Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
File: xykw_A7V-O90yB7YYTnHPl1a2FU.mft (raw, json)
Hash identifier: OaIEyxx1KDVdIhlIm1qYHlBjgcPRUrRLWU4O2E9Aa7s=
Subject key identifier: EF:41:C3:55:F5:36:E8:DB:7A:2C:6C:45:E9:AE:08:8D:3C:44:3E:A2
Authority key identifier: C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
Certificate issuer: /CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Certificate serial: 019D2960D645ED60D3CC5B900B7DBF3B8D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
Manifest number: 0300
Signing time: Thu 26 Mar 2026 09:01:45 +0000
Manifest this update: Thu 26 Mar 2026 09:01:45 +0000
Manifest next update: Fri 27 Mar 2026 09:01:45 +0000
Files and hashes: 1: xykw_A7V-O90yB7YYTnHPl1a2FU.crl (hash: +Wcrp2ogezQAL3ncLocJm8k6eHOkIitmWRWJhbst0D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d6:45:ed:60:d3:cc:5b:90:0b:7d:bf:3b:8d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Validity
Not Before: Mar 26 09:01:45 2026 GMT
Not After : Mar 27 09:01:45 2026 GMT
Subject: CN=ef41c355f536e8db7a2c6c45e9ae088d3c443ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:78:83:cd:c6:7f:3a:a1:30:99:02:3f:88:
13:3b:00:22:38:09:fc:98:7e:40:aa:78:8f:e9:6d:
d4:a7:0d:ff:b6:94:78:d0:2f:07:d7:5f:36:9a:9d:
71:39:10:a0:a9:fa:f6:3c:10:9e:00:41:80:10:fa:
21:52:5e:e2:56:fb:e0:c6:ed:e2:8c:62:25:ca:af:
d4:58:66:a2:1f:61:31:b9:01:06:b2:e2:87:87:b0:
3f:26:8b:85:36:24:4f:d3:8e:f7:0c:ae:8f:7c:b9:
03:4b:16:e0:10:02:be:68:79:3b:04:9a:7d:f4:9e:
c5:62:4b:27:64:ba:fd:92:cd:2b:96:0d:38:05:c8:
1b:5a:51:fe:46:43:0e:15:e7:55:88:47:6e:d2:8a:
d6:19:da:c8:95:21:62:7a:fa:25:e5:96:b8:e7:69:
b9:50:9a:6a:34:79:fd:09:42:67:2e:e9:21:7a:54:
25:4f:fd:62:52:ce:6d:5b:8d:49:35:2a:20:8d:33:
f5:95:ad:b8:23:0c:fc:e5:85:78:99:73:d7:4e:de:
84:85:21:ee:7e:00:cc:5e:c2:6b:ac:9f:20:55:7d:
51:d1:b2:4a:80:58:7c:f2:c9:bf:28:d9:4b:6a:96:
b1:f1:c2:75:2a:6d:e5:22:92:6c:91:ed:0b:b8:64:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:41:C3:55:F5:36:E8:DB:7A:2C:6C:45:E9:AE:08:8D:3C:44:3E:A2
X509v3 Authority Key Identifier:
keyid:C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f0:6f:d4:97:11:e2:2d:8b:42:25:8d:6f:da:d9:f4:9e:fa:
af:ba:40:fb:13:38:7a:64:75:ee:0a:76:75:15:0f:17:25:93:
ef:e6:09:fb:b8:31:6c:a2:a8:5c:17:ba:99:38:a1:9f:1c:3d:
dd:7d:dd:40:06:fe:ee:77:05:f2:18:65:9a:09:67:75:e2:9c:
04:63:1d:c9:03:de:1a:6c:8a:3a:14:40:79:1f:99:8a:af:dc:
4f:84:8c:b7:0d:6d:f6:89:bc:05:57:37:a7:d5:b8:05:9a:a5:
fd:70:b1:e0:e9:34:ca:f7:fc:68:13:07:77:7f:6d:d4:2e:30:
21:e0:b3:10:3f:28:3f:3b:31:c6:47:b3:0f:03:89:88:68:bc:
cf:0b:e2:d8:09:9b:18:0c:92:d4:f1:79:26:92:59:6f:cb:ec:
3d:b7:7c:2f:37:ff:9c:3b:ee:e1:b0:04:78:13:c6:63:75:4d:
a1:3e:4d:72:0a:22:63:ad:e4:6a:2e:1e:12:3b:b3:0a:ef:2d:
cb:d9:08:db:46:3b:f3:fa:3b:70:ca:0c:62:bb:58:0e:9c:87:
c4:66:2b:ea:28:15:2d:00:5d:b2:3b:92:14:e3:60:0f:d0:9d:
c8:ec:a3:4c:83:d9:f3:90:11:8e:c2:5a:2c:3d:53:bb:9d:02:
89:77:2e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:18 2026 by rpki-client