Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json)
Hash identifier: xNvAl9SjMP7K9m5fw8nm95yBw3jG3D4aLSg1hOrnOtg=
Subject key identifier: 70:8A:A6:F6:23:EF:B1:F8:F4:08:85:1C:64:05:C2:D4:67:4F:45:0D
Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Certificate serial: 019D386667D0A7F9C33264308D1523CCC208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:02:08 +0000
Manifest this update: Sun 29 Mar 2026 07:02:08 +0000
Manifest next update: Mon 30 Mar 2026 07:02:08 +0000
Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: ZNK+o4pGROiTp/23Py3lGj+pBhz4LGP+hvg+kFo7RPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:67:d0:a7:f9:c3:32:64:30:8d:15:23:cc:c2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Validity
Not Before: Mar 29 07:02:08 2026 GMT
Not After : Mar 30 07:02:08 2026 GMT
Subject: CN=708aa6f623efb1f8f408851c6405c2d4674f450d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:47:0b:76:e5:eb:76:76:b5:7c:30:40:78:
86:46:4d:42:f0:f6:0a:f7:4c:d0:22:a9:1a:bb:bd:
70:73:b8:c9:e1:19:be:5b:d9:cb:16:d8:2b:65:a2:
12:49:cf:16:11:cf:4b:ed:b1:cf:ee:fb:44:dd:ea:
6c:c7:8c:45:6e:46:26:ba:2d:56:11:15:71:a0:b6:
1b:5c:6d:49:e3:9f:6d:dc:3b:d3:ce:f4:2c:16:58:
7e:96:15:13:d8:12:8b:ca:6a:c6:1d:82:c9:0a:bd:
4e:a6:05:20:db:fe:22:14:6e:86:95:b7:f2:39:58:
09:02:8e:86:12:e9:2e:d6:4b:ab:60:e8:99:8e:88:
ad:f3:28:49:eb:93:c7:56:fb:07:aa:7e:fe:95:d8:
b0:df:e5:61:df:18:11:12:4a:54:02:18:51:57:46:
38:87:36:03:cb:66:89:37:50:6e:d1:40:25:c1:2f:
74:c7:45:1e:36:d0:5f:0e:23:1e:dd:c5:4f:d5:93:
db:3b:6f:42:49:f6:f7:97:9c:23:a7:cb:7b:cc:22:
3e:e9:ff:05:ea:97:17:09:d1:20:51:0c:97:c0:2d:
54:32:02:f1:fe:03:0e:50:9e:1e:e4:3a:63:f1:ee:
57:a3:a2:6d:47:0b:fc:c8:3e:f4:5d:05:0c:7e:32:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8A:A6:F6:23:EF:B1:F8:F4:08:85:1C:64:05:C2:D4:67:4F:45:0D
X509v3 Authority Key Identifier:
keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:59:9b:17:11:05:c8:7e:b6:a6:0f:0b:e2:3d:e2:46:46:a3:
52:de:7b:80:83:32:27:40:b0:41:a9:40:c3:c0:cc:c0:7f:69:
d6:cb:fb:04:e0:1d:59:74:2c:fe:4a:0c:c9:fe:a4:d8:8b:e5:
b0:04:ff:35:1c:15:5d:09:e5:a9:64:80:06:8d:fd:6a:2f:3f:
d8:3d:9b:87:bb:03:d9:5a:7b:ef:54:b0:1d:47:3d:64:af:de:
95:0e:60:c0:fc:74:06:0f:06:5b:7f:78:30:cc:86:f3:4f:77:
2a:c9:b6:38:a0:78:dd:d8:40:26:5a:74:00:1a:2b:19:56:4a:
ea:a0:27:8f:0a:8a:9c:6a:f5:29:b7:e1:33:d6:c8:e9:d6:0e:
ba:73:4c:d2:08:49:80:04:28:83:c3:3c:91:4c:9f:ee:cf:c7:
0b:a5:60:7b:dc:d5:88:d2:ee:7b:8d:00:7c:5e:1f:d2:b5:a4:
3b:3e:90:8a:c5:82:c6:3b:b7:51:b6:50:f6:5e:0f:a1:af:96:
f2:8f:60:13:12:e5:bc:35:12:be:62:a5:5d:3e:d9:86:14:21:
00:7c:86:a5:6c:3c:5b:38:ac:88:ff:2a:b1:f8:03:74:69:e9:
56:57:60:00:d8:60:b4:22:9c:2c:e9:ae:42:35:e9:19:79:be:
73:2f:1d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:09 2026 by rpki-client