Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
File: sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft (raw, json)
Hash identifier: VmN98vhto7Mg2GrpBWpm442sWJcxdHOYUiGoiFI7EHw=
Subject key identifier: 54:27:85:FF:EC:09:BD:AA:3C:2A:80:D4:0E:1E:A6:EE:6F:C4:AF:DA
Authority key identifier: B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
Certificate issuer: /CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Certificate serial: 019CAB6B2E6D63F65BD28EBB10ED8BB83122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
Manifest number: 059A
Signing time: Sun 01 Mar 2026 22:00:53 +0000
Manifest this update: Sun 01 Mar 2026 22:00:53 +0000
Manifest next update: Mon 02 Mar 2026 22:00:53 +0000
Files and hashes: 1: sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl (hash: wBW+H+Tdrz05aQW5Da0NmZfa+yhP8lM9a57OqrsA3ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:2e:6d:63:f6:5b:d2:8e:bb:10:ed:8b:b8:31:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Validity
Not Before: Mar 1 22:00:53 2026 GMT
Not After : Mar 2 22:00:53 2026 GMT
Subject: CN=542785ffec09bdaa3c2a80d40e1ea6ee6fc4afda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:d3:6a:c9:61:c7:de:9b:de:b1:67:da:df:
22:74:cf:cf:23:b0:d6:17:26:26:57:6d:a4:86:e0:
e5:58:44:c9:b6:ec:2d:3d:97:dd:21:bf:f7:5c:3e:
4b:ba:aa:98:67:42:61:9b:a9:11:77:e6:83:1b:75:
d5:a5:44:20:c8:94:7a:80:fe:5e:63:7b:6a:12:06:
85:8e:5e:a1:c1:0a:d8:4c:6e:97:d6:67:99:1e:e8:
5a:cb:da:b1:fe:83:92:9e:76:29:e2:b6:22:ca:07:
54:a6:51:77:bf:55:74:7a:bb:80:1d:a2:ac:80:71:
98:86:45:ab:37:76:d4:8d:86:51:eb:3e:4e:9b:14:
cb:bc:36:e8:dc:5c:73:f8:f0:1d:c3:e9:58:f1:12:
9b:d7:69:c5:ed:3c:18:04:02:f8:f8:f0:d5:72:98:
d5:30:c7:41:78:cb:60:b7:4a:6e:b4:99:c6:f3:b0:
dc:eb:44:6e:e6:d7:b4:ef:6d:19:1e:d8:17:1a:ce:
af:ab:71:d5:50:7f:f0:c7:75:94:2f:44:30:ad:b9:
d3:46:81:24:59:be:3e:fe:23:71:db:fb:76:c8:39:
e9:36:f8:f6:1e:83:8a:ff:fd:3e:70:4e:6f:e6:fa:
a9:39:2b:32:88:a4:fb:1b:e5:21:ff:66:46:cc:6c:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:85:FF:EC:09:BD:AA:3C:2A:80:D4:0E:1E:A6:EE:6F:C4:AF:DA
X509v3 Authority Key Identifier:
keyid:B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:28:3a:ab:61:57:98:97:fd:dd:19:92:5d:0c:9d:da:f6:00:
ac:31:08:7c:dd:5a:dd:af:28:a8:4e:9a:31:ce:c0:f4:a8:ad:
9f:5c:45:a5:67:d5:8c:d9:33:3d:7d:f1:5a:67:02:36:c1:4c:
54:cf:40:ae:7c:0d:52:00:89:3b:d5:72:c2:ff:ea:80:9f:5d:
21:6c:13:77:4b:d8:30:2b:8b:a9:7d:11:aa:3e:6f:7f:7d:e8:
62:bc:d1:bc:ce:92:ec:db:9b:82:19:bd:8f:b7:c8:4c:76:47:
b7:3e:9c:0d:13:05:1e:e1:3c:5a:79:b6:0e:a6:fa:62:83:59:
7b:15:a2:40:07:db:d0:83:41:17:24:8b:f5:82:0c:6e:fc:a6:
65:4d:a7:24:97:4f:18:27:c2:95:6e:bc:0e:bc:e0:b0:a5:d4:
f1:9d:2f:5c:dc:c4:87:67:04:41:88:a1:35:e3:ca:7b:14:c2:
75:93:41:61:73:fc:49:66:0b:4c:6d:99:7e:f8:a0:63:95:42:
57:cd:e5:69:07:01:e0:fc:2c:20:55:34:32:e7:f4:2c:82:9e:
21:c6:08:2e:a6:7d:ae:c6:06:fa:17:75:d1:10:12:1a:f3:99:
50:ab:85:37:38:f2:07:c6:64:08:35:f3:c8:82:8b:ba:0d:9b:
03:f1:0c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:05 2026 by rpki-client