Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json)
Hash identifier: xiQrlvqDZXZJibj0iKZ8+kp+I3ZvEwqBD+02Ss/C6Nc=
Subject key identifier: A6:92:C7:DF:56:26:DB:4A:DF:BD:C5:DF:26:B3:46:4C:BA:0F:24:B3
Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Certificate serial: 019D386652F9EEBC744AA60F2BCC5ECD8918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
Manifest number: 05DB
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: vUcRja1r36Eycms1hocSZyQ1l/GZmFP9VhXloJTAai8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:52:f9:ee:bc:74:4a:a6:0f:2b:cc:5e:cd:89:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=a692c7df5626db4adfbdc5df26b3464cba0f24b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:4f:3e:03:58:ea:84:b7:21:02:41:ee:bf:
f1:17:58:9c:65:c7:10:24:01:1d:88:cd:fb:eb:f3:
14:2e:68:cd:1b:6c:c2:0c:be:2e:59:1e:f9:44:07:
a4:41:c3:66:f3:43:b7:f8:dc:53:06:1f:eb:de:0e:
ee:7d:d4:8e:b4:b4:0b:af:f9:0a:50:72:31:78:f3:
24:a4:14:0b:7f:9c:40:c4:84:21:4c:c3:5f:0e:9f:
35:75:18:b6:a4:c4:41:af:93:4a:60:2d:8b:ba:e3:
6d:2a:f0:f8:05:f7:fa:c2:58:72:2e:42:3a:4c:b7:
bd:0d:96:90:56:54:54:38:56:63:30:c5:9c:06:3a:
4a:3d:f6:87:48:7f:e8:37:1e:5d:cd:d3:04:8d:73:
9d:eb:81:3a:5d:e1:0a:57:5b:0d:01:a3:81:b0:83:
22:e1:13:c8:ae:21:1f:95:d3:1e:d6:f0:51:b2:3e:
3d:a5:84:6f:dc:c5:67:57:11:3c:fd:91:85:c1:14:
63:e7:ea:84:3e:5b:f7:b6:e8:60:77:91:5e:19:e7:
e2:65:32:94:b4:c3:7b:96:06:ae:c2:24:b8:0c:55:
ad:9a:c2:6d:23:63:50:9f:42:68:05:ba:b2:c8:73:
91:f9:8f:ab:5e:44:0c:47:a2:c3:ee:68:bb:10:b7:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:92:C7:DF:56:26:DB:4A:DF:BD:C5:DF:26:B3:46:4C:BA:0F:24:B3
X509v3 Authority Key Identifier:
keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:97:5d:b4:45:fe:80:af:cb:25:ef:77:e4:6c:04:b6:6a:00:
24:a8:a9:3d:0d:65:c9:57:28:9f:f8:89:8c:8e:5d:b6:ee:78:
9b:36:eb:65:8e:3f:34:65:77:80:36:af:51:88:6a:91:e0:69:
5f:37:df:53:6f:81:13:03:42:44:66:29:cd:5b:ae:5a:2a:ac:
79:2f:aa:d4:12:95:b1:91:84:30:6d:9b:93:6e:14:b8:39:e3:
49:f8:9a:71:65:c1:43:66:fc:a6:8a:99:d1:dd:e0:6b:0a:91:
c0:ad:5c:36:53:43:53:92:c2:99:4b:d5:15:6d:bd:e9:cb:fb:
c3:f7:38:1e:fe:bc:33:04:c2:5e:1b:f1:c7:47:14:32:3a:57:
22:34:06:db:78:7a:2b:20:0f:93:2f:ae:dc:5f:8d:4f:a9:97:
19:19:3d:3c:5c:30:c2:5e:35:e2:2d:70:88:dc:0c:ef:15:58:
10:14:55:80:57:2a:e9:09:f1:c3:e6:39:1c:ea:a9:ed:03:d1:
0e:84:5a:9a:11:a4:1f:20:82:43:cf:f9:0d:e2:cf:aa:37:bb:
06:44:d7:47:bf:bc:ee:c3:73:30:e2:bd:4d:b6:29:92:5c:17:
52:4c:4c:76:69:fa:37:9a:a1:a3:06:f6:a7:af:3d:b7:84:f7:
36:dd:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:07 2026 by rpki-client