Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: ulwIldEKippWlMAlXPJYpv2s+VegKU0ofc5LTr/fT1w=
Subject key identifier: D2:E4:3C:61:72:FA:38:26:51:23:BF:60:8E:A5:19:62:F2:7F:1E:72
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 019D9998D922F5B0E58EACA0A03F747DDC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 06A6
Signing time: Fri 17 Apr 2026 04:00:24 +0000
Manifest this update: Fri 17 Apr 2026 04:00:24 +0000
Manifest next update: Sat 18 Apr 2026 04:00:24 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: D+briplslmGSRy/Ab6DtE1We196g3bknb2TN+15DXIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:d9:22:f5:b0:e5:8e:ac:a0:a0:3f:74:7d:dc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Apr 17 04:00:24 2026 GMT
Not After : Apr 18 04:00:24 2026 GMT
Subject: CN=d2e43c6172fa38265123bf608ea51962f27f1e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:9a:03:db:4e:23:7c:96:01:c1:60:7e:41:
6a:43:17:ea:54:aa:b1:b8:7f:57:d2:df:89:6d:62:
a4:a1:48:ca:c6:96:20:f6:65:54:19:66:4b:ce:2e:
ef:2e:05:94:d4:c3:1b:87:dc:d1:81:c7:c1:a4:c2:
75:5c:e1:4d:92:44:42:83:21:be:e2:84:12:9a:9e:
f7:b6:af:35:bc:f8:1b:53:19:6c:86:5e:b6:d8:e9:
b0:a6:8e:56:4b:41:0a:2e:e2:69:98:6d:4b:7a:1c:
bd:e3:76:96:ae:1c:8f:81:95:ca:58:e7:78:e9:ba:
f9:1f:cd:1a:16:2e:22:98:9a:fd:15:df:ec:40:50:
6f:4c:bd:c3:00:cf:d1:16:d0:2a:de:ea:b2:5e:3b:
85:05:60:e0:27:64:b5:61:1c:8e:02:e8:29:58:9f:
8f:15:6f:2c:ec:cb:d8:53:2c:b3:5a:b7:64:b0:b6:
b8:49:9e:67:82:66:c7:6d:fa:af:72:d8:7a:b2:07:
6c:fa:07:d2:64:01:37:55:26:19:ba:b0:48:c4:fc:
d3:cc:39:3a:d0:bc:16:23:b5:52:36:54:65:d0:b9:
f9:f3:ed:61:16:aa:0f:3d:9a:54:7e:ac:77:95:13:
c1:13:d2:d7:50:30:cc:c6:fd:15:7a:3d:31:f6:a2:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E4:3C:61:72:FA:38:26:51:23:BF:60:8E:A5:19:62:F2:7F:1E:72
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a1:8a:05:77:f3:6e:ee:af:20:53:48:ce:5d:9f:5a:26:4b:
ba:26:df:c7:e6:ec:c7:c1:ea:1a:d8:e2:41:0d:8a:21:b4:e3:
ce:d1:e1:ef:6e:9b:c5:34:e4:51:c0:be:e6:c9:27:e6:0d:5c:
72:64:a3:91:bb:99:d1:5d:eb:1e:c2:6b:65:77:a7:f9:a9:da:
1f:f8:77:3b:71:78:c5:aa:8a:0d:67:b6:18:ad:a2:3b:c9:d3:
98:99:aa:da:22:bb:ec:63:e3:9c:02:76:fb:88:e9:43:71:74:
03:33:97:f5:ef:e2:e1:32:12:dc:60:7f:a4:35:6a:fd:53:58:
ee:1d:4c:dc:e1:9f:e9:af:b2:c5:ad:a7:39:4a:e4:60:04:e1:
22:a1:b4:d3:16:0b:8d:cc:c9:54:d0:89:ad:07:d1:9c:35:73:
02:40:0e:d5:a0:42:0c:a8:bc:25:40:86:93:db:b0:53:9b:3d:
00:ee:74:ca:bd:35:95:06:b1:31:b4:05:87:e3:9e:c4:4a:8b:
ac:df:2b:f5:5e:cc:5b:81:e3:a9:ca:b5:06:25:82:f1:82:2c:
22:b5:a5:72:e5:f1:10:8b:db:7c:51:e6:89:e9:42:d3:44:25:
54:54:a7:02:ea:b2:12:1b:e7:d2:be:b4:a9:5b:e7:2e:50:0c:
1d:19:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:46 2026 by rpki-client