Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
File: xDzur3eV-33zSLBLIn5QpJoaG3w.mft (raw, json)
Hash identifier: 3vzYiNVWQaOcXfC5Vdc/MgzUHWgGyqPy7venVSn3V/E=
Subject key identifier: 51:8D:44:04:F6:CC:C0:DC:17:D6:DD:2F:A2:92:A0:75:19:3F:EE:DC
Authority key identifier: C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
Certificate issuer: /CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Certificate serial: 019DA378C86B8E9ABA99C9E3D2DCC03DAADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
Manifest number: 1600
Signing time: Sun 19 Apr 2026 02:01:34 +0000
Manifest this update: Sun 19 Apr 2026 02:01:34 +0000
Manifest next update: Mon 20 Apr 2026 02:01:34 +0000
Files and hashes: 1: xDzur3eV-33zSLBLIn5QpJoaG3w.crl (hash: 7U4vM8hN2B7wAlD54zNBa1REPOm1OJM+Rvh1Tsg7DQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:c8:6b:8e:9a:ba:99:c9:e3:d2:dc:c0:3d:aa:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Validity
Not Before: Apr 19 02:01:34 2026 GMT
Not After : Apr 20 02:01:34 2026 GMT
Subject: CN=518d4404f6ccc0dc17d6dd2fa292a075193feedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:25:af:94:7e:2f:0f:7e:ca:03:62:b4:e7:
fa:e3:4f:5f:1e:79:a1:83:a2:2c:c5:24:66:da:28:
b0:9a:da:d8:84:12:79:1d:2b:70:d8:40:37:7a:79:
c4:d0:a3:cc:c0:2c:3a:72:63:ab:94:71:0c:42:f4:
5b:3a:96:d3:b5:44:39:4f:70:20:4a:48:6a:30:eb:
50:51:e2:97:40:be:6f:f0:7a:a4:63:0a:4e:12:1e:
9b:b4:00:a4:bd:b9:a7:03:49:8a:d9:80:34:41:6d:
c7:2c:8e:65:35:46:0b:a7:f1:27:aa:49:52:d1:76:
2b:c4:84:be:d9:ab:b5:f5:ca:6e:04:47:5f:d4:ee:
34:0f:78:09:72:b6:bf:98:c0:10:d2:57:a6:e6:ae:
4c:6e:cf:53:bc:59:af:81:ae:b3:ba:f0:f0:25:85:
23:ca:2b:80:9d:58:ec:19:3f:e3:8d:ca:98:06:53:
92:fd:08:ec:00:54:45:f4:b1:a4:3c:dc:47:2a:ed:
ef:3e:d3:fb:67:c2:c0:df:90:c2:86:9b:7c:2c:70:
59:50:4a:4f:9c:d0:62:fc:38:01:79:bd:3e:b5:98:
f4:6a:63:38:7a:7a:83:30:5d:ce:6b:19:05:0e:13:
68:7f:52:d8:ff:85:15:dd:b2:c0:5e:8d:84:6e:1b:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8D:44:04:F6:CC:C0:DC:17:D6:DD:2F:A2:92:A0:75:19:3F:EE:DC
X509v3 Authority Key Identifier:
keyid:C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:51:1b:dc:b1:ba:af:e1:24:e0:7b:a1:1f:01:78:23:89:a9:
b1:72:6e:7c:e0:da:8c:4f:35:56:fb:65:93:36:4e:5e:5f:be:
ea:18:a6:5e:56:a3:32:99:e4:a6:55:3d:b3:f9:d7:67:ed:76:
46:c1:56:79:86:32:38:db:47:1b:e1:74:a5:0e:00:bf:d6:37:
b5:40:44:a5:0f:48:75:25:f4:0e:3c:91:dd:db:65:a4:ca:aa:
a8:3e:65:60:72:81:94:20:ad:37:f7:1a:a7:58:12:fc:29:8d:
9b:a7:ac:f3:49:29:f3:a6:43:d5:51:a6:5a:4f:6b:08:81:92:
da:ec:21:32:bf:f7:ad:25:b1:f1:fb:97:eb:2a:9f:a3:93:17:
93:5b:8c:28:32:72:20:0a:a9:bc:1d:c8:0f:c8:81:a1:10:18:
ba:10:d6:31:53:ea:ef:69:9c:0b:af:0e:20:fc:3d:41:cd:11:
80:a7:99:9e:1b:70:e2:3f:e0:fb:d1:fa:d0:86:b7:51:f4:1c:
71:fd:22:c0:eb:82:af:7b:c2:41:c8:4e:ad:59:cf:b7:fb:1b:
83:f6:59:9b:c5:39:39:cb:04:bf:6d:9d:99:7a:25:fb:49:46:
d7:cc:d0:63:05:dd:07:ca:7c:e3:3f:77:8b:8c:9c:7f:79:db:
b0:5c:b3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:38 2026 by rpki-client