Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
File: xqnvrGfjS7iro4n_jw16HFZUM_0.mft (raw, json)
Hash identifier: YQheEVI5bT/uHP3R6yHTcD9rJxzC5GGtGWqhl+f0Aus=
Subject key identifier: 78:CC:88:DB:AB:8A:63:F3:00:D8:6E:73:89:F3:1D:BB:11:30:A5:76
Authority key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Certificate issuer: /CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Certificate serial: 019D27A90F4E4C39C14FA7C8E8649FB39BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
Manifest number: 0F92
Signing time: Thu 26 Mar 2026 01:01:24 +0000
Manifest this update: Thu 26 Mar 2026 01:01:24 +0000
Manifest next update: Fri 27 Mar 2026 01:01:24 +0000
Files and hashes: 1: xqnvrGfjS7iro4n_jw16HFZUM_0.crl (hash: VGqtMTs+5IHWE4V9nfUas3VXNFiT1pLYknc84KwaefY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0f:4e:4c:39:c1:4f:a7:c8:e8:64:9f:b3:9b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Validity
Not Before: Mar 26 01:01:24 2026 GMT
Not After : Mar 27 01:01:24 2026 GMT
Subject: CN=78cc88dbab8a63f300d86e7389f31dbb1130a576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:f9:4d:f0:49:ce:c8:a7:e9:83:f8:59:67:
3c:41:cd:c0:99:bf:77:78:42:6a:4e:a4:91:e4:b5:
cf:53:f3:f6:d5:fc:7c:cf:d8:85:ba:fd:bc:45:5c:
b8:98:e7:ff:d2:a1:9d:0f:bc:b0:98:e3:15:0a:1f:
42:fe:14:ba:21:04:6c:73:bb:00:07:ee:a6:a2:6e:
4b:41:fe:ca:19:30:e4:68:ab:87:64:2c:93:7b:ad:
da:b3:5d:01:23:ff:24:d5:e7:42:9e:cf:eb:38:9d:
59:c7:b9:91:94:99:70:21:4c:49:53:92:dd:c0:bc:
ce:9c:c8:89:5e:b6:7e:9a:fb:bd:6d:93:29:33:03:
ed:fa:76:cb:95:26:93:26:dc:66:ee:21:6a:e7:89:
c0:35:6b:c0:be:1c:13:17:5e:dd:5b:8d:65:af:68:
2c:b7:62:68:95:31:17:79:d4:89:90:93:1e:81:81:
d2:50:61:99:05:c0:6d:1c:34:48:b7:ea:72:67:87:
f4:21:0c:69:2e:55:a4:75:a0:25:c6:cb:73:c3:b9:
a2:55:4b:ef:ec:50:00:a2:50:66:17:bf:55:29:70:
26:c8:0b:a0:e8:40:94:d4:81:69:b7:0f:43:7b:bc:
53:75:cd:26:31:7c:bb:07:f8:4f:0e:17:28:42:fe:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CC:88:DB:AB:8A:63:F3:00:D8:6E:73:89:F3:1D:BB:11:30:A5:76
X509v3 Authority Key Identifier:
keyid:C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:57:67:41:ae:32:50:c2:b8:58:a4:25:f0:c4:c1:16:bb:a5:
da:66:af:2f:2e:a4:2c:d3:4a:52:ff:af:ba:d1:47:bd:19:00:
b8:4e:e9:0d:a8:35:a6:a3:21:a7:1c:48:26:3d:18:29:d8:00:
a3:cc:fd:19:e7:98:b3:ae:d9:1a:00:8a:1a:c5:3d:4a:fa:a2:
ba:dc:70:f4:3b:59:4a:b6:ec:60:04:6b:54:71:93:cb:dd:67:
ad:c4:0a:b3:2e:35:66:32:5c:6c:32:13:a8:d1:04:67:0b:41:
e9:30:70:9c:a0:e9:32:fc:e5:86:81:e1:24:37:69:fc:33:a7:
f9:f6:7d:bd:8c:b9:b8:62:90:2a:e7:5c:af:6c:d0:3d:db:e0:
67:cf:ee:4f:8d:97:9d:3a:94:24:ef:c6:e8:c7:1b:28:92:bc:
b6:6d:42:3e:79:9a:db:23:c6:83:0d:bd:a7:52:ef:68:86:0e:
22:dd:d0:06:78:f8:a5:99:c1:11:0f:4b:95:f3:0a:c7:e4:52:
3f:5f:17:92:d6:fd:ec:35:6c:d0:dc:e3:c8:d4:0e:80:ea:03:
ae:bf:72:c1:48:b7:c2:ff:ff:d0:1c:fa:20:6c:2c:76:95:2c:
e6:a2:92:c2:ed:1c:fb:e4:38:ef:c4:aa:a2:51:7b:81:2b:0b:
b0:37:14:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:59 2026 by rpki-client