Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
File: XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json)
Hash identifier: 6zWFu2f77zV1Gn96XcbJsYJgOgnMpKmmyjxM0EyxP7U=
Subject key identifier: 5A:FA:3A:4C:D7:06:A6:29:06:2F:86:C0:54:B8:85:6D:00:22:AE:B2
Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Certificate issuer: /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Certificate serial: 019CAB6BB788C7FB84201530AEDB0C6261D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
Manifest number: 17D5
Signing time: Sun 01 Mar 2026 22:01:29 +0000
Manifest this update: Sun 01 Mar 2026 22:01:29 +0000
Manifest next update: Mon 02 Mar 2026 22:01:29 +0000
Files and hashes: 1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: hlv1g661H25Bdpw43TNpJ+/9MN0Ee4zz1gfuxyYkdCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b7:88:c7:fb:84:20:15:30:ae:db:0c:62:61:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Validity
Not Before: Mar 1 22:01:29 2026 GMT
Not After : Mar 2 22:01:29 2026 GMT
Subject: CN=5afa3a4cd706a629062f86c054b8856d0022aeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:7b:85:89:5b:57:8e:8c:99:a1:5c:28:bd:
8d:44:51:4f:4f:29:d0:eb:b8:da:f4:62:74:33:0d:
94:22:36:b3:61:05:7e:86:b0:ad:a8:cd:1e:05:71:
15:d8:36:59:14:a9:4d:4e:c7:c6:22:ff:3c:d3:8f:
a0:4a:e8:96:52:b3:1e:27:46:b6:20:cc:61:de:c8:
63:7f:ed:dd:e4:ee:90:a3:57:27:64:ff:51:a3:16:
e2:f9:8d:fc:72:90:5e:8c:89:23:30:11:f9:fe:ca:
91:5d:4e:d8:ea:d1:71:53:fd:04:02:a8:03:9b:9f:
26:89:19:11:f4:02:70:5d:35:a9:ea:0b:1e:65:3e:
3a:81:8b:fa:76:9a:d1:43:c4:b7:71:38:4c:2f:f4:
a4:30:e6:d6:0a:a7:71:bb:2e:f6:c2:53:fe:d9:ec:
75:4c:a8:dd:26:30:05:7e:db:32:12:5c:fd:63:02:
b5:77:7d:4e:f1:0c:1f:a4:cb:75:da:78:c1:a0:5d:
9e:30:5d:11:12:61:f3:b7:3d:4a:92:b7:73:87:88:
a0:6e:e0:77:e8:55:e4:14:ca:d5:ac:93:2d:af:f3:
3d:20:c0:df:22:6a:b3:19:3c:88:91:a7:15:0e:46:
a4:34:d8:a2:90:ca:35:db:12:4b:7c:93:11:78:18:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FA:3A:4C:D7:06:A6:29:06:2F:86:C0:54:B8:85:6D:00:22:AE:B2
X509v3 Authority Key Identifier:
keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7f:ea:b5:e0:d8:83:7e:4b:3c:c8:22:91:b6:40:14:99:d0:
73:df:db:b5:b0:24:02:45:98:c8:10:1a:40:26:44:24:22:5a:
65:25:53:a0:c6:35:2d:7c:fb:38:de:f2:7e:09:ae:31:9a:8a:
6d:f1:66:f5:fc:b6:c4:ff:00:d7:af:8e:a2:da:11:eb:5a:1a:
15:a0:42:57:b1:16:dd:6f:f5:63:2b:5f:d4:9a:e4:5c:61:0e:
af:26:13:bb:ac:25:15:9f:bf:5c:37:a7:8a:d1:75:4e:01:e1:
c5:34:92:81:7f:c5:3f:ed:f2:7f:0c:a3:47:62:7e:45:8e:3b:
89:98:5d:79:ca:96:2a:0a:3a:dd:18:21:d6:94:ea:76:98:ef:
b0:c7:f2:57:18:06:91:ff:fe:c6:49:a9:e4:95:dd:92:4d:3e:
76:23:1a:49:90:e1:f8:ce:c4:ee:9b:6a:be:61:85:4b:bf:a1:
e0:86:8a:3a:31:52:ea:7b:88:a3:fb:3a:ff:35:c8:46:42:b6:
03:30:ce:a2:52:6b:50:65:df:bb:73:29:c3:6a:0a:f8:18:7b:
60:62:0c:77:3a:bf:e7:68:66:98:07:af:c3:c6:69:26:72:0b:
02:17:ef:79:4b:df:dc:fc:f5:ea:32:f4:3e:3f:29:fc:4e:50:
ff:81:c0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:38 2026 by rpki-client