Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
File: x-0gqk1F1WHiTZJvWbF1J42bAcg.mft (raw, json)
Hash identifier: 9qK2B1kWWgtoMdHp+Bj6xNRAhF6ad1y2EDnn6pHlPPg=
Subject key identifier: 64:BB:C6:8E:9D:2B:90:E4:7B:CF:57:0D:86:1F:CA:D7:2F:89:22:83
Authority key identifier: C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8
Certificate issuer: /CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
Certificate serial: 019CAAC722842704F349401AF5C9A37E4B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
Manifest number: 14B2
Signing time: Sun 01 Mar 2026 19:01:43 +0000
Manifest this update: Sun 01 Mar 2026 19:01:43 +0000
Manifest next update: Mon 02 Mar 2026 19:01:43 +0000
Files and hashes: 1: x-0gqk1F1WHiTZJvWbF1J42bAcg.crl (hash: WLPnI7w/DpCxDuJVOYk3oL0qNRzZ4WWKG6/n0nZFrcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:22:84:27:04:f3:49:40:1a:f5:c9:a3:7e:4b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
Validity
Not Before: Mar 1 19:01:43 2026 GMT
Not After : Mar 2 19:01:43 2026 GMT
Subject: CN=64bbc68e9d2b90e47bcf570d861fcad72f892283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:44:2b:0d:10:92:fa:22:25:9f:61:a3:0d:
3c:6f:2e:68:d4:cf:ed:f3:76:5a:12:41:58:42:e4:
3f:57:40:b7:fe:fc:4f:02:ec:74:13:91:cc:a9:e2:
78:48:f6:0d:48:dc:66:4d:41:8f:8e:47:3a:c4:d3:
f0:be:b7:fd:09:d2:4c:fc:a2:17:39:79:28:59:e1:
0b:18:80:9b:c6:ec:a0:c2:91:4c:08:a9:5b:c0:b2:
c8:f1:a5:0f:1c:3e:cd:ac:41:f3:c7:a4:a4:80:37:
0e:d4:1c:71:a1:8a:27:1b:46:50:a0:f9:7a:47:c1:
3a:dd:fa:97:cf:59:90:ea:1d:7c:8b:a2:8c:d8:57:
c5:e6:dd:0a:a5:69:30:10:44:1a:a4:38:f6:3c:3e:
d9:eb:17:d3:ba:44:fa:86:72:82:74:32:55:d5:e5:
ac:7a:ee:f1:49:df:a0:3a:c2:54:b3:5a:3f:e0:62:
84:72:de:7e:ca:44:24:55:11:f8:99:0f:a2:78:7c:
7f:3a:c8:34:86:52:71:91:3c:5e:24:c3:1e:13:d9:
c3:a2:1e:0b:22:3a:34:dd:10:35:0d:42:53:e3:c7:
fe:98:6e:88:67:c2:e0:f7:80:cc:a5:47:39:62:be:
71:a5:79:f4:cf:27:33:2b:47:72:9e:07:26:b8:4c:
d5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BB:C6:8E:9D:2B:90:E4:7B:CF:57:0D:86:1F:CA:D7:2F:89:22:83
X509v3 Authority Key Identifier:
keyid:C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d5:2d:fb:4f:bc:fc:49:25:50:3f:f4:6f:0e:de:8d:8f:e0:
c3:4e:d2:49:10:cd:25:e0:92:3b:bc:b6:54:e5:e9:91:8b:e3:
5c:3f:ab:de:b8:d9:f9:0c:c5:8d:44:11:61:14:8d:68:4f:34:
1c:bc:03:07:87:27:36:e0:d4:e4:9e:9f:51:94:f5:e8:ed:ae:
76:40:f6:b9:9d:c3:5c:52:3e:c4:20:75:85:51:07:89:84:26:
8b:ab:1c:6f:b8:fc:61:e2:e3:dd:1d:e8:8a:31:81:41:dc:97:
9e:69:f0:51:19:66:a2:fb:6c:d6:3f:57:2e:87:d4:5b:78:42:
20:04:88:40:5b:b1:49:98:82:a0:1c:73:87:fc:01:86:59:ae:
4f:cf:6c:3e:13:6e:9d:a2:16:ce:12:a7:3f:40:cf:3d:9d:50:
f4:b4:0d:96:29:d4:18:f7:21:56:5d:ed:3d:0c:a5:16:f8:31:
47:a4:84:85:e6:f6:db:43:9e:c2:47:50:51:ab:37:a2:a4:87:
4f:5e:17:3e:9d:67:f1:35:6b:c9:87:bd:db:ec:eb:c8:5f:c4:
b6:42:e6:89:a1:4b:a9:0a:90:a4:d4:e3:dc:93:fa:2e:88:5f:
d3:08:df:7a:62:ae:c2:08:86:2e:a6:30:be:0a:7b:7f:41:4c:
5c:97:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:10 2026 by rpki-client