Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
File: XlgQVXywZwvJwJM-An6b2CqxVt8.mft (raw, json)
Hash identifier: CHhtUG+rNzCzkZSOo4q9YoJMt3D/GeE8KtOaxH+6MNs=
Subject key identifier: 7D:0B:B6:29:FD:09:D4:10:BC:24:1B:9C:C9:D7:4E:FF:9B:57:0B:60
Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
Certificate issuer: /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Certificate serial: 019CADFE510DDC9E1D23EBEF5D509F75E7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 10:00:51 +0000
Manifest this update: Mon 02 Mar 2026 10:00:51 +0000
Manifest next update: Tue 03 Mar 2026 10:00:51 +0000
Files and hashes: 1: XlgQVXywZwvJwJM-An6b2CqxVt8.crl (hash: gpRMH1QVQksilfV7tkXGbY7ifMudnet4q6p7tT5DBkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:51:0d:dc:9e:1d:23:eb:ef:5d:50:9f:75:e7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Validity
Not Before: Mar 2 10:00:51 2026 GMT
Not After : Mar 3 10:00:51 2026 GMT
Subject: CN=7d0bb629fd09d410bc241b9cc9d74eff9b570b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:b4:c7:bd:41:16:d1:98:39:c1:73:f7:16:
a1:0e:bb:a2:85:cf:87:e8:01:fb:9c:40:fe:31:96:
77:f5:b6:78:14:ab:43:2f:6b:3c:c4:fa:95:e8:b2:
7a:8d:84:65:71:bb:4b:46:b6:24:eb:a0:b3:09:d6:
4f:4b:8b:2d:85:d9:6c:a6:08:ea:26:94:ef:15:03:
e9:e9:84:28:e7:8b:91:ec:58:65:17:df:b4:37:00:
36:c8:b1:ed:45:61:f6:24:83:cf:b2:8c:bf:ff:e7:
97:8c:01:7c:06:59:67:aa:19:13:3a:e6:1f:7c:22:
7c:05:5a:42:7e:de:1b:5e:2d:9b:ec:58:e3:aa:90:
a9:99:8b:4b:b4:68:44:12:e8:a6:b5:6b:53:80:6a:
98:83:46:54:8b:31:f8:6a:e9:28:c3:c3:9e:39:50:
c7:e0:2e:36:95:95:2b:cb:a1:9e:e4:d5:39:2f:2f:
b7:96:97:02:61:04:3f:64:7e:29:8a:6d:15:7c:e0:
29:c7:bd:4a:77:c1:9c:ca:57:07:4f:19:74:11:ee:
64:72:5d:0b:c5:54:2a:b8:f8:bf:82:f3:61:b1:c1:
8f:c3:b9:fe:4b:d0:7c:7c:f4:8f:ba:b3:23:49:49:
45:cc:06:2c:91:88:8e:26:0f:1f:f8:e0:67:b1:b7:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0B:B6:29:FD:09:D4:10:BC:24:1B:9C:C9:D7:4E:FF:9B:57:0B:60
X509v3 Authority Key Identifier:
keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0a:12:19:0a:bf:33:a8:4d:47:36:ef:12:f1:8a:a4:52:2a:
05:1d:36:f5:c9:1a:2a:e8:20:5f:e9:36:0c:77:ce:1f:21:21:
3f:6d:fb:e2:00:7d:69:8a:01:d2:63:03:49:90:d3:38:65:ad:
0f:87:68:b7:bc:3f:8e:63:20:f0:9e:0d:65:d0:2e:cc:b4:aa:
49:b6:d6:c1:e8:cc:34:d7:42:5d:a8:81:11:8f:30:77:d9:d6:
2a:bc:bc:06:3a:f4:63:47:3a:62:a9:1d:51:aa:ac:30:40:52:
32:7d:e7:af:5b:44:e7:c7:76:f9:bb:b7:8d:16:f5:73:2f:74:
f6:93:de:6e:bb:cb:66:c7:46:02:ef:17:03:79:07:06:97:57:
73:7c:5a:01:3d:99:e8:e8:13:c5:0c:02:8e:cf:a2:2d:bc:2c:
61:12:c0:8f:e7:f3:9a:3d:06:ae:0b:7e:b1:28:09:f8:6f:e4:
15:c4:ae:c6:d8:3b:4e:3d:fa:be:3c:da:88:b8:d3:26:f0:53:
41:b1:d1:cf:eb:25:8a:7b:53:b0:3e:9e:bf:96:d4:18:58:e4:
9a:ec:24:9c:e9:12:90:e2:7a:9d:7e:94:6d:27:e2:b9:c1:51:
a0:f9:d0:12:83:c5:7b:c1:0f:c7:b5:59:32:8c:8c:62:f3:46:
a2:69:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:25 2026 by rpki-client