Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json)
Hash identifier: kgpixJ19tf/oYYhO301flQawlF6XlX04vRVWL/ebWMY=
Subject key identifier: 80:1F:8A:9A:9D:5A:3D:BA:7F:CD:E9:84:F8:A2:F9:44:0D:15:9E:4D
Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Certificate serial: 019D2703EB7501736C2C064F6257AD9A241C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
Manifest number: 05D2
Signing time: Wed 25 Mar 2026 22:01:01 +0000
Manifest this update: Wed 25 Mar 2026 22:01:01 +0000
Manifest next update: Thu 26 Mar 2026 22:01:01 +0000
Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: butuiO3ZjCHdFkghu+CpF6jba+V4KbGn29MFuHproic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:eb:75:01:73:6c:2c:06:4f:62:57:ad:9a:24:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Validity
Not Before: Mar 25 22:01:01 2026 GMT
Not After : Mar 26 22:01:01 2026 GMT
Subject: CN=801f8a9a9d5a3dba7fcde984f8a2f9440d159e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:29:68:a4:8a:ee:b3:1b:d4:58:62:27:91:
de:c1:94:34:a5:44:ec:ad:43:16:b9:bf:30:a8:48:
86:f8:e9:17:8b:e0:4b:b3:e0:0a:d1:67:bd:3f:83:
a4:d3:f7:0b:53:e3:26:d6:84:41:8e:f1:21:a1:85:
a4:ea:a3:7a:33:73:27:79:97:29:61:00:b7:55:2d:
78:3b:6c:2e:0a:47:4f:f0:0b:7d:c9:fa:0b:55:41:
6c:a1:76:db:af:4d:0e:6d:2f:81:3b:93:b6:36:e0:
18:8f:3b:78:04:d5:c6:fa:23:cd:e5:50:e1:29:e0:
11:e9:f6:66:aa:60:fc:26:33:21:eb:14:61:c9:0b:
e6:d8:26:c8:bd:19:5c:d3:fe:20:e5:42:fd:8f:94:
72:80:cf:9c:5e:d0:fe:4c:14:e7:4b:7d:d9:66:cb:
64:0c:2e:eb:13:90:b3:d5:e8:ea:a1:3d:65:8c:a0:
9c:fd:c5:6e:6b:20:d7:01:15:1c:e2:5a:90:b5:23:
1c:c1:35:36:2c:42:66:f9:19:43:f1:f7:ca:c5:3b:
9c:6a:54:31:89:39:e7:c0:63:1e:6a:d7:3e:39:83:
0e:f6:a7:ca:b1:08:10:f0:4d:83:c1:db:9b:28:bb:
24:2e:6b:28:33:b5:91:df:ac:16:46:de:b5:e4:1c:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1F:8A:9A:9D:5A:3D:BA:7F:CD:E9:84:F8:A2:F9:44:0D:15:9E:4D
X509v3 Authority Key Identifier:
keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3a:b3:0a:88:8a:16:08:ee:b3:9e:c9:9c:70:a8:f0:7c:1b:
95:c6:7f:ce:93:10:2a:52:bd:20:b3:0d:eb:ff:24:b4:b4:44:
47:d1:ba:d1:f2:68:2c:2c:c6:f6:4c:63:c6:e6:98:b6:72:74:
39:0a:60:8a:a4:f9:32:27:d4:93:8d:e1:ef:aa:f6:f1:6d:db:
51:ea:05:6a:f8:e7:1f:8c:c0:b3:24:23:bc:66:52:e9:9c:73:
fa:69:69:0c:13:b0:97:13:85:af:f6:94:38:42:ba:ca:7e:cd:
25:99:cb:97:0a:c5:2d:3f:62:e6:36:30:96:6f:64:9f:1d:8e:
3b:03:78:40:02:fd:34:02:16:cb:0c:25:8c:0d:02:59:36:18:
d3:68:3c:2c:de:7b:b9:67:3b:a8:84:66:c1:31:2a:e6:89:33:
1e:00:78:62:1f:a5:cc:e9:5d:b2:ac:24:6e:ad:93:6b:ea:71:
87:58:ce:f2:ff:7b:a1:f5:cf:27:fa:4a:6b:ad:b6:c3:0c:a4:
16:4e:1d:34:64:24:41:15:df:5c:49:e3:49:b8:81:ae:a1:51:
65:20:82:ff:8e:af:41:22:52:ed:0c:a2:15:81:bb:c8:50:b8:
8c:3f:bd:d9:da:b0:c9:6f:9d:88:c9:f8:6a:9d:59:35:28:83:
24:64:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:46 2026 by rpki-client