Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json)
Hash identifier: DT6lpM87hAY+kEs+LFfsIycBp2KddYx3y7uKQJSEY14=
Subject key identifier: 84:F9:C4:C4:A7:1E:62:A6:88:EB:87:EF:A4:79:A1:7A:17:EB:6E:8F
Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424
Certificate serial: 019CAB3439B032BD7A7BB98928D000D3601B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
Manifest number: 0C96
Signing time: Sun 01 Mar 2026 21:00:52 +0000
Manifest this update: Sun 01 Mar 2026 21:00:52 +0000
Manifest next update: Mon 02 Mar 2026 21:00:52 +0000
Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: mMdl215fJzlPRy90rBgA7xYeyzRAV0bxboXAJx2Z7oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:39:b0:32:bd:7a:7b:b9:89:28:d0:00:d3:60:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424
Validity
Not Before: Mar 1 21:00:52 2026 GMT
Not After : Mar 2 21:00:52 2026 GMT
Subject: CN=84f9c4c4a71e62a688eb87efa479a17a17eb6e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:f2:03:2e:a3:3e:69:9c:16:b6:24:c5:b2:
6a:ea:89:9f:fb:bd:d8:08:88:fa:b0:00:5b:f4:15:
8c:df:93:69:c7:ce:69:3c:3c:f2:a8:13:8b:eb:ba:
57:03:86:01:25:a2:db:b4:13:98:2e:42:1e:2f:c3:
f0:a6:6d:27:e5:84:99:a3:72:89:12:c4:15:0d:a7:
1d:2d:fe:57:e9:b3:d0:44:e2:35:02:70:d2:b4:c4:
31:fd:1b:d1:d6:be:57:23:81:73:cb:6b:1d:4f:45:
8c:e5:41:8e:b6:ee:20:14:3f:b2:21:1f:69:70:31:
10:02:58:c6:63:83:b4:e4:0a:2e:43:d5:d4:6f:c1:
bf:70:e6:2c:51:4a:0c:0a:1b:71:e1:b7:e9:70:eb:
2b:2a:75:b2:9f:38:3c:98:c6:36:62:1d:3e:27:b6:
24:67:5c:9c:f0:84:78:f5:88:6b:cd:f5:bb:04:71:
09:53:eb:ed:01:82:06:a9:5e:0e:60:e6:27:c8:9c:
18:56:e3:a4:86:da:60:54:3e:77:c1:a5:2e:49:a1:
bf:61:37:2e:66:41:8d:ea:36:dd:b0:60:8b:08:24:
12:8f:df:2f:df:8a:03:9e:74:ef:d0:0a:8b:f1:5a:
7f:fd:32:27:2b:3e:9b:74:20:fb:56:65:75:2a:0f:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F9:C4:C4:A7:1E:62:A6:88:EB:87:EF:A4:79:A1:7A:17:EB:6E:8F
X509v3 Authority Key Identifier:
keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d9:5b:f2:23:4b:15:3c:ae:e1:ac:53:6f:b2:a2:3e:d0:86:
f2:b0:f2:fd:75:fe:b8:56:fd:63:a0:03:b6:5b:79:95:31:a4:
96:21:35:f8:c4:78:28:62:8c:27:e6:3f:d5:4e:ba:a8:a2:e5:
56:41:b5:76:e9:9e:fe:26:1f:4e:c2:f8:88:58:ea:ca:0d:7d:
e9:07:19:fb:e2:7e:88:78:23:ed:7a:c5:cb:40:9e:c1:55:3d:
c8:d5:db:da:62:75:53:0b:8e:35:1e:68:79:8b:c7:2d:52:4c:
5c:d0:e2:ce:e9:ce:8c:5a:33:0d:fc:56:5b:8c:f0:f7:71:ed:
9c:01:b6:bb:30:f3:d6:83:1e:de:93:af:62:4c:87:f7:13:09:
b3:fc:a8:e3:f8:da:c6:7f:91:a1:5b:bd:44:10:55:49:39:66:
7c:fb:e5:a5:15:39:16:ca:c1:d9:de:e2:85:57:88:52:03:55:
88:01:c7:40:97:ba:c0:05:0c:22:3b:9c:a1:8f:f8:7b:02:a5:
2b:c9:9b:8e:2e:32:48:a1:76:1e:20:dd:c6:6f:79:8d:19:0c:
08:0b:e8:19:18:b1:6e:15:d5:e9:57:f3:5f:3c:ce:0a:39:55:
1e:a1:8a:44:a0:cf:86:80:ef:58:e5:8c:94:5c:38:91:a0:5e:
87:ed:4d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:27 2026 by rpki-client