b:55:
bf:b8:81:42:fc:23:e2:8c:ca:0e:4d:8b:24:43:b7:
1a:18:57:ad:95:40:3d:4a:56:9c:d9:24:bd:2c:a3:
00:35:4e:1b:90:aa:61:ec:13:e4:bf:26:54:7b:ae:
98:0e:cf:4c:d9:b4:51:ed:a2:84:f6:7e:61:c9:0a:
46:32:9d:82:7c:b4:92:64:bf:cc:9f:29:60:f4:53:
20:4b:65:53:a1:c6:34:6e:71:45:04:8f:80:f6:f8:
c0:1a:77:38:8c:df:64:78:eb:c3:31:a3:7b:d0:36:
42:af:38:22:02:f7:4c:0b:ff:47:97:5f:2e:f5:33:
24:f5:97:11:06:92:f1:55:db:63:ec:d1:c2:46:6c:
5f:4d:e3:7c:c8:1c:ce:08:67:dd:20:05:6c:4e:ed:
9e:de:c4:21:08:bf:7f:b2:47:15:85:ad:3d:e3:d2:
fa:35:33:94:dd:56:0f:fb:22:5f:0f:91:db:37:14:
f0:92:96:b8:c7:21:7f:8e:73:f9:ef:c3:0c:fb:f0:
2e:64:98:36:94:70:84:0a:f0:d0:8c:2d:03:66:af:
98:10:ac:7c:c1:57:1a:fc:5f:db:af:a9:38:5b:1a:
3b:5e:0f:cb:84:b1:f1:24:08:d8:d4:25:3b:5e:21:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F1:A8:CA:32:33:96:00:36:D3:BC:82:59:84:49:65:C1:2C:C2:30
X509v3 Authority Key Identifier:
keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e2:19:2f:3d:31:d2:29:92:a1:d5:0f:75:b7:90:52:e9:41:
35:a1:62:45:c0:6c:5d:0d:fc:ff:69:73:5c:ce:00:33:8b:72:
74:bf:a2:ba:c7:c4:62:5b:79:6a:73:ff:f4:62:97:9e:2b:8e:
94:a5:1d:b5:69:1f:e9:d7:38:95:06:af:4b:11:92:d6:f7:db:
2a:f6:98:98:58:4b:26:65:54:02:31:6f:43:4b:ac:55:10:4b:
c6:21:d0:28:7e:0a:ce:91:f2:b1:cb:ea:21:27:d9:06:07:35:
1a:1f:a3:88:22:e0:67:93:e4:d2:f4:ca:cf:99:61:7b:f4:53:
c4:ca:26:f8:28:b4:94:35:71:a8:de:64:1e:23:ba:54:f6:84:
3e:77:c1:2c:37:31:78:38:59:ab:3a:0f:19:b7:83:68:60:48:
93:51:d6:43:54:ae:32:bc:f9:29:58:cd:05:08:4b:22:47:0e:
14:99:9e:88:2a:33:37:60:80:09:85:f4:8e:4f:ba:e8:46:3b:
ff:84:28:ae:5a:b4:29:f6:f8:9e:a7:86:88:e5:4e:0e:f6:cc:
ef:60:d2:bc:40:43:e9:c8:4c:b8:80:27:d2:cd:4d:43:22:05:
9b:df:30:c8:a3:48:02:06:08:6e:48:88:63:95:2a:e2:98:fd:
bb:0f:8f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:50 2026 by rpki-client