Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
File: xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json)
Hash identifier: kjjlpPLTnOel7ur2GXu/sQQf/4IY7o0mqEsG9/mMC5s=
Subject key identifier: 00:81:FB:A2:C7:FE:9A:76:1C:73:27:65:AA:7B:80:79:56:4A:E8:AB
Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
Certificate issuer: /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Certificate serial: 019CAB6BBAD73D8A7E321C3A19828E8403FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
Manifest number: 159E
Signing time: Sun 01 Mar 2026 22:01:29 +0000
Manifest this update: Sun 01 Mar 2026 22:01:29 +0000
Manifest next update: Mon 02 Mar 2026 22:01:29 +0000
Files and hashes: 1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: hipLPGzDjLdnfOvRtmKP6/zlIooPFYPh49CiAb6/eGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ba:d7:3d:8a:7e:32:1c:3a:19:82:8e:84:03:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Validity
Not Before: Mar 1 22:01:29 2026 GMT
Not After : Mar 2 22:01:29 2026 GMT
Subject: CN=0081fba2c7fe9a761c732765aa7b8079564ae8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:f6:48:02:19:db:aa:4b:4d:c4:6f:ec:0c:
e7:83:7e:d4:3d:fe:e8:02:8d:48:2f:f6:9e:78:99:
6d:ed:ad:d0:76:68:a1:68:d5:2f:46:15:ab:c6:0e:
b4:7a:af:7e:3f:e2:1a:af:bc:ab:64:05:e0:5a:6a:
4a:b3:13:77:10:61:91:8f:cf:43:18:57:b2:98:5e:
3a:98:47:e1:6a:1b:37:8d:36:d3:aa:3d:1b:10:0e:
3a:bc:cf:cf:00:e8:1f:32:0a:a3:ce:eb:b0:db:45:
02:8f:82:c0:63:51:18:e5:e5:a3:78:65:71:fd:44:
39:e4:25:97:10:b3:40:d9:a4:ae:bc:a5:49:67:be:
e6:a6:fa:68:71:9c:d3:84:26:ad:25:8c:e9:06:d4:
75:a1:9d:1f:5b:b2:e5:7f:7e:71:d2:48:6f:4f:78:
91:97:de:46:9a:39:f3:ec:d9:e1:62:28:11:f1:6b:
a6:6b:3f:b8:c1:bf:5f:9c:66:7b:4d:bf:92:97:a9:
f8:76:bc:d2:a8:72:5f:2c:26:6a:9c:c7:ee:bf:db:
c7:eb:0e:ad:57:fc:2b:48:c2:95:d5:d9:34:b9:a7:
bc:6e:a9:b8:8e:b3:52:77:53:bf:d4:55:f2:c2:f4:
00:c2:83:61:9b:2b:16:39:26:43:ca:3c:ce:42:b5:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:81:FB:A2:C7:FE:9A:76:1C:73:27:65:AA:7B:80:79:56:4A:E8:AB
X509v3 Authority Key Identifier:
keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:41:16:08:e2:16:cb:18:e4:da:16:e0:4f:5b:d4:12:9e:77:
50:65:16:db:30:c2:58:a0:7c:02:49:20:46:4f:18:3a:20:09:
d0:94:60:08:5f:95:91:d9:f4:ac:ff:69:5a:b5:6b:b8:3d:5f:
bb:e1:75:6b:b8:90:b8:ac:1b:cd:1a:b8:cf:40:dd:2c:e5:60:
a8:cf:8c:2e:71:79:5d:cd:13:b3:ab:fb:0b:07:82:0c:69:83:
35:5b:62:22:90:8b:e0:e3:1d:ef:b3:8f:6c:3c:4c:ec:c2:4b:
6d:d6:09:b5:4b:e9:5b:ff:e6:2f:7c:59:72:b6:65:37:1b:b6:
1f:13:66:0f:f7:78:7a:a8:3c:65:74:63:a3:cd:80:b3:d1:97:
9b:61:61:16:a3:14:14:97:dc:d7:a5:be:d9:8f:bd:c2:e6:98:
91:6e:fd:a1:78:a2:2c:c2:12:63:19:13:60:13:41:3c:89:b0:
62:cf:14:02:0c:21:b9:2a:44:c6:90:e2:43:b7:9c:24:d5:2b:
94:5f:e9:2f:04:7f:dc:35:13:fd:cb:f4:c5:79:1a:87:ee:8b:
39:94:be:d2:4f:b7:d2:05:72:3e:9a:a1:18:51:47:14:98:3f:
b8:7f:8e:d5:0d:6c:c0:c6:b5:e5:52:53:a6:71:ec:70:74:bb:
f0:56:ab:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:21 2026 by rpki-client