Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
File: xbqElpIUKuxW19DdyN1N20HPg8E.mft (raw, json)
Hash identifier: /4An6QoSJH9DFK3oizSIeuh/ojBweFPVVos5UcMgah0=
Subject key identifier: 0C:0C:27:50:FA:66:5C:0D:F5:2A:7F:C2:C5:B3:C1:15:A7:42:BD:BF
Authority key identifier: C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
Certificate issuer: /CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Certificate serial: 019CADC7D000EDD9D7E73BA69CB1A8D56BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
Manifest number: 1147
Signing time: Mon 02 Mar 2026 09:01:19 +0000
Manifest this update: Mon 02 Mar 2026 09:01:19 +0000
Manifest next update: Tue 03 Mar 2026 09:01:19 +0000
Files and hashes: 1: xbqElpIUKuxW19DdyN1N20HPg8E.crl (hash: 34jzT624G0m+YCkPECh5DL/4HzsEF5sWeI2f5xtoyqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:d0:00:ed:d9:d7:e7:3b:a6:9c:b1:a8:d5:6b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Validity
Not Before: Mar 2 09:01:19 2026 GMT
Not After : Mar 3 09:01:19 2026 GMT
Subject: CN=0c0c2750fa665c0df52a7fc2c5b3c115a742bdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:c2:f0:c0:ec:86:da:3e:70:72:76:03:80:
39:91:b7:fa:39:97:90:6f:0f:5a:d7:65:5a:71:ca:
14:b9:96:6d:1f:ab:0b:d4:9a:e8:e6:92:33:b0:54:
b7:99:d9:8b:f0:16:66:99:07:39:ac:88:f1:af:70:
a0:c0:15:d6:e4:bf:1a:cd:7b:c3:e3:f3:3b:58:5d:
b8:da:e9:81:4c:6a:79:5c:26:04:f2:fe:e5:ac:b3:
2b:8f:50:48:a6:dc:b5:ea:5a:5c:3a:19:48:ef:98:
69:0f:7b:0d:2f:91:99:60:90:e1:27:bc:a2:cc:b3:
8c:5b:85:0b:56:b0:63:91:0a:b6:4c:a5:6c:90:54:
c0:84:8f:27:94:ac:96:11:6d:b1:1c:97:dd:3e:87:
1b:6b:57:ca:f8:8a:78:44:53:cf:67:87:a5:ae:62:
dc:bb:84:75:46:16:89:5b:9a:f8:bb:d0:cd:eb:b1:
5d:b7:0d:0c:99:70:5a:b4:71:f7:95:c4:61:8f:36:
11:43:e0:b0:c0:87:4f:95:f4:ff:dd:77:50:63:62:
5f:b0:51:78:2e:2a:75:c0:71:89:fb:e2:3a:18:2f:
31:07:34:6a:42:36:f7:a8:3f:4d:8a:30:36:70:36:
f1:55:e3:01:05:8a:ad:47:0f:b8:72:3b:df:dd:ea:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0C:27:50:FA:66:5C:0D:F5:2A:7F:C2:C5:B3:C1:15:A7:42:BD:BF
X509v3 Authority Key Identifier:
keyid:C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:19:d2:e6:59:ab:3a:c7:66:07:8a:ea:b0:bf:cd:35:c7:4a:
8a:62:49:a3:1b:b9:8c:cc:f1:06:ba:c5:84:c3:14:ca:cf:03:
ff:7d:fc:ae:21:a7:1d:be:17:51:10:82:17:e1:be:c8:b0:cb:
be:9d:51:b3:7f:4a:e5:a8:42:fa:94:bf:2a:2c:84:84:d8:6c:
c2:81:a0:38:84:a4:bd:42:6f:f7:ed:61:de:48:65:33:9d:22:
ca:19:10:b4:ca:07:83:c8:1d:d5:dc:d5:4e:be:c9:88:3e:3f:
b3:ad:46:de:70:ed:2b:9e:a7:75:fe:f9:00:85:c1:14:10:94:
86:cb:ea:14:ab:b8:49:21:12:ed:6e:85:92:d7:99:65:5f:ad:
f2:21:c4:a5:de:b0:a7:17:3d:b7:3c:14:22:5b:b4:50:ef:17:
d0:ee:fa:a7:ba:1f:54:02:0a:01:de:cc:39:b0:fe:ab:ec:9f:
0d:cb:a2:ed:cd:c6:14:58:24:50:4a:1d:08:c3:5a:29:ba:5f:
8f:eb:1b:89:72:52:3a:cc:58:33:54:ea:c8:0e:65:77:de:17:
e8:6b:3f:26:57:57:d4:d4:cc:76:37:20:09:0e:c5:93:d9:ce:
3e:66:fe:cf:fa:cb:31:8d:f1:bd:b6:15:98:46:3f:d9:7c:1f:
c6:ad:78:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:25 2026 by rpki-client