Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
File: XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft (raw, json)
Hash identifier: gq2SlaTKfRGPiZIvkf9fLMAu7o0Sf+H86HZKHh9CZ2Q=
Subject key identifier: D2:A6:6B:93:8F:C3:52:DB:D0:37:CB:92:03:3F:0C:CB:6D:1C:16:72
Authority key identifier: 5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
Certificate issuer: /CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Certificate serial: 019CACB4F55FF756CCED7A862CBD4870CFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 04:01:06 +0000
Manifest this update: Mon 02 Mar 2026 04:01:06 +0000
Manifest next update: Tue 03 Mar 2026 04:01:06 +0000
Files and hashes: 1: XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl (hash: a8ei8gmQWGGDTyYtV2302NuQTavaw4t0wuFYkkDWhYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f5:5f:f7:56:cc:ed:7a:86:2c:bd:48:70:cf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Validity
Not Before: Mar 2 04:01:06 2026 GMT
Not After : Mar 3 04:01:06 2026 GMT
Subject: CN=d2a66b938fc352dbd037cb92033f0ccb6d1c1672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:83:ad:f8:f8:b3:0e:55:42:51:68:1b:84:
f8:ca:1a:dd:74:68:74:aa:00:44:81:72:75:4a:86:
42:fc:a0:ae:e5:a4:69:9f:eb:2f:9d:30:7d:39:69:
9e:ab:53:68:e0:5c:f6:85:a7:24:eb:15:73:5d:d5:
0d:7b:90:ae:3e:84:71:02:fd:8a:69:f9:25:9b:bf:
05:4f:84:d8:76:ca:e9:0d:b0:ad:75:3b:f0:da:23:
2b:a9:ed:3b:94:69:ef:7a:8c:ef:e3:4d:55:3c:8f:
a5:d9:6d:38:2f:2a:4d:12:ed:b6:7c:e3:e3:98:51:
25:03:b8:d2:a1:dc:d6:0c:ff:af:ac:1d:35:53:e4:
00:f7:56:4d:0e:ae:8e:12:0e:f8:d4:d2:aa:77:0e:
e4:d5:cd:af:9f:65:38:92:71:9d:0b:56:e4:c5:d0:
be:96:9a:b3:4d:13:30:07:8d:23:ae:61:b6:a3:09:
43:d2:e6:e2:1e:64:31:5b:4e:73:ce:b9:34:0e:aa:
d0:79:cd:a2:d1:1d:0b:a8:ff:32:a7:7d:52:92:90:
71:e3:97:d5:af:60:a1:86:16:7c:51:cd:13:b6:8c:
66:fa:f4:67:bf:9d:b6:d2:22:3e:7f:bb:45:0a:53:
ab:d7:13:ad:83:22:c1:0a:be:a5:72:03:20:1a:6f:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A6:6B:93:8F:C3:52:DB:D0:37:CB:92:03:3F:0C:CB:6D:1C:16:72
X509v3 Authority Key Identifier:
keyid:5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:54:ca:20:94:34:21:41:e8:0b:c9:31:8c:e0:1e:39:9c:55:
38:b0:8c:b0:d3:fe:d8:71:19:e1:0d:39:9e:72:3c:a1:59:ce:
b9:b1:69:9b:00:7b:70:ea:73:06:e2:8a:5b:60:83:a3:a5:28:
2f:63:4c:cb:9e:ef:c8:41:c7:00:08:0d:c4:64:36:ed:43:9a:
24:a5:b4:5b:10:09:3c:34:68:0a:84:bb:04:3b:17:8d:b5:07:
3e:93:d7:2c:91:5e:87:c7:3b:23:39:18:fd:a2:b2:c0:ff:86:
44:df:6b:b4:34:08:cb:d7:20:3c:78:0c:a0:7e:55:fa:5f:32:
95:d7:34:b3:88:41:5a:85:04:cb:9a:94:be:e6:2a:6a:b0:6a:
cf:76:8d:71:27:23:8e:39:87:27:8d:4a:fb:7b:1c:2a:f3:bb:
7e:97:ee:1b:d4:76:de:c3:f9:79:26:02:40:26:09:2b:23:c8:
32:77:90:74:18:05:4f:45:87:ab:31:35:f5:0c:49:7f:42:d9:
02:d4:af:23:4e:4e:84:c8:c0:a3:b4:08:cd:9a:da:56:09:74:
03:3c:b0:bc:77:85:c9:50:11:a2:3a:80:12:69:35:cb:9d:2b:
72:f3:3b:3a:a3:a6:42:b7:10:d8:59:83:24:3d:af:09:ec:b8:
67:b3:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:28 2026 by rpki-client