Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
File: xI7JWf3qj9yJhS1C1QYi2C1soSw.mft (raw, json)
Hash identifier: pv3L9ToX2NZYcBQ4BmaBuZfLT3E3qUjsnpa3dgVazEc=
Subject key identifier: 4B:A8:33:1E:1E:CB:24:FE:1A:F5:E7:85:1A:4F:39:FA:85:75:F4:C1
Authority key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Certificate issuer: /CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Certificate serial: 019CAD907FADCB6FD6C7F158BDF7628D2626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
Manifest number: 0816
Signing time: Mon 02 Mar 2026 08:00:53 +0000
Manifest this update: Mon 02 Mar 2026 08:00:53 +0000
Manifest next update: Tue 03 Mar 2026 08:00:53 +0000
Files and hashes: 1: xI7JWf3qj9yJhS1C1QYi2C1soSw.crl (hash: A3vio1Mc7JP2Vbc9vR6RC7yC+jJ+MC6c8bgskBT9IUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:7f:ad:cb:6f:d6:c7:f1:58:bd:f7:62:8d:26:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Validity
Not Before: Mar 2 08:00:53 2026 GMT
Not After : Mar 3 08:00:53 2026 GMT
Subject: CN=4ba8331e1ecb24fe1af5e7851a4f39fa8575f4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e0:0b:a3:de:84:22:e0:f7:5e:45:f8:b3:20:
8e:ba:24:eb:bc:c7:b1:c4:57:45:1f:e6:5a:e0:0a:
46:db:04:8e:fb:db:84:7c:9d:f5:28:7f:c3:a6:72:
4d:4b:50:14:8e:27:73:90:66:46:ce:38:44:a3:33:
59:e3:1b:1a:8d:e6:fa:bc:b3:80:38:70:f4:63:3b:
5e:a8:81:e9:66:64:9f:22:ea:e1:a9:2f:cc:0c:69:
43:fb:91:7f:cf:43:0b:f5:26:81:b1:18:51:2f:34:
95:da:34:ec:91:d4:3a:f0:e8:c8:ac:65:23:59:12:
e2:ec:69:c0:07:86:d3:1b:de:13:f5:29:f7:6a:6f:
53:73:f9:83:19:5f:97:30:88:f4:32:e1:4a:f1:2d:
d3:48:cc:92:48:45:e9:bb:dd:9e:69:3f:7b:31:e4:
9f:79:17:d2:4c:f6:81:d2:fc:f4:20:03:af:8f:dc:
22:94:77:4a:a3:43:f9:a6:bb:ab:08:e5:47:46:91:
20:b4:5c:79:5e:82:e4:10:48:4a:c6:a2:be:40:1b:
23:8f:95:e7:3f:14:25:31:8d:0a:e8:dc:28:98:4f:
f8:ec:33:af:13:58:4a:1f:c4:45:2d:8e:52:4b:f2:
e3:b9:b9:c0:63:a8:65:a8:77:d4:46:eb:64:ef:00:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A8:33:1E:1E:CB:24:FE:1A:F5:E7:85:1A:4F:39:FA:85:75:F4:C1
X509v3 Authority Key Identifier:
keyid:C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e4:66:c1:54:07:e9:fe:a7:31:13:ea:9d:8c:7b:48:e4:50:
4c:cb:b6:63:61:05:c5:24:26:58:a5:c9:00:74:be:ff:c9:2f:
4c:d6:33:e4:4e:5c:8c:bd:de:23:35:2e:af:5d:a8:2e:3f:35:
22:68:04:c7:85:3c:8a:de:08:57:96:82:bb:22:37:44:b5:f0:
94:f5:cb:76:c4:f0:b2:a0:12:73:5e:49:de:2e:d6:50:50:62:
a4:0c:38:a0:24:35:fa:7a:83:8c:e7:08:84:5d:64:b1:a4:55:
f6:04:4f:02:4b:19:a8:da:47:6b:ba:dd:19:4f:8c:b8:01:75:
07:e3:05:e4:cb:88:79:a1:52:73:6a:be:8a:f5:c6:1d:23:8c:
8d:60:d0:e1:7d:96:73:ee:f0:b9:03:a2:8f:7b:2a:59:8d:64:
52:0d:f7:d4:75:51:af:da:4e:d0:7d:b9:cd:e5:cb:e8:70:05:
c2:f9:14:98:38:a8:c8:4c:db:7f:87:82:b7:3e:f1:52:ee:38:
0a:26:06:7a:fd:b8:30:db:f4:17:2a:14:2f:3d:12:01:28:75:
dd:73:20:b1:fc:f6:5a:d0:d5:59:0d:55:e3:c7:c2:01:b7:4d:
6f:47:bb:19:75:af:3f:7a:c5:17:12:1c:00:a4:69:4c:49:c6:
f8:e5:cf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:23 2026 by rpki-client