Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: MurTm6myz/79VQZtYJjOagnFVhDJNQ4VStsoWGQBSfg=
Subject key identifier: A8:B1:1D:BE:FC:2B:53:FC:CE:8B:E2:92:03:96:B3:85:45:73:81:29
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 019CABD92B98C913B5CDBF5F2FBD42B8D2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 130B
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: vbtKlsv42trG7GYGcYjg0TmqvAG44h+cjoGbv7wqQEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2b:98:c9:13:b5:cd:bf:5f:2f:bd:42:b8:d2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=a8b11dbefc2b53fcce8be2920396b38545738129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:bb:8a:cc:46:a8:59:50:97:8d:68:56:39:
c4:1b:9a:fe:24:29:8d:8d:60:3a:7b:a1:be:9b:3f:
c8:61:19:67:f2:9d:e8:9d:27:dd:a8:5a:a7:79:03:
b3:33:44:b7:9b:e5:fd:61:85:8e:1f:c1:89:8b:d5:
ca:b4:38:f8:ab:be:d0:90:13:b7:f4:b9:b3:ab:a7:
1c:82:82:ee:ad:8e:88:68:4c:76:84:22:41:51:59:
a8:0b:dd:5a:1a:1e:bb:81:55:2d:00:04:f2:e6:65:
6a:50:48:c9:3a:27:fe:68:eb:a6:48:5b:67:a9:93:
42:46:bf:80:81:fa:1e:ed:dd:1c:cc:3b:90:b8:63:
53:d0:de:48:e4:34:02:bb:28:7c:62:7d:9c:04:32:
29:bf:2c:ba:42:eb:d7:79:1e:60:cb:77:04:bc:58:
c0:71:4b:31:d3:77:f8:7e:56:9d:c3:e8:e6:7d:d2:
d8:8e:c0:a0:22:58:99:d8:ef:23:7f:a1:bb:66:2c:
c1:6b:83:eb:21:b1:f1:53:98:bc:95:28:25:06:26:
71:99:b8:54:67:eb:2e:1b:a8:55:a6:17:79:33:cc:
d1:6f:9f:65:3c:54:e3:d8:7b:5f:4e:db:62:1b:7e:
42:de:7d:4e:7e:5b:87:b8:d1:4a:82:f5:c8:cb:68:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B1:1D:BE:FC:2B:53:FC:CE:8B:E2:92:03:96:B3:85:45:73:81:29
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1b:5d:9e:34:23:cc:a0:c6:1e:fa:f4:b0:a4:43:d9:2f:f2:
f2:27:1c:3f:35:04:8b:93:11:44:8c:3e:5c:0e:5a:f0:57:82:
3b:ae:22:dc:b4:f6:7d:d5:5e:ed:e3:83:7b:78:79:3a:32:42:
32:3f:7f:43:8d:72:23:3e:48:9b:11:1d:46:8c:99:e1:33:b7:
b6:93:2e:fd:78:cc:c5:a6:ee:c9:8a:1a:f9:2b:13:aa:34:6a:
87:12:72:72:c2:11:ad:88:b2:b4:5e:50:4b:72:94:e8:cc:64:
2c:77:19:56:7e:98:f4:52:d1:9d:6a:c1:2d:c5:56:82:47:45:
07:ee:90:24:52:04:95:84:94:df:55:60:b8:dc:97:35:b9:b5:
43:3c:95:c3:31:24:22:72:38:db:ab:8b:44:2c:8f:35:87:fb:
14:27:f0:ab:40:1f:79:b3:03:1d:27:12:00:dc:d3:d7:59:40:
48:9c:f8:e6:e8:ef:5b:7b:9b:2c:9d:90:d6:36:d1:b3:15:66:
52:8d:19:8b:a9:d9:da:c1:00:8e:0f:32:79:82:c7:a6:07:88:
2c:99:8a:59:c7:08:00:45:79:1f:23:45:74:1c:c8:05:65:7c:
3b:fc:c9:31:0c:94:7a:79:a7:db:e9:09:11:81:de:49:02:7b:
eb:8f:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:47 2026 by rpki-client