Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
File: m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft (raw, json)
Hash identifier: sZgdgkzQ8tG0ZjwPAcoqeI0JdPxjRjMqSO1iiknBX70=
Subject key identifier: C3:B6:63:0A:C3:A1:44:CF:15:77:67:7F:1A:C4:18:8B:EB:C4:AB:63
Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5
Certificate issuer: /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
Certificate serial: 019CABD9B13CFC09C4618EF9444C48D50180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
Manifest number: 1399
Signing time: Mon 02 Mar 2026 00:01:36 +0000
Manifest this update: Mon 02 Mar 2026 00:01:36 +0000
Manifest next update: Tue 03 Mar 2026 00:01:36 +0000
Files and hashes: 1: m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl (hash: DbIPAtfgt9x6zzHL8nJBF3vyytkYrZymgwWu2zdo1Lo=)
2: wSRzYr55-4ZeS-gPCPrQ29jB9iw.roa (hash: NbvG7X6vkEtFD9/ZukAk8NJl9uOur/Cl3YOKKjQ2YLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b1:3c:fc:09:c4:61:8e:f9:44:4c:48:d5:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
Validity
Not Before: Mar 2 00:01:36 2026 GMT
Not After : Mar 3 00:01:36 2026 GMT
Subject: CN=c3b6630ac3a144cf1577677f1ac4188bebc4ab63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:32:b2:2c:4b:f9:59:4f:d3:08:22:cc:d4:
ec:9e:f5:55:72:93:4a:c7:86:67:3d:d7:b9:a5:59:
68:0c:f9:88:07:77:3e:da:fb:ea:79:2e:9c:14:52:
26:ee:dc:10:6e:03:6e:5e:97:f1:03:74:41:ca:bc:
22:ed:d2:9e:f8:36:64:89:83:75:5d:87:6b:91:20:
0d:23:27:61:8a:76:08:23:dc:f4:32:f0:e0:a7:9f:
b7:80:f1:ec:92:1b:50:8c:a0:ee:d7:df:2a:2f:e4:
2b:14:c1:6d:ca:31:8e:41:00:b8:bd:00:4b:ec:05:
68:f9:3e:1e:cc:b2:33:04:c4:ea:70:24:cf:d3:c4:
7f:4e:2b:18:02:6e:56:a5:6e:7c:05:1c:dd:1e:b6:
91:03:0c:9a:b9:61:3b:67:95:70:57:bf:64:f0:0a:
fd:a9:6a:f9:4a:55:96:e6:c3:9e:45:b5:16:17:3e:
8d:bc:e6:ce:49:41:8e:ff:b5:ea:c5:65:0d:7e:8c:
0e:3b:be:07:24:f6:c1:8f:8e:ea:07:07:cf:fa:3a:
bf:2d:3b:06:00:99:ac:cf:08:c4:a1:27:7c:9e:91:
3c:ef:97:c7:ed:58:26:b2:7a:2f:f7:9f:0b:98:80:
85:83:b8:a5:9c:36:d6:25:d4:62:b0:5b:4c:f2:9c:
e2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B6:63:0A:C3:A1:44:CF:15:77:67:7F:1A:C4:18:8B:EB:C4:AB:63
X509v3 Authority Key Identifier:
keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1b:af:da:4e:2a:ee:53:d2:53:b9:6e:2b:6d:ca:64:af:ab:
19:0b:8a:42:d4:eb:8a:73:7d:64:70:b7:28:22:c7:0c:09:c9:
f3:24:0b:d5:1b:51:b1:61:27:68:79:04:09:7f:26:d8:07:2f:
d0:74:af:f0:32:64:33:51:99:54:47:f1:d3:b1:7c:d6:fc:ca:
29:44:fb:3d:35:c9:42:e8:12:a7:10:b7:7c:f1:67:3a:39:45:
04:bd:02:91:3f:89:21:10:98:4f:e5:b2:d1:27:2c:9a:93:1d:
cf:3a:ff:39:fa:94:38:e9:29:34:67:ee:de:f7:5d:e2:55:40:
85:06:2e:3f:e4:b3:98:f7:16:61:a9:2a:4d:b8:7f:f0:59:58:
bd:1e:fe:74:b9:ac:bf:9f:a8:f8:09:e5:51:eb:03:85:3a:c2:
09:af:7f:e7:e6:8d:56:0d:26:ae:b1:56:2c:05:8c:2b:67:c3:
fb:ef:06:a3:57:3a:9e:54:b3:9a:e4:8a:38:38:8d:d4:b6:d3:
ca:40:f6:15:2b:5c:2b:34:43:84:75:49:57:67:b7:ef:cc:02:
c8:97:d8:bd:c3:65:81:a7:eb:6f:e3:a4:3b:1d:bf:d7:76:f1:
04:df:4e:71:f7:b9:d2:7a:64:14:67:b0:90:6d:5d:b8:a0:84:
80:17:17:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:39 2026 by rpki-client