Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
File: dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft (raw, json)
Hash identifier: 7P9mXViMi2Wgb/kdwc7suWx9YqnsmNlswfIow9gNjMU=
Subject key identifier: 83:83:86:4E:46:83:F4:61:66:37:1E:9C:C8:78:49:FA:C6:79:F8:76
Authority key identifier: 75:72:C9:A1:08:CE:3D:E5:2D:16:E2:11:E8:0C:95:E5:C5:B5:4C:84
Certificate issuer: /CN=7572c9a108ce3de52d16e211e80c95e5c5b54c84
Certificate serial: 019CAB6BD5B6707A96EC1ECBDA11F87246A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
Manifest number: 12FB
Signing time: Sun 01 Mar 2026 22:01:36 +0000
Manifest this update: Sun 01 Mar 2026 22:01:36 +0000
Manifest next update: Mon 02 Mar 2026 22:01:36 +0000
Files and hashes: 1: dXLJoQjOPeUtFuIR6AyV5cW1TIQ.crl (hash: AjQlB5zAmAVfNOkcwOkPemuQIvZ7Eahbg4DU9y4REW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d5:b6:70:7a:96:ec:1e:cb:da:11:f8:72:46:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7572c9a108ce3de52d16e211e80c95e5c5b54c84
Validity
Not Before: Mar 1 22:01:36 2026 GMT
Not After : Mar 2 22:01:36 2026 GMT
Subject: CN=8383864e4683f46166371e9cc87849fac679f876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:2d:b0:5a:98:91:4c:0f:87:2b:1b:64:ae:
67:92:e9:80:50:b3:ae:dc:c7:7d:8f:9f:ff:5a:42:
5c:08:31:84:c6:78:ca:da:12:ec:85:59:e1:61:a3:
43:60:d0:28:9f:a6:a1:d0:4d:04:cf:f3:71:03:26:
fc:1c:6d:a3:f6:ed:86:df:ed:f2:7f:23:58:c4:0a:
be:27:76:95:b3:b4:89:54:ac:3b:e8:d3:02:02:e0:
4c:ef:89:60:be:69:04:d4:47:1f:22:0c:d4:65:3d:
43:03:6f:c4:23:96:0a:4d:47:98:50:c4:4b:9e:c1:
08:87:0a:a3:27:1f:fe:73:4b:1b:49:59:c4:dd:a4:
a8:d2:cb:93:b6:93:85:96:bd:81:c4:a8:9d:34:fa:
ae:ab:92:f6:27:14:35:e7:23:ab:c4:b7:bd:1c:78:
03:74:17:c3:f7:52:95:24:9e:61:aa:6b:c4:30:1e:
62:e2:e1:f1:13:54:48:f2:af:a5:41:4d:92:08:32:
a4:15:5c:31:dd:20:1e:5a:49:e4:dd:a2:7c:47:3e:
4f:66:7f:8f:f2:01:ea:dd:fd:af:91:20:4e:5c:cf:
06:89:3c:e6:a3:01:49:91:5d:93:16:fd:a1:84:4a:
80:db:98:46:01:61:69:64:f4:a3:5d:17:ed:68:f1:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:83:86:4E:46:83:F4:61:66:37:1E:9C:C8:78:49:FA:C6:79:F8:76
X509v3 Authority Key Identifier:
keyid:75:72:C9:A1:08:CE:3D:E5:2D:16:E2:11:E8:0C:95:E5:C5:B5:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:09:fb:d0:ab:c4:72:66:f2:10:1d:ab:92:0e:1f:ae:47:c8:
4c:56:35:b6:58:ae:7c:f6:7e:18:89:d3:c3:2b:af:0b:cb:2b:
9b:af:d8:21:33:43:48:10:f7:8b:2d:c2:16:61:a7:7e:03:8b:
9f:17:00:8f:af:bf:e5:90:7e:5f:c4:54:54:51:da:d2:45:29:
b2:67:81:1d:25:5c:76:f6:7d:75:49:6a:d4:2d:86:49:e0:9a:
80:4f:f7:76:bd:8e:30:23:72:4c:cf:18:c1:dc:b3:6c:0b:d1:
b8:fe:b7:1d:f8:08:fb:d4:9d:80:01:8a:1a:96:ae:26:be:a3:
46:8b:cc:ab:9c:c4:c9:44:f8:ea:d3:27:a0:44:82:85:03:35:
d3:da:ff:d8:c5:9d:ee:4f:3c:49:23:06:e3:0c:08:5d:06:ea:
ad:25:ae:c9:49:33:77:5d:d9:5f:be:33:2b:10:51:0e:1b:8e:
a0:45:af:63:ac:6e:0e:4d:9b:cc:49:7c:79:ba:ee:20:5e:8f:
14:3c:a8:a4:de:17:cb:d1:cd:e1:9c:32:ef:e4:39:63:ee:ae:
98:e3:0a:ed:cd:17:5a:18:21:df:25:3e:48:75:6a:8e:8f:d2:
93:1d:9f:15:26:f4:a8:04:ac:54:0b:34:1f:8e:ac:bf:a8:e7:
90:d6:e8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:39 2026 by rpki-client