Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json)
Hash identifier: znYQHYy2S9FPrQpkMVq5V46Da0gsbcqzwCzgQn28P90=
Subject key identifier: 40:EE:2E:42:3A:4D:FC:04:CD:DA:65:40:19:DC:3E:A8:E9:E3:27:91
Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8
Certificate serial: 019CAD5A3EEF7B0C3D3EAFD4F05B30366A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
Manifest number: 1818
Signing time: Mon 02 Mar 2026 07:01:38 +0000
Manifest this update: Mon 02 Mar 2026 07:01:38 +0000
Manifest next update: Tue 03 Mar 2026 07:01:38 +0000
Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: RjU1Pj3yo63w6GATLbFZa31fxgawL91E9Ces8kUE9v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:3e:ef:7b:0c:3d:3e:af:d4:f0:5b:30:36:6a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8
Validity
Not Before: Mar 2 07:01:38 2026 GMT
Not After : Mar 3 07:01:38 2026 GMT
Subject: CN=40ee2e423a4dfc04cdda654019dc3ea8e9e32791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:36:a3:0d:77:a7:23:01:c9:9c:c7:db:47:
3f:06:8b:c7:0a:cc:d3:41:53:28:4f:9b:5f:9e:84:
2e:6f:5f:cd:04:ae:cf:6d:f9:48:7f:0d:86:cc:d2:
fd:7a:55:5e:20:b5:86:1a:ff:9f:99:50:1a:2a:de:
78:f0:5b:5b:34:89:7c:77:86:ea:9f:94:9e:a0:25:
33:37:78:ea:6a:a8:7d:c8:d7:c3:e0:8e:6f:22:9f:
8b:19:c5:52:07:5e:9f:bf:6a:5b:aa:5e:3a:0a:b0:
19:33:c5:2a:ec:a8:b8:67:b0:20:d9:35:57:cd:5e:
a3:97:f3:00:76:7a:af:eb:ce:cb:03:4d:d2:00:20:
ec:c6:58:e0:36:39:1c:c3:28:f1:e1:cf:db:ee:84:
d3:03:2d:3d:85:46:b6:4d:17:c3:83:8b:81:93:41:
81:46:db:cd:b9:65:19:0d:68:e6:6c:79:3d:99:6b:
14:a8:2c:c6:5b:1a:4c:ef:d3:68:e5:e6:f9:45:9f:
bf:fe:86:81:6d:8f:e8:fb:dd:c8:df:03:1e:e5:41:
fa:fd:92:32:a6:c1:12:ef:52:96:68:30:3d:53:6f:
22:fb:67:2d:f9:be:6b:72:4b:25:9d:26:c4:c5:0f:
85:fa:5d:b3:2f:a7:02:78:49:db:73:6a:a0:97:51:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EE:2E:42:3A:4D:FC:04:CD:DA:65:40:19:DC:3E:A8:E9:E3:27:91
X509v3 Authority Key Identifier:
keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:58:2e:3d:ef:91:6d:5e:c1:88:67:c7:ec:ea:25:d6:22:52:
85:8b:8f:bd:2f:46:5e:07:07:3d:23:ca:11:83:81:10:35:fb:
ef:b2:3d:5b:2d:35:49:41:32:3f:7f:eb:4c:b8:48:75:c0:5d:
c8:dd:9a:16:e2:a3:82:4a:ad:6f:10:1e:32:16:32:fd:da:e9:
9f:19:5f:28:db:3f:aa:5a:80:0d:8e:eb:a5:31:4d:2b:18:47:
3e:ff:fc:51:66:c6:7e:d6:87:b5:1e:d3:5b:0b:ad:c6:c2:c1:
63:d3:3a:4f:9c:bf:72:61:95:24:7d:59:6c:6f:eb:ff:52:ba:
7b:c5:0b:9c:77:66:6a:bf:37:48:fc:c7:bf:bd:33:2a:1b:ba:
3e:ad:d6:2b:ca:bf:41:e2:a3:c1:41:ef:9c:ce:13:0a:ef:93:
7c:ac:56:bf:c8:b2:c0:8d:c3:ae:c6:2a:e1:1a:d4:ec:49:3d:
f2:9d:ff:06:a9:55:a5:8b:2d:1f:42:5a:91:8c:22:73:13:ec:
24:14:78:bf:21:c5:22:60:bb:51:c4:67:6e:60:e4:1c:8d:5c:
d6:42:df:bc:cc:d7:d3:fb:29:3b:e8:87:32:b1:da:0a:2c:83:
25:0a:a4:9e:19:bd:1e:ec:e3:fa:0e:21:83:8f:5b:b4:4f:9e:
e1:9a:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:50 2026 by rpki-client