Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
File: xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft (raw, json)
Hash identifier: knkChkD4IT8RCFa6PhXhCirQGLOKxawJV2ASSh81VeM=
Subject key identifier: B4:E2:9F:CE:BD:96:C1:06:91:5F:6F:8B:10:AA:E5:FE:4D:A8:18:4C
Authority key identifier: C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F
Certificate issuer: /CN=c596785476efbae77f961d23057057fa036fb27f
Certificate serial: 019CAE356FB305AAA505DC1529C8B33995D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
Manifest number: 16F3
Signing time: Mon 02 Mar 2026 11:01:03 +0000
Manifest this update: Mon 02 Mar 2026 11:01:03 +0000
Manifest next update: Tue 03 Mar 2026 11:01:03 +0000
Files and hashes: 1: xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl (hash: Tmc7rjUSznB0hFtBpggAQH3Vo0QCkhnEYtY2vrxgcss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:6f:b3:05:aa:a5:05:dc:15:29:c8:b3:39:95:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c596785476efbae77f961d23057057fa036fb27f
Validity
Not Before: Mar 2 11:01:03 2026 GMT
Not After : Mar 3 11:01:03 2026 GMT
Subject: CN=b4e29fcebd96c106915f6f8b10aae5fe4da8184c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:08:6b:d0:60:b5:95:c7:c6:5e:00:f2:cd:
c7:3a:44:bc:b2:bd:1f:92:27:c8:a0:60:5b:0b:25:
6d:3d:90:68:b0:06:8e:7f:36:6b:cc:90:f0:6d:df:
bf:21:46:65:c0:63:11:81:23:f9:57:31:13:c3:bf:
16:9f:75:74:03:37:c5:f1:cb:59:f5:e5:57:3f:5f:
99:1f:6e:1a:71:e0:d5:96:cb:8d:6e:4d:0d:91:df:
af:fd:da:7d:7f:e8:55:56:40:ce:02:0e:a2:36:17:
6c:94:d4:ae:f8:cc:aa:4d:64:0f:67:a9:69:86:2e:
42:4f:56:e0:b9:9d:5d:0c:db:5b:e4:75:b6:5d:31:
ab:b5:63:3d:5e:f3:1c:d3:c8:e2:1c:7f:f0:85:f2:
f7:78:9d:88:5c:4f:3a:a2:98:12:23:3c:57:59:5e:
a4:c7:14:c1:72:de:ca:30:aa:cc:d3:f8:79:6b:98:
1d:56:c9:17:24:33:b9:02:a2:ed:9c:3b:0b:fe:35:
db:54:51:18:02:38:66:90:9b:fd:85:7e:43:66:c5:
25:41:57:23:ae:14:b5:9d:86:4f:38:a5:16:13:fe:
78:1d:0a:b1:32:26:bf:52:f3:6f:2b:e3:84:52:bc:
5b:3c:cf:e0:30:ad:00:4c:ee:8f:3b:83:f5:c8:8a:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E2:9F:CE:BD:96:C1:06:91:5F:6F:8B:10:AA:E5:FE:4D:A8:18:4C
X509v3 Authority Key Identifier:
keyid:C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d6:d0:93:e8:df:6f:ca:03:37:86:15:92:d4:90:e7:9a:df:
9f:a2:96:89:8a:3b:56:48:7d:42:5e:dc:66:f4:f7:56:9b:eb:
3b:22:d3:21:12:fb:49:95:a1:a3:e5:ea:3d:ba:ea:13:70:a1:
29:46:9d:ec:d9:c6:3f:74:8e:8c:b2:bc:20:d7:2c:8e:cb:75:
7b:e3:3d:db:b9:52:c2:c9:cf:62:ab:d9:0e:69:17:62:95:ba:
a8:bd:25:51:c7:9a:69:79:18:e8:9e:63:73:7f:d3:9e:e9:cd:
ad:2f:ba:ed:97:cd:e2:7d:d7:68:e9:7d:b4:40:cf:e8:d9:32:
95:92:6c:dc:3a:11:65:79:2f:5c:0a:ad:16:1b:13:ce:94:60:
f4:ea:fa:74:b5:bc:cf:c7:1a:6d:e7:af:b5:55:54:93:88:65:
f8:16:fe:c7:b2:94:4a:53:7e:92:66:c8:d6:3c:94:d0:20:9c:
a0:5f:af:be:1a:c1:18:c7:42:06:2e:1a:cd:d8:ad:71:d1:0f:
d8:81:87:23:b0:36:c1:d8:4d:9d:98:9e:4e:ff:32:46:10:13:
f2:fd:b2:af:8b:d7:7c:7b:a4:5d:11:49:07:bf:d7:d0:8f:65:
35:78:81:22:ef:e4:d8:c3:42:f4:d6:c1:d2:94:13:77:75:b8:
6f:a6:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:20 2026 by rpki-client