Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
File: xykw_A7V-O90yB7YYTnHPl1a2FU.mft (raw, json)
Hash identifier: ZanpDd5HBcJd/M68MBqimzzlK7qshdf+P9ysGG6i5VU=
Subject key identifier: A6:C8:5C:7C:9C:12:07:C7:B1:A6:9C:AF:EA:0C:EB:73:77:31:52:5C
Authority key identifier: C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
Certificate issuer: /CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Certificate serial: 019D38D3114919E5DD6BB91143C990D2A7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
Manifest number: 0308
Signing time: Sun 29 Mar 2026 09:00:49 +0000
Manifest this update: Sun 29 Mar 2026 09:00:49 +0000
Manifest next update: Mon 30 Mar 2026 09:00:49 +0000
Files and hashes: 1: xykw_A7V-O90yB7YYTnHPl1a2FU.crl (hash: XrCUfA030/vw1j+8dWIotIY9rcyUJp5h6arf9XUIe4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:11:49:19:e5:dd:6b:b9:11:43:c9:90:d2:a7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Validity
Not Before: Mar 29 09:00:49 2026 GMT
Not After : Mar 30 09:00:49 2026 GMT
Subject: CN=a6c85c7c9c1207c7b1a69cafea0ceb737731525c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:f1:2c:d6:5c:af:55:3c:19:83:a4:77:42:
33:67:96:9a:5d:11:eb:dc:43:ba:d2:18:a7:c1:5b:
0d:a2:92:8c:34:f8:92:fc:6a:6e:cf:67:68:cb:ff:
1f:2d:42:55:7d:d2:2a:ac:f6:c6:19:66:dd:f4:24:
66:73:52:77:49:89:d1:3c:fe:9e:5b:90:0d:bf:af:
07:ae:9f:52:1f:b9:dd:05:81:36:3e:71:8d:94:3b:
4e:c4:ab:f4:3e:31:ae:e3:e9:f4:b4:8a:84:25:c5:
a0:14:86:2e:4a:42:72:a8:fc:f2:bb:da:31:3c:58:
f5:2c:29:78:2b:10:0a:8b:c0:00:55:64:2a:8e:df:
15:13:d4:6d:bb:cc:d2:7e:37:40:3d:88:45:41:a3:
b8:b0:dc:9a:e2:d8:bf:f1:3b:ec:79:ef:ec:dc:45:
fb:19:bf:4d:ab:0a:0d:a3:55:e2:f9:2c:31:ce:42:
60:14:10:f7:bd:b7:ab:a0:2f:69:a5:75:6d:a9:9a:
09:cc:ad:1a:8d:01:ee:a3:58:27:5d:5d:f0:82:f3:
7d:f9:00:5e:3c:16:36:c9:aa:c5:de:53:7a:73:50:
4d:94:b3:66:42:15:49:8f:f4:ba:3d:8a:9f:53:c9:
12:94:43:6b:e1:9c:4c:e4:ae:bf:cf:e4:f6:97:05:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C8:5C:7C:9C:12:07:C7:B1:A6:9C:AF:EA:0C:EB:73:77:31:52:5C
X509v3 Authority Key Identifier:
keyid:C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:39:93:09:47:a7:32:5a:93:c9:e8:f4:4f:09:96:73:f9:f4:
65:14:51:28:51:b0:23:b7:6a:bf:81:c8:0a:27:42:29:d6:3b:
69:2a:fd:d4:3e:dc:11:32:02:70:64:fb:98:14:a5:7e:a0:f6:
d2:6b:81:71:28:85:2b:6b:03:97:06:c8:58:f3:d9:81:cb:eb:
38:47:16:ee:1a:29:bc:dc:a5:2e:72:08:23:8d:a1:62:f0:1a:
07:c3:d7:21:93:1d:68:cc:24:f4:45:63:91:63:8d:f1:45:03:
a0:e9:62:6f:8b:37:c1:76:9f:8a:84:1f:36:72:cb:08:49:90:
e2:65:56:16:8f:1d:47:be:82:fd:24:3f:62:1d:57:d2:3d:ac:
bf:63:29:a7:34:34:52:47:40:76:77:63:ae:4f:46:42:38:0c:
1d:de:6d:e9:4a:f2:3a:6a:b0:d9:8c:02:2d:cf:59:53:99:db:
aa:1a:ff:18:c6:6e:3e:eb:a5:5c:47:56:22:71:11:2a:0a:4b:
4d:b1:ce:1c:8d:2f:03:9f:96:2e:92:49:8b:8d:4f:b3:88:28:
b5:34:ab:92:b3:93:3a:c0:45:95:e9:a9:16:8e:50:dd:8f:ac:
13:d4:0d:2d:2e:2d:96:ba:7d:3e:89:4c:8c:27:80:c2:79:99:
c4:ee:e1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:07 2026 by rpki-client