Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: TIZ7MGHZaSr73rAdlY3RfEA7om7Q/tPMAY5rVSnr+Cc=
Subject key identifier: D3:29:9B:B3:20:9B:AA:86:34:1C:D6:F2:6A:89:52:0B:2D:A8:C6:E4
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 019CAD5944F4DF721F988D1C71E12588952A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0D77
Signing time: Mon 02 Mar 2026 07:00:34 +0000
Manifest this update: Mon 02 Mar 2026 07:00:34 +0000
Manifest next update: Tue 03 Mar 2026 07:00:34 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: yCNsR7OCbyQA/4L/RLxCKNEz4K+UdGnQVXxHSEuWD7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:44:f4:df:72:1f:98:8d:1c:71:e1:25:88:95:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Mar 2 07:00:34 2026 GMT
Not After : Mar 3 07:00:34 2026 GMT
Subject: CN=d3299bb3209baa86341cd6f26a89520b2da8c6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:cb:cd:85:3a:a4:5f:89:04:4f:d6:61:a5:
a4:b5:41:17:c9:4b:36:54:90:56:29:cc:7f:d8:67:
28:50:96:70:f9:dd:ac:43:60:6c:e1:98:50:ab:79:
c5:82:42:51:b9:ea:14:0b:16:5a:64:ca:84:80:2a:
91:b9:80:b6:3f:89:19:1f:e4:f5:03:13:05:68:77:
84:53:a1:de:6b:b7:44:2c:c3:d8:53:50:77:1b:92:
e4:51:e0:fc:58:95:01:18:16:a1:15:6c:a5:1b:b0:
2a:84:c9:7d:79:b7:e7:97:2f:c9:67:b2:43:14:a7:
0e:e9:4c:1e:e9:70:04:68:57:54:ee:65:4e:c6:3f:
aa:48:96:3e:9f:d5:75:4b:83:96:8b:9a:04:a8:7b:
44:d3:1e:5e:d3:2b:b8:60:43:7e:09:c1:78:b9:d4:
dc:e9:e0:35:a6:62:66:fd:7a:c6:a1:06:34:5e:77:
f7:e3:33:8d:d1:5b:cb:a9:02:78:ff:57:d0:d4:8c:
b3:b3:b1:f7:ac:dd:cd:18:e3:94:ab:2f:de:e9:1d:
58:3c:ee:a8:d4:98:82:3a:a4:f8:5f:59:a8:bd:7b:
73:7c:a9:f6:4a:0e:c8:de:0e:66:b5:6f:6d:da:d9:
6e:9b:9b:15:e2:86:0c:1f:19:19:9a:10:8a:fb:58:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:29:9B:B3:20:9B:AA:86:34:1C:D6:F2:6A:89:52:0B:2D:A8:C6:E4
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:62:7a:1d:f1:99:de:5e:07:f2:a9:eb:1d:eb:d3:3f:39:bb:
b8:85:70:a8:e6:21:54:ba:9f:77:63:82:48:49:db:d1:75:15:
ff:63:bb:f7:60:d0:57:8e:0e:3b:a9:76:fe:f1:14:d0:a6:d3:
c3:56:96:1a:10:1f:0c:ef:f9:eb:4e:23:15:0b:1e:26:a6:24:
7d:92:f6:28:32:62:04:03:50:8d:cc:74:b5:77:a7:b4:47:4b:
dc:ce:f4:13:f2:ce:34:72:7f:33:6b:d9:8d:b2:71:cc:6d:15:
6c:50:da:65:43:7d:7e:e9:d1:e7:d5:9b:d1:60:94:e7:7c:37:
6a:7e:a5:3f:3b:18:03:ab:7b:e1:e0:05:13:fd:6f:85:10:1c:
ad:79:76:5f:99:72:49:e6:65:77:6d:d2:77:f7:36:c6:5b:ae:
0e:20:e4:4e:8e:e0:f9:28:59:53:7b:5b:0f:7d:87:ab:f9:c9:
4a:06:a9:84:27:f6:b7:1e:11:f1:01:65:46:2c:e9:ee:80:49:
a6:98:d9:a8:8f:bc:06:f8:12:eb:6d:6d:00:0e:dd:53:bb:6b:
e1:fd:38:fe:b9:bd:2b:db:4f:67:c0:9b:ae:21:a3:e8:05:1b:
10:56:65:41:c6:37:f9:40:fa:05:24:c1:3d:33:c7:ce:61:e9:
80:41:c2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:32 2026 by rpki-client