Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
File: Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft (raw, json)
Hash identifier: 3AdmuhQWFe74nRlcOhFoL72G+/fu2ovE0J2umybDSIk=
Subject key identifier: 7E:1B:78:FF:25:84:93:C9:61:A9:DE:F5:83:AE:A1:DE:05:0E:13:77
Authority key identifier: 5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
Certificate issuer: /CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Certificate serial: 019D9962AB648A0281D7EBEA13F5B86FEF13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
Manifest number: 0C20
Signing time: Fri 17 Apr 2026 03:01:13 +0000
Manifest this update: Fri 17 Apr 2026 03:01:13 +0000
Manifest next update: Sat 18 Apr 2026 03:01:13 +0000
Files and hashes: 1: Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl (hash: T6fPrVvRa+kPHrb6p1cy0RTijxZbaMQ9DmeqHHuV+3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ab:64:8a:02:81:d7:eb:ea:13:f5:b8:6f:ef:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Validity
Not Before: Apr 17 03:01:13 2026 GMT
Not After : Apr 18 03:01:13 2026 GMT
Subject: CN=7e1b78ff258493c961a9def583aea1de050e1377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:cd:2a:5d:c2:c4:de:f5:c1:c5:30:2a:94:
3b:73:25:a3:7b:f4:db:6c:05:50:6a:27:20:9d:80:
56:af:e5:f0:77:f5:a9:45:fc:e7:6f:53:67:de:6e:
da:24:dd:b0:57:78:63:14:cb:3a:5f:95:2a:14:fb:
06:0d:e4:ed:ff:4a:cd:bc:ed:f8:e3:33:3d:ab:a4:
44:8a:50:26:66:67:d8:08:0d:0a:ed:4e:5b:62:0b:
41:23:5d:21:3e:65:00:ba:32:35:1c:e5:44:ed:d7:
0d:f8:00:a7:b7:39:55:9b:41:8b:8f:74:59:f6:4f:
b0:36:66:67:28:3b:af:1a:79:c6:1c:17:46:a6:14:
d5:80:19:f6:67:95:d0:71:f0:2e:43:27:1b:32:0a:
63:b7:b1:b9:ca:2a:41:4d:a0:2e:10:c7:00:b7:68:
be:5c:fe:a5:48:e1:ca:b4:78:88:85:2f:50:b0:98:
a1:77:45:fc:70:e2:d3:c1:06:21:d8:8a:16:dd:05:
17:4d:24:bb:6c:ae:8c:f0:66:d5:c4:4c:e1:23:49:
80:24:67:7e:68:9c:f9:99:6f:28:bc:e8:cc:28:88:
84:8a:33:83:8f:0f:76:bb:fb:32:75:c4:e7:99:5e:
ee:53:5e:aa:73:0f:4a:3a:0b:be:b6:98:56:68:fa:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1B:78:FF:25:84:93:C9:61:A9:DE:F5:83:AE:A1:DE:05:0E:13:77
X509v3 Authority Key Identifier:
keyid:5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e7:4c:92:20:a7:4b:9f:e1:48:8f:a0:87:57:77:2f:ea:03:
0c:a8:54:d4:55:40:e6:be:b5:61:2c:53:db:d4:86:25:55:39:
81:65:a4:e0:d8:6a:06:d0:7d:c5:5a:ad:04:a1:21:1e:1e:94:
e5:4c:9c:bb:b1:82:cb:fa:85:43:ee:6b:45:67:c1:2a:71:38:
a9:15:42:0b:f9:2e:76:29:d6:18:fa:1b:69:f4:27:b5:37:21:
61:76:53:5f:a5:6d:5c:d1:cf:2c:e5:07:df:28:18:cc:95:e9:
e5:f1:41:3e:66:fc:3f:b5:f0:0b:06:81:48:ae:a6:9f:46:6f:
87:6e:79:f3:3b:bc:ae:60:75:ce:1e:46:80:ff:06:b0:4b:fa:
72:a3:77:bc:45:e6:a1:ea:9a:3c:02:c0:7b:1a:4e:f3:46:b3:
34:da:e2:49:31:07:7e:a9:b4:6b:7e:ae:82:c8:ff:23:27:8d:
e8:2b:2b:f9:db:d8:21:7b:4c:b6:b3:1b:c4:06:05:8d:40:fb:
6b:34:07:d9:f9:97:21:3d:84:0c:30:11:1f:2a:84:20:e6:8e:
fa:a6:4d:41:f1:7d:5f:41:a3:fb:ad:f7:31:85:d8:e6:3b:e5:
d8:5a:d8:49:6f:cc:a9:5c:cb:14:df:af:68:60:7f:6d:8a:e4:
af:b6:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:07 2026 by rpki-client