Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
File: xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json)
Hash identifier: CyK/XstRZ5w0g987XbeQ942oyGK9IuNI3jyGIXL2mYw=
Subject key identifier: 95:BE:9E:82:6D:C7:68:04:92:98:27:F4:B4:A5:49:40:E1:C2:11:39
Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Certificate issuer: /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Certificate serial: 019D98F4D3DEF200D90CDBD4EB3E0B979E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
Manifest number: 18BB
Signing time: Fri 17 Apr 2026 01:01:14 +0000
Manifest this update: Fri 17 Apr 2026 01:01:14 +0000
Manifest next update: Sat 18 Apr 2026 01:01:14 +0000
Files and hashes: 1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: YKkrBR/YoR1gf46j9kIlm5qkysRY48vj+JZWfi8/dVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d3:de:f2:00:d9:0c:db:d4:eb:3e:0b:97:9e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Validity
Not Before: Apr 17 01:01:14 2026 GMT
Not After : Apr 18 01:01:14 2026 GMT
Subject: CN=95be9e826dc76804929827f4b4a54940e1c21139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:bb:03:1b:cf:c2:4e:17:8e:0f:20:90:ee:
2f:b2:a4:0a:dd:54:53:0a:12:2d:dd:2c:7f:e2:c0:
ab:bd:cd:13:d2:bc:6a:68:dd:4c:1c:77:66:83:cf:
3a:28:c9:c0:62:a4:3e:7e:ee:1d:f0:68:12:27:f4:
57:7b:e1:2f:fe:27:9b:db:8c:9f:5f:19:02:d3:30:
60:e9:73:a1:81:9a:43:a7:1a:5e:57:91:2b:86:9a:
50:14:09:07:db:2b:a2:06:d2:d0:69:58:fb:32:c8:
3f:dc:02:1b:a6:ec:bd:d9:3a:bf:0b:6c:d6:b7:a9:
f4:43:f0:21:9e:07:bc:ba:51:50:ec:10:5a:59:72:
b6:61:73:05:13:79:9a:8e:fe:b6:7e:48:86:fc:86:
16:79:b4:49:e7:0c:7a:e8:70:c3:4c:7a:64:d7:e6:
d7:f9:21:2e:e9:9e:f2:24:f4:32:25:a4:bf:53:ae:
2f:e0:1c:5f:54:d5:58:40:ea:8a:b1:29:e8:8b:f0:
68:99:35:c6:a0:7e:61:7e:6f:08:65:64:fd:a2:da:
83:f9:a9:fb:62:78:c6:e9:bd:cb:0c:3c:ff:17:4e:
41:d2:80:b9:72:4c:87:37:bf:2e:15:29:9a:e9:9b:
14:e6:3f:8d:05:da:3b:98:3b:43:0d:bf:18:b2:00:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BE:9E:82:6D:C7:68:04:92:98:27:F4:B4:A5:49:40:E1:C2:11:39
X509v3 Authority Key Identifier:
keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:54:55:6b:db:18:18:c3:b6:60:e3:a6:cb:6c:00:05:10:4a:
36:50:45:de:7a:4f:22:2e:e1:59:b5:b7:76:e8:01:dc:92:e4:
7a:32:c5:f0:70:59:fa:e7:98:c8:8a:e4:20:1e:f0:17:00:0d:
dc:f8:d3:b7:bb:89:23:c8:f7:b5:e7:dc:d8:06:c5:a0:2f:31:
37:3b:d3:8c:bf:80:ca:50:6b:d8:d0:f1:db:f5:cb:b8:0e:95:
7a:e4:05:16:29:69:dd:05:02:66:e6:f9:6b:c1:10:c9:3f:cf:
69:ea:c3:cd:b8:1a:95:bf:79:08:e1:48:71:b5:e3:55:a0:8f:
70:34:7d:28:2c:93:70:d4:0d:a4:95:e1:c1:ee:21:a9:58:ad:
57:2c:9f:fd:86:3c:7a:8c:d3:91:4c:f9:72:5c:1b:19:fa:30:
b1:90:bb:fb:6b:ac:ab:3c:24:45:b0:5e:f5:b9:e3:0a:c8:0d:
19:d2:ef:dc:1a:47:71:60:4e:25:07:23:31:61:d4:a5:9c:f0:
19:58:9b:53:0f:78:f5:31:50:1d:c9:0e:6b:0e:1f:53:9f:0a:
cb:9a:dd:f4:69:90:d0:f3:f5:f7:ff:86:d6:85:07:64:34:f4:
bd:21:a4:60:a9:98:16:df:70:c1:41:43:a4:e8:19:2b:46:9d:
8e:06:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:17 2026 by rpki-client