Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: QmHUmVA3Qhj3LfXqqg1fCZc+raGrQsD2vk8VNW4E+q4=
Subject key identifier: F6:D8:1F:D8:AA:55:1E:2D:F2:6B:33:86:CB:23:30:BB:CB:89:46:D3
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 019CAC0FCB97984A4C1F78EB4D019E78C863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 062B
Signing time: Mon 02 Mar 2026 01:00:42 +0000
Manifest this update: Mon 02 Mar 2026 01:00:42 +0000
Manifest next update: Tue 03 Mar 2026 01:00:42 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: GGsTRu1/DX1TpV4PzoRBUYXoP5ydIIBpYTFBsFEOkaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:cb:97:98:4a:4c:1f:78:eb:4d:01:9e:78:c8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Mar 2 01:00:42 2026 GMT
Not After : Mar 3 01:00:42 2026 GMT
Subject: CN=f6d81fd8aa551e2df26b3386cb2330bbcb8946d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:03:8d:80:46:bc:cc:02:bb:9d:44:a3:ee:
a5:d2:96:5c:cb:13:dd:4c:73:a2:b1:5d:1c:d7:16:
66:d7:5c:ce:ba:07:d9:7c:2d:54:e1:71:23:60:0e:
cd:93:05:92:d0:6d:7e:69:97:3c:3f:fa:95:c6:be:
02:c9:83:fc:a0:85:5c:c2:33:00:02:c9:20:b1:a6:
56:d1:30:fc:78:ec:d4:95:f0:3c:29:22:1a:8a:4d:
47:ad:cb:a5:41:2c:ff:9b:d0:45:08:f5:ef:ea:aa:
8f:ce:26:fa:f9:02:94:fb:1a:d0:07:35:79:c8:b7:
d2:91:13:f6:b1:65:63:96:7c:ce:06:e4:98:b9:0b:
ac:e2:1a:c1:09:67:18:6a:2f:3c:4d:a5:1e:dd:52:
0e:5c:aa:75:5f:f0:0a:b6:5f:91:26:1d:e4:53:dd:
51:f6:24:ab:57:ca:91:94:f9:3c:e2:f9:0a:c5:c8:
b9:33:89:0f:7e:77:eb:67:cd:80:1f:a2:cc:25:15:
86:7c:c5:6c:a8:02:da:96:42:89:6c:ec:10:f3:a0:
03:4f:50:74:7e:cf:49:95:bf:71:0a:6a:4a:13:a1:
31:97:c2:30:c1:6c:73:69:3a:5e:32:27:f4:da:18:
7a:93:64:75:a7:5d:59:43:51:8b:fa:7e:0b:b5:8d:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D8:1F:D8:AA:55:1E:2D:F2:6B:33:86:CB:23:30:BB:CB:89:46:D3
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fa:62:e8:ae:86:39:8b:31:67:29:25:72:72:ca:3f:b7:be:
c5:d9:0f:36:e4:59:3f:d2:00:76:20:7b:82:4a:5a:16:cf:10:
9c:f3:ac:86:63:13:11:8d:8b:23:eb:f1:0e:fa:1e:ce:73:9d:
d1:2e:80:fa:5f:46:bb:a3:52:ba:13:f7:9a:2c:8c:c3:7a:20:
dc:e2:67:f5:52:20:09:ce:5d:c6:58:00:e2:73:c7:90:8e:d6:
18:7f:a8:c4:e8:c0:df:90:2a:ce:17:a5:17:83:fb:82:fd:21:
e1:1a:87:b5:11:eb:89:b7:21:cd:00:cf:d0:a4:bc:2a:7c:41:
53:1f:7f:b6:a2:6c:65:d2:fa:bd:2d:0e:a3:1b:8a:0f:a4:8f:
3b:d9:29:36:ed:5c:dc:b1:fa:00:16:c4:b6:2f:64:e1:a5:d9:
b2:88:e4:7b:a8:9a:40:5a:89:f9:b6:19:37:69:df:df:8f:91:
4a:35:de:3a:d4:3b:20:a0:ec:74:1f:9b:0c:71:c5:c6:1c:29:
e2:7a:28:8a:a1:54:6c:a5:35:cf:1a:b9:cf:c1:47:a3:c9:22:
63:4d:d3:7b:8a:ac:68:6f:a4:10:6d:31:08:79:07:07:65:96:
76:02:58:13:8e:9e:c5:c7:b3:df:82:58:72:7f:7c:de:8b:c5:
24:c4:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:28 2026 by rpki-client