Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
File: xDzur3eV-33zSLBLIn5QpJoaG3w.mft (raw, json)
Hash identifier: vopN077RsL6e0WrisP//+hlAOrDXVPEDg4oPb5c2QEc=
Subject key identifier: 14:A0:4D:2E:60:95:C4:E5:74:13:88:5A:52:BC:4D:BE:2E:88:EC:96
Authority key identifier: C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
Certificate issuer: /CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Certificate serial: 019CAA58FA8D979A663DF9DC3A85D363CA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
Manifest number: 157F
Signing time: Sun 01 Mar 2026 17:01:23 +0000
Manifest this update: Sun 01 Mar 2026 17:01:23 +0000
Manifest next update: Mon 02 Mar 2026 17:01:23 +0000
Files and hashes: 1: xDzur3eV-33zSLBLIn5QpJoaG3w.crl (hash: gSiw/CP9SG5KwtdR60BeMfnLLm5RsnoxrXezIJ3nDt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:fa:8d:97:9a:66:3d:f9:dc:3a:85:d3:63:ca:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Validity
Not Before: Mar 1 17:01:23 2026 GMT
Not After : Mar 2 17:01:23 2026 GMT
Subject: CN=14a04d2e6095c4e57413885a52bc4dbe2e88ec96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:d4:1c:97:d1:b0:13:27:bd:81:26:f9:30:
92:b5:70:ae:b4:7b:14:e2:1e:0a:6b:45:a7:fb:61:
31:7e:a8:a2:bf:f6:33:c7:51:4b:04:82:1f:59:ca:
9c:ef:bd:5a:d6:64:1d:e4:12:b1:60:33:a5:74:4c:
5f:07:54:3c:dc:9c:4a:6e:46:f4:80:5f:ea:e6:83:
ce:07:6f:f0:e7:c1:78:a7:ed:17:05:84:8c:85:d6:
3a:3a:6c:28:a4:92:5e:22:be:82:c9:04:17:ff:e6:
df:6c:68:b7:c1:10:9a:c4:09:21:d0:87:aa:a0:5b:
43:3d:26:dc:89:35:e9:eb:70:66:30:6c:20:80:aa:
61:bc:0b:a7:8c:1d:8b:de:92:a1:e4:ca:a5:26:52:
ed:df:08:1c:68:b8:db:13:17:40:2b:b3:27:4f:1f:
0f:4f:7c:41:25:6f:68:57:bd:5e:38:76:70:58:5c:
d9:bb:38:d4:47:ca:b6:53:5a:78:78:26:60:41:b0:
c9:22:a8:9f:c6:aa:06:d9:da:9f:31:33:ec:9f:0f:
0d:b5:0a:44:52:78:e0:5e:fd:68:dd:dd:6e:c6:ed:
e9:0e:d6:53:d6:41:d9:a8:6e:e4:93:19:0f:14:6c:
44:80:f3:4f:b9:6c:c4:00:4d:88:07:3c:3b:f0:b7:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A0:4D:2E:60:95:C4:E5:74:13:88:5A:52:BC:4D:BE:2E:88:EC:96
X509v3 Authority Key Identifier:
keyid:C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c0:b6:ff:42:bd:25:09:e0:84:eb:89:3a:ed:d0:b4:74:62:
c8:fe:4e:14:79:bb:b7:d7:65:4b:8b:4a:b4:6b:91:87:58:95:
71:a0:01:38:3d:0e:61:48:b3:94:22:fd:78:5c:23:38:f9:74:
4a:47:ec:43:d2:f9:03:50:13:16:58:dc:22:37:a6:67:8a:4f:
62:c8:b0:5e:2b:cc:0f:97:52:f6:ab:43:cc:ed:60:df:c6:47:
31:8e:df:01:2d:98:71:a2:23:bc:23:45:59:2d:8a:f3:98:bf:
3f:fb:54:43:35:88:ea:0e:ec:7f:dc:6d:99:3b:4c:85:f3:e1:
b6:cd:51:f7:a2:7b:fd:5f:c3:62:19:9a:df:86:57:da:ff:f4:
13:46:18:a4:aa:f4:b5:0c:85:f7:9e:f8:ca:e6:19:4e:6e:cd:
a1:1d:7f:21:34:8c:2a:d2:69:1e:11:52:e4:e4:09:40:d5:0c:
03:95:30:3f:8f:56:f8:63:5b:af:99:bd:f8:e0:dd:91:c6:79:
55:4f:09:3c:a7:96:2b:a0:07:a5:35:b7:32:3b:c3:ca:3e:e1:
b5:89:42:00:ce:56:e1:aa:69:05:2d:de:90:df:b2:f2:75:48:
63:bb:26:7e:a1:93:ab:7c:ab:4f:25:06:45:2f:87:b5:2c:f1:
97:50:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:47 2026 by rpki-client