Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier: TFtlpOQkp1pbJPBqKl9JIO/o0YMiupSHZZTc9dqN1Qs=
Subject key identifier: 25:90:64:18:CD:D8:3F:25:CE:C0:D3:EF:89:62:5F:8D:38:77:7C:15
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial: 019CAA58319A5FA27A34307F975B5277CE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number: 0817
Signing time: Sun 01 Mar 2026 17:00:32 +0000
Manifest this update: Sun 01 Mar 2026 17:00:32 +0000
Manifest next update: Mon 02 Mar 2026 17:00:32 +0000
Files and hashes: 1: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: 4ii5inNbSaydlhOCe9d0X4Egn0zdivX+bSJruE5ItcM=)
2: fpoDjOJ9QESVX1PbeV9GOhFqUeA.roa (hash: nvenMpmvgQohsKJVJpGxy+qy+qgPY9hH3SAbWuq6Adk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:31:9a:5f:a2:7a:34:30:7f:97:5b:52:77:ce:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Validity
Not Before: Mar 1 17:00:32 2026 GMT
Not After : Mar 2 17:00:32 2026 GMT
Subject: CN=25906418cdd83f25cec0d3ef89625f8d38777c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:d9:3b:ab:8d:d1:9b:29:76:6b:7c:ac:95:
c7:16:83:21:1c:48:f3:cd:51:37:ef:1f:60:36:ba:
aa:3e:cf:64:69:70:c9:7d:35:f8:08:c2:9d:f8:0c:
71:d3:0f:96:73:21:63:1d:e7:8b:6f:aa:54:86:a9:
eb:f7:51:68:e5:ce:76:f2:42:42:ac:5f:fb:8e:a2:
61:c9:dd:79:58:5c:b6:ee:e5:f5:d0:40:f0:e0:8d:
8f:02:2d:76:b5:e5:68:1d:67:dc:6c:b5:32:b8:f9:
9f:6f:22:9d:9c:9f:28:4b:ba:2e:ff:8c:99:4e:fc:
d4:a6:dc:54:95:15:a0:a4:cf:e2:c6:9c:d1:f3:d3:
7e:81:10:25:25:8b:3f:bd:16:c2:11:7f:e4:37:26:
12:62:a9:a7:54:b7:d0:ff:01:cb:b3:de:3e:f0:43:
c7:14:0d:38:79:ca:8e:3e:7e:9d:31:3c:21:c1:85:
dd:63:68:19:06:01:b6:97:81:eb:cd:66:fb:e3:c9:
27:7c:64:7e:48:c8:7c:d4:a3:56:c2:cc:08:56:62:
93:46:0c:29:97:15:f2:c0:f6:17:52:09:2e:2b:c3:
da:b7:36:ed:dd:f4:61:2c:da:9b:87:78:09:07:a3:
27:05:3c:0d:b3:8c:70:7d:03:b7:46:ab:ea:b6:54:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:90:64:18:CD:D8:3F:25:CE:C0:D3:EF:89:62:5F:8D:38:77:7C:15
X509v3 Authority Key Identifier:
keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:34:96:3e:b2:d7:86:64:28:d4:7d:c2:1e:91:ed:5f:8b:43:
0b:e3:da:ab:41:a7:4c:b3:d9:de:10:ad:2c:2e:9f:95:1f:f1:
69:12:df:87:8f:97:80:f4:ad:13:22:c6:46:89:39:99:a2:c7:
ed:ba:80:d4:9e:89:34:a7:f8:fd:e2:b4:1f:09:d0:26:3b:a4:
69:89:bd:93:82:7e:f1:9e:98:f4:1f:8c:21:3b:b6:c9:5a:3c:
27:59:32:62:51:14:65:5b:87:61:0c:10:a6:78:59:4d:4c:7c:
5f:c8:52:be:d6:b5:f4:32:e2:6f:9c:31:85:b4:3d:1c:7a:bc:
a0:b6:1f:6a:4c:b1:9a:32:e4:5c:ed:36:57:78:42:42:b8:cc:
61:9e:d7:ce:28:95:c6:49:0b:1b:fb:b0:54:5a:57:62:a5:b1:
1f:04:2d:3e:9d:ca:bc:84:3c:e4:f5:35:e7:1e:d5:49:3f:fd:
dd:25:33:c3:fc:35:7e:98:c2:c7:07:eb:d5:d6:7e:cb:ec:1e:
8e:f6:c9:56:c8:e9:5e:b0:9b:d3:f7:ca:04:37:72:56:c0:22:
dc:03:9e:7b:2f:54:71:c8:23:46:a8:6a:2b:f4:57:3a:42:75:
c1:f1:e0:34:dd:98:95:8d:52:24:6a:cb:c9:ea:af:79:fb:7b:
04:7d:e5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:34 2026 by rpki-client