Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
File: xlkRwmkydt2NDOt_hKoqtJ79EIk.mft (raw, json)
Hash identifier: sr2uyJlddIMffFvJ2oJdbN6qKiZj3t2VhmUZQAz94pk=
Subject key identifier: CA:CA:F5:EA:82:20:30:25:B3:68:5B:03:D9:88:AE:C9:2F:E0:59:17
Authority key identifier: C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
Certificate issuer: /CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Certificate serial: 019D25F113AADE0EDF2D29DEA1481559B042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
Manifest number: 0682
Signing time: Wed 25 Mar 2026 17:00:49 +0000
Manifest this update: Wed 25 Mar 2026 17:00:49 +0000
Manifest next update: Thu 26 Mar 2026 17:00:49 +0000
Files and hashes: 1: xlkRwmkydt2NDOt_hKoqtJ79EIk.crl (hash: SzB46yRJSi/NgLoyvgHhsohXnesQlo5LRLtY0LJ5Hto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:13:aa:de:0e:df:2d:29:de:a1:48:15:59:b0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Validity
Not Before: Mar 25 17:00:49 2026 GMT
Not After : Mar 26 17:00:49 2026 GMT
Subject: CN=cacaf5ea82203025b3685b03d988aec92fe05917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:31:fd:a7:e4:7c:ac:12:20:3f:3a:4c:7b:
0c:03:e8:97:66:f3:9f:f6:76:d3:41:2a:f0:09:92:
b6:7c:2e:41:c3:8f:48:48:80:7d:8b:6d:91:b8:94:
b4:e6:7a:23:59:2c:f3:03:eb:54:8b:9d:7c:14:4d:
4e:93:c5:3b:20:b8:80:04:36:95:fb:2d:d6:d4:a3:
80:b1:4d:57:40:1f:13:da:58:78:ce:ec:a3:b9:33:
90:23:65:b6:3a:39:c4:63:84:3f:af:48:14:6e:a6:
a8:20:d6:c7:74:5d:ca:02:4c:ce:0c:ac:ce:56:7b:
92:b9:e1:89:da:cd:0a:24:f8:a2:84:d1:1b:eb:fa:
6e:9c:24:4e:38:6f:b4:4e:af:d1:6b:69:ef:1a:37:
d0:d5:8c:6b:40:a8:71:96:94:0e:f1:73:0e:70:b8:
dc:53:0f:88:75:3f:31:3d:25:51:c2:1b:47:d3:1a:
62:8d:6a:6f:2c:e8:f0:e6:ba:af:6c:8c:f3:39:7b:
61:19:b3:1e:11:36:5e:ad:ad:54:9b:bc:7c:6e:7b:
4f:a2:1e:d0:f0:ac:83:b9:35:52:d4:73:c1:50:3c:
42:56:0c:17:3b:ed:1b:b6:45:3f:a8:3d:f8:e5:d8:
ff:4f:96:c7:c2:95:7b:ea:c2:43:4f:cc:4a:8a:e5:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CA:F5:EA:82:20:30:25:B3:68:5B:03:D9:88:AE:C9:2F:E0:59:17
X509v3 Authority Key Identifier:
keyid:C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f1:2b:b6:20:df:66:50:4b:1f:6a:e3:0b:7f:4e:9a:ed:3b:
d5:50:70:36:2e:52:d7:f6:fb:e2:53:6e:fd:97:63:1c:cd:c2:
a1:08:8e:11:22:33:cd:d9:7c:53:fa:fe:5b:7e:5b:4b:69:88:
88:68:41:45:86:37:4c:63:86:95:53:5e:86:44:29:2f:f9:3b:
67:72:97:6d:5f:73:b8:e0:26:73:7e:05:01:56:da:4e:d4:a5:
72:b2:aa:ed:f5:e6:1a:17:ae:ea:47:9c:50:07:72:96:28:16:
af:6b:83:88:35:74:91:82:73:9d:f0:3b:59:f0:3a:26:de:c0:
36:ad:3e:6c:55:d3:49:eb:92:03:c7:31:7f:54:75:f2:a2:c1:
44:91:12:c8:b9:25:a2:93:a2:3b:ea:f9:44:0a:8b:a2:25:0f:
1b:d5:0f:8c:66:1e:18:95:c3:c5:0b:8a:4c:f7:f9:4a:be:19:
ab:45:70:63:07:e5:65:79:45:dc:07:d1:83:9f:ee:cc:81:05:
10:dd:65:c3:6a:25:d5:b6:e7:75:b2:65:f5:c0:60:f2:e0:02:
69:48:24:65:f2:79:7b:61:a1:a4:84:fb:34:e1:41:4f:ac:9a:
81:ff:aa:41:75:3d:cd:57:d2:03:d0:e8:9d:34:01:f1:d9:ae:
a0:3f:22:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:50 2026 by rpki-client