Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File: xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier: GXAVt5ppYyYasDHpjPLvDx/2uW0SGxFxv427zvTOmFE=
Subject key identifier: 7F:82:D5:A8:90:06:1B:77:F4:37:6E:6E:20:8B:0A:79:79:35:47:91
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer: /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial: 019CAB6BDEDD90387C03652A561FF092DA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number: 0BB9
Signing time: Sun 01 Mar 2026 22:01:39 +0000
Manifest this update: Sun 01 Mar 2026 22:01:39 +0000
Manifest next update: Mon 02 Mar 2026 22:01:39 +0000
Files and hashes: 1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: y9mEMBsC1+EArioPN6CTqq5Nv2nqZyymixR7HIUyaCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:de:dd:90:38:7c:03:65:2a:56:1f:f0:92:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Validity
Not Before: Mar 1 22:01:39 2026 GMT
Not After : Mar 2 22:01:39 2026 GMT
Subject: CN=7f82d5a890061b77f4376e6e208b0a7979354791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:da:4e:e7:ae:7a:07:49:3d:ff:7c:0a:83:
bb:58:00:95:5b:cf:bd:9a:5b:e3:f5:ae:a3:0e:3a:
24:bc:6b:f9:7a:42:46:4f:67:52:3b:e5:c5:e0:e2:
5f:27:43:79:37:b5:cf:42:b1:de:e7:a4:91:d3:62:
ea:cf:f2:8d:e6:96:f0:ab:6f:11:c2:9f:45:0b:32:
b2:82:6a:56:f7:81:61:3f:b3:8c:e3:1e:df:5a:51:
ff:37:82:17:86:e2:6b:74:0a:96:19:dd:36:8d:35:
23:c1:28:9b:85:ed:dc:4d:b4:28:90:cf:9e:24:ad:
bf:36:b5:29:d8:a0:f3:d7:70:25:05:f9:f6:f8:a3:
23:2d:f2:11:b2:8e:47:0c:4b:8f:4c:ed:65:4c:73:
77:36:20:a7:28:55:3f:e3:b2:81:7f:6f:74:b6:2d:
1b:07:0f:3a:ba:07:9a:a8:77:fa:e1:0a:02:ed:7b:
7a:5a:da:a6:27:33:f1:a8:e1:50:75:b0:8c:19:f6:
a4:8a:94:b4:9d:ec:a9:a7:c8:4e:11:d8:9b:36:e4:
67:5f:51:78:ca:4d:b7:23:85:f0:4e:f4:3e:f7:57:
1e:11:12:c1:44:4c:34:de:e5:45:9e:8d:1f:9f:90:
a0:96:a5:1f:66:5b:6a:25:56:f5:86:12:76:eb:04:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:82:D5:A8:90:06:1B:77:F4:37:6E:6E:20:8B:0A:79:79:35:47:91
X509v3 Authority Key Identifier:
keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:af:4d:38:7a:d4:37:ea:8a:29:9f:f3:27:19:da:3a:d9:bc:
55:50:55:5b:35:21:b1:e4:1c:ea:93:32:0e:23:e6:3b:41:e3:
ea:bf:bd:ce:94:40:41:91:aa:46:f2:6e:d1:0a:82:94:4a:cb:
63:2e:36:ca:70:b7:9d:68:e5:f9:f3:b7:dd:17:ae:54:9d:2c:
da:e0:51:b4:9b:c3:48:26:79:86:d5:3b:22:76:46:50:3d:7a:
0d:68:f7:14:4e:c4:ef:8c:07:cb:47:4e:3b:f9:ec:b5:c0:a0:
1e:29:8c:7f:cb:6f:82:35:ab:4c:f0:f7:07:1e:b0:34:a0:0f:
f0:7a:ed:64:d9:c5:b4:a1:15:f7:0d:7e:aa:e1:86:6e:24:70:
90:f0:16:4b:0f:22:c5:6d:d6:d5:06:06:68:04:38:6c:44:fa:
d1:89:6e:3f:01:70:60:2a:67:17:0f:e2:08:47:d2:a0:54:06:
3e:e1:6d:33:d5:30:c0:5b:24:63:47:47:16:73:02:d4:c9:05:
ea:93:7c:c1:35:21:56:ea:75:95:be:c4:5a:a8:8f:76:5d:6b:
d1:dd:49:c7:c5:2a:95:79:1c:3a:be:1d:d8:b0:7a:ea:30:5b:
42:a8:32:3f:c0:55:2e:7b:ac:5e:35:73:f8:6f:b9:26:77:85:
87:65:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:46 2026 by rpki-client