Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
File: xuqBSpkqcfWiqb7872b8YiDxePc.mft (raw, json)
Hash identifier: Mdb/cUJntadQ9sm8z2dIKdm5RzEWHjcbKNHu2LMblHk=
Subject key identifier: 2C:91:BB:D5:C9:D2:4C:35:89:BE:D1:E8:8C:53:73:D1:72:EF:DA:7A
Authority key identifier: C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
Certificate issuer: /CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Certificate serial: 019CABD9826AE3EBCBD6BEE47E65C2F9E0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
Manifest number: 142D
Signing time: Mon 02 Mar 2026 00:01:24 +0000
Manifest this update: Mon 02 Mar 2026 00:01:24 +0000
Manifest next update: Tue 03 Mar 2026 00:01:24 +0000
Files and hashes: 1: xuqBSpkqcfWiqb7872b8YiDxePc.crl (hash: Njcmrjm/P38jejygaa7uAYfVtPPSVyzR/7pDRJ+2a2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:82:6a:e3:eb:cb:d6:be:e4:7e:65:c2:f9:e0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Validity
Not Before: Mar 2 00:01:24 2026 GMT
Not After : Mar 3 00:01:24 2026 GMT
Subject: CN=2c91bbd5c9d24c3589bed1e88c5373d172efda7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:0b:15:76:a4:10:15:a9:f6:c3:eb:a8:56:
dc:ec:65:95:a8:c1:2f:66:d7:ae:47:7d:0a:98:a8:
e6:d6:71:4e:f0:76:61:af:7b:35:49:d3:d4:e0:c8:
3d:c3:6e:55:82:3e:82:59:38:78:0b:7c:93:27:55:
27:64:7e:61:72:2d:ef:2c:86:d9:d2:96:6f:d5:89:
a3:f4:52:c8:2a:9d:ce:27:39:5e:7b:99:ed:ad:46:
de:7f:d6:7e:34:89:58:0d:3e:10:1c:4b:55:a5:33:
df:2c:8c:69:62:5d:c6:de:c5:87:bc:9c:29:a8:b2:
b3:aa:5a:22:1a:74:71:e3:e2:9d:87:da:a4:0d:98:
64:72:07:3c:c0:9d:34:be:dd:e6:b4:e5:87:79:5b:
d8:75:26:a1:fc:17:1b:1d:97:15:a1:ca:35:eb:46:
a4:5a:09:46:2e:25:0f:87:ce:95:cd:7f:75:83:03:
77:32:d6:99:e4:72:86:87:09:e5:5c:58:6f:05:e6:
c5:ea:38:bb:81:03:4a:9e:f0:55:b4:21:bf:1e:19:
1c:75:10:a8:01:37:c2:6e:2c:ec:bc:85:dd:bd:46:
57:cb:05:40:5e:09:d1:ef:8e:f1:37:ff:b3:ec:3f:
97:52:a9:d4:96:d7:bf:9f:43:cf:a3:68:2f:6c:bd:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:91:BB:D5:C9:D2:4C:35:89:BE:D1:E8:8C:53:73:D1:72:EF:DA:7A
X509v3 Authority Key Identifier:
keyid:C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:73:b1:12:4a:e6:7d:72:60:4c:9f:6f:b2:ad:4a:ad:ce:05:
ff:8f:46:3d:8e:51:56:36:fa:af:2c:41:60:a1:94:b6:e5:91:
e1:18:16:ec:64:6e:2e:1b:b2:a8:e6:e9:fe:5e:87:95:6e:b7:
d5:fc:89:06:b1:a2:da:d3:00:2d:3f:7b:5a:54:3c:52:6c:22:
ff:e9:84:db:ca:48:3b:e8:03:dd:8e:16:f7:94:44:22:11:da:
f8:2e:72:56:53:59:9e:ba:73:5a:0f:78:96:8c:40:ba:4e:3e:
e2:fc:a1:e8:43:e5:eb:95:d7:31:eb:8e:b3:17:52:13:d9:70:
24:0f:6e:e4:51:8d:67:86:2c:4e:66:45:f4:e8:0f:75:d0:7f:
bd:bd:73:fe:ba:83:29:0b:b3:b8:ae:2e:4b:94:4a:b2:a5:24:
85:d7:d5:7f:e1:da:f9:b5:c8:0c:49:1d:29:ac:c9:9e:4d:a0:
cf:5c:bd:df:4e:e3:42:b4:28:d8:0b:81:bd:a2:a1:3c:49:f8:
6a:5c:0e:ad:83:fe:3a:64:33:13:bf:00:88:19:7d:9c:6c:4f:
a2:c8:bc:61:dd:ff:8e:b2:91:da:8b:d3:52:97:92:e0:81:24:
57:cd:37:94:96:92:1c:14:c1:1f:35:77:49:41:20:6d:fa:2d:
ed:15:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:12 2026 by rpki-client