Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
File: XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft (raw, json)
Hash identifier: +ttAjjcrGNjtHDRgyBxBYzUneKCdb9GV3Os48AbCRWQ=
Subject key identifier: 4B:CD:33:7B:C6:06:43:75:E4:24:B0:3E:14:4A:9F:0C:3E:0E:F7:68
Authority key identifier: 5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
Certificate issuer: /CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Certificate serial: 019CABD9F3AAF91326186489A81FC02DCC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 00:01:53 +0000
Manifest this update: Mon 02 Mar 2026 00:01:53 +0000
Manifest next update: Tue 03 Mar 2026 00:01:53 +0000
Files and hashes: 1: XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl (hash: FnolvTAX22BjPuUPz61KDvNA2kKBZA7YLcs2dOP44r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f3:aa:f9:13:26:18:64:89:a8:1f:c0:2d:cc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Validity
Not Before: Mar 2 00:01:53 2026 GMT
Not After : Mar 3 00:01:53 2026 GMT
Subject: CN=4bcd337bc6064375e424b03e144a9f0c3e0ef768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:e6:34:d3:57:4a:c8:ac:7d:47:3c:31:49:
35:89:35:78:7c:0e:0f:66:25:f0:a7:3d:bc:bc:e3:
b4:44:63:f4:43:4b:2a:79:93:eb:c1:57:22:c3:92:
94:ea:ed:13:0b:4a:dc:30:54:d4:f6:5e:94:47:2d:
48:be:18:c9:c4:1c:90:5b:c3:14:49:f5:86:b7:8c:
85:04:07:69:91:9e:6c:ae:25:ae:d4:2b:dc:13:d5:
73:ee:1d:1a:d0:94:fa:56:b3:64:e0:94:53:30:18:
b5:dc:a9:77:29:54:aa:cc:91:5d:12:81:80:08:b4:
40:b8:f6:39:8a:b3:81:1f:ab:f2:8d:2f:f8:b1:04:
ee:91:4a:5f:64:75:cf:8e:de:32:00:d5:ba:58:81:
44:b6:06:d7:2e:1f:e8:48:40:39:c0:67:2e:02:5b:
3c:16:bf:db:c2:3a:96:07:02:ef:4c:a0:3d:ea:bf:
82:76:ea:ab:d5:4d:cd:cf:64:d6:d7:14:b5:d0:74:
7d:ba:51:da:f1:48:63:9f:5c:cc:52:fe:28:5e:4b:
24:48:1d:42:55:9b:51:ba:cc:3c:d7:d5:9d:24:74:
18:10:2a:32:6a:28:22:16:6d:99:b6:47:97:c8:54:
f5:ef:24:51:27:3c:67:66:59:88:5d:86:86:d5:69:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CD:33:7B:C6:06:43:75:E4:24:B0:3E:14:4A:9F:0C:3E:0E:F7:68
X509v3 Authority Key Identifier:
keyid:5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a9:66:81:1b:cb:07:ed:ea:e4:b9:41:c5:62:fa:ea:f3:e1:
81:c7:b8:16:a9:ec:d3:3d:90:4e:83:ce:18:31:b9:52:71:de:
15:05:99:da:14:0e:c2:00:67:20:c0:51:00:98:2e:f8:ce:fb:
53:8f:9e:73:fa:07:54:18:40:61:9e:15:5e:db:f1:54:68:cd:
be:b6:4c:15:2f:ee:95:62:40:c3:29:82:13:1d:a3:ff:f5:a7:
54:53:b0:1a:73:dc:d7:78:da:ff:ef:4f:4c:3a:34:87:e0:33:
0b:6f:bf:53:1a:61:c2:38:21:67:80:cf:76:12:71:0f:c7:20:
71:e5:26:33:de:3c:4e:bb:92:fa:90:57:57:61:8c:66:48:28:
22:c4:2a:13:e4:3a:61:5a:08:b8:69:0b:79:2b:98:4a:84:d1:
a8:8a:0c:27:a5:68:b7:60:6b:c5:94:ee:37:8f:10:ee:2a:1a:
c7:58:b4:b7:da:a6:35:34:49:dc:2d:cc:99:81:22:aa:a3:9b:
dd:90:11:09:dc:91:65:7a:08:68:a6:d7:7c:87:61:c5:22:7f:
47:c4:fc:b6:e0:83:8f:a9:aa:3d:d5:c2:f9:4e:2b:39:d5:23:
52:37:e0:02:20:8f:be:d0:02:4a:5b:9e:5e:d1:0d:a0:5c:3c:
59:1d:fa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:13 2026 by rpki-client