Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: kbiYDpqkeyGhicEyyYcdEuGPkink1IbuJFTrxAutoZI=
Subject key identifier: 5A:28:1C:B3:57:75:27:A0:37:CF:7F:18:A6:F9:FA:62:49:D7:AE:4C
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 019D9B50B4883F2D084526A98FDF73865319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 064C
Signing time: Fri 17 Apr 2026 12:00:50 +0000
Manifest this update: Fri 17 Apr 2026 12:00:50 +0000
Manifest next update: Sat 18 Apr 2026 12:00:50 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: aKiXyZPPdhJAk7yZQk6P+I1hDE9ABKtCEx/1jPzTkGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:b4:88:3f:2d:08:45:26:a9:8f:df:73:86:53:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: Apr 17 12:00:50 2026 GMT
Not After : Apr 18 12:00:50 2026 GMT
Subject: CN=5a281cb3577527a037cf7f18a6f9fa6249d7ae4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:da:be:21:44:f0:76:2a:2b:7a:28:66:f0:d9:
2d:39:37:ea:e7:16:a3:88:8d:09:b6:e3:95:0e:b9:
c2:76:2f:71:d4:10:42:00:fc:b4:72:65:99:82:3f:
2c:c3:cd:c8:3c:69:bd:15:d9:e8:f4:73:fe:3a:6b:
14:90:2c:3d:82:f2:f8:17:2e:84:75:89:d7:b5:10:
12:5b:d9:37:4f:2b:97:c7:8d:79:ec:66:88:22:b7:
1f:13:1d:26:3c:27:c5:e2:d9:33:71:02:d6:5f:9b:
e1:e8:66:36:65:d9:4e:ba:e1:5f:a1:32:9a:b3:a1:
12:70:74:25:6d:d2:09:be:9d:f1:a8:8d:7e:93:f2:
73:e9:f6:bd:d2:ad:97:d4:1f:87:33:f1:26:e4:33:
2a:85:c2:fd:eb:89:38:03:4f:48:a0:a1:3b:03:b5:
0c:76:cc:79:65:3d:ff:48:f7:2b:9d:d1:a0:6d:a4:
b0:c6:20:b9:a5:ac:6c:3f:83:80:a9:c0:20:7f:c8:
83:80:5d:d4:84:a1:dc:9c:49:5e:dd:7e:c3:db:93:
a8:fa:d0:59:8b:a4:aa:22:a7:fc:b7:d2:7b:4d:a1:
5f:1a:d1:a3:66:55:7f:d8:52:95:30:45:09:be:c5:
e7:a3:a5:3a:1c:cd:7c:8b:fe:86:96:3c:14:d6:9f:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:28:1C:B3:57:75:27:A0:37:CF:7F:18:A6:F9:FA:62:49:D7:AE:4C
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:98:70:b5:5e:ff:7c:9f:2e:41:5c:95:6f:7e:30:67:23:36:
62:6c:35:ae:d5:16:1e:36:5f:2b:ca:1e:f3:a3:4c:b8:6e:2d:
69:83:e2:da:f2:72:1e:fd:0b:26:06:27:ee:d2:b1:37:46:de:
e5:cc:9a:e0:99:6b:a1:7a:fb:0b:13:3e:63:4e:c9:cf:91:59:
0a:68:11:2f:47:48:61:5e:f2:b0:f0:ef:e6:98:f0:5b:ae:e7:
59:34:9c:63:01:ea:9b:0a:ad:8a:4d:9c:3a:fc:0a:d0:29:ca:
0f:d9:cb:ed:27:f2:bc:6f:29:fa:52:11:7e:f3:e5:52:72:8d:
55:71:f6:56:5d:b3:c3:fb:26:13:b7:9b:d1:d1:ab:1f:6b:86:
db:d8:9a:9c:dc:de:66:1c:63:11:f1:da:51:58:64:90:96:9c:
94:74:f5:23:e3:96:f3:0d:5b:00:42:69:1f:ab:06:aa:10:4b:
53:0e:d1:e5:3f:42:75:8a:5b:de:a1:4e:a9:7f:26:77:cc:3f:
06:1a:72:40:cc:a5:07:fb:2c:61:4d:68:4b:37:32:b6:9e:0b:
56:c3:23:87:5c:f0:a5:29:0b:43:a6:a5:8a:7e:22:f5:6f:5b:
8b:d5:52:74:18:94:ce:69:72:67:70:e8:59:e6:2f:fa:d5:b6:
e7:f7:a4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:39 2026 by rpki-client