Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
File: xnp-TG1V61E8VFdgqP9lba3wuNc.mft (raw, json)
Hash identifier: C674w/ulStXdwfRkFdMJCD9sq72eQuHqVNoFL8f9Dfw=
Subject key identifier: 41:D5:D6:C5:57:5E:3C:84:3E:8E:BD:03:E8:7A:0E:B8:C0:39:13:92
Authority key identifier: C6:7A:7E:4C:6D:55:EB:51:3C:54:57:60:A8:FF:65:6D:AD:F0:B8:D7
Certificate issuer: /CN=c67a7e4c6d55eb513c545760a8ff656dadf0b8d7
Certificate serial: 019D2772E7A34274E8A1CEFD0841EB80CB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnp-TG1V61E8VFdgqP9lba3wuNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
Manifest number: 0450
Signing time: Thu 26 Mar 2026 00:02:14 +0000
Manifest this update: Thu 26 Mar 2026 00:02:14 +0000
Manifest next update: Fri 27 Mar 2026 00:02:14 +0000
Files and hashes: 1: xnp-TG1V61E8VFdgqP9lba3wuNc.crl (hash: U9E8JVNJ33mnV9VUIud4FbrSmqxEBCVGtbeSjnVG3E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnp-TG1V61E8VFdgqP9lba3wuNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e7:a3:42:74:e8:a1:ce:fd:08:41:eb:80:cb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67a7e4c6d55eb513c545760a8ff656dadf0b8d7
Validity
Not Before: Mar 26 00:02:14 2026 GMT
Not After : Mar 27 00:02:14 2026 GMT
Subject: CN=41d5d6c5575e3c843e8ebd03e87a0eb8c0391392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:80:bb:cf:7e:d0:0c:ab:74:10:a5:d6:5b:12:
e4:e1:29:6e:7b:4e:8e:6b:aa:50:6e:2e:f1:7e:9b:
dd:f1:53:0e:de:e1:86:00:93:70:70:ea:ba:48:be:
c3:91:f2:53:93:93:4e:64:a8:37:8d:d5:6d:ab:58:
20:09:79:56:1a:7d:a7:09:b4:25:76:c2:32:ee:ce:
c3:c9:7f:12:01:38:00:74:42:b3:97:bc:0c:64:c0:
6d:cc:f4:81:e1:39:3c:2f:0d:1b:80:88:e6:10:9f:
10:6b:80:c6:df:69:48:81:33:81:40:5d:17:95:9c:
ad:75:39:0b:3f:6b:05:c0:88:85:57:7f:74:0d:cf:
01:c8:49:7b:86:38:21:1f:9a:45:52:fd:ee:2a:0e:
4a:9c:10:4c:0a:f0:c0:5d:8f:42:59:c4:1d:f6:37:
85:2a:b9:76:ef:70:38:7c:f1:ab:45:ff:11:9a:bb:
96:e0:a5:cb:e0:23:88:73:a2:74:0f:96:08:8e:b0:
37:9e:f2:0a:ec:12:85:cc:29:76:f2:fc:93:a1:09:
dc:f8:8a:11:8f:36:27:0f:94:8c:41:5b:7e:fd:e3:
d1:1b:f6:48:08:86:86:93:22:01:f4:f1:33:97:6b:
f9:d8:43:e7:e7:8a:56:00:8b:6c:eb:83:4e:46:c6:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D5:D6:C5:57:5E:3C:84:3E:8E:BD:03:E8:7A:0E:B8:C0:39:13:92
X509v3 Authority Key Identifier:
keyid:C6:7A:7E:4C:6D:55:EB:51:3C:54:57:60:A8:FF:65:6D:AD:F0:B8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnp-TG1V61E8VFdgqP9lba3wuNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:51:5c:35:40:fc:fe:e2:6d:7b:3d:07:0d:2c:c2:ed:c3:28:
ad:8b:d6:ea:df:f8:4a:95:7f:b8:61:64:4a:c9:8c:74:06:74:
fa:42:fa:96:b5:87:83:ad:9d:51:bf:f7:9c:f4:a4:6a:71:7b:
82:9f:7e:b2:a1:3c:be:ac:6c:22:c3:8d:dc:fe:bc:1f:ba:64:
9e:0f:30:01:1d:6e:a8:cb:b2:b5:de:eb:4c:b5:3b:ed:d5:45:
c7:2e:80:fa:b7:8c:24:e2:5f:e6:2a:6e:27:de:ce:86:7a:22:
42:ce:ba:10:a6:11:de:17:e3:81:18:7f:f2:4c:ec:05:40:e5:
07:95:fa:16:65:91:94:7d:57:d5:fe:49:7c:94:2a:ba:d6:45:
97:9e:5c:9a:02:61:19:90:a8:06:fd:5a:31:3b:8c:26:cd:4d:
1d:8d:9c:ca:0b:74:12:96:d7:00:9f:9d:04:fc:bf:a7:06:63:
4c:d1:31:57:6b:37:d2:61:c7:66:25:f0:84:a7:bb:c9:bf:31:
d7:94:c7:7e:75:94:a9:ee:da:db:68:47:e3:1e:6f:75:93:01:
8a:0f:34:69:f6:b8:2d:4d:22:b7:1e:dc:d1:94:72:e8:2a:60:
61:64:bc:90:3c:41:66:22:bc:cf:84:a3:94:b1:49:57:be:c3:
6a:e1:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:47 2026 by rpki-client