Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json)
Hash identifier: 6NHgHOZmZs0VYdf41Fumjw/6oEsgAukf9GL6A12jQFY=
Subject key identifier: E4:A9:C6:C3:7F:CB:83:6F:6B:65:19:79:00:4C:F5:99:61:0B:9A:F8
Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Certificate serial: 019D98F4ABAB52E4AB762347EDDBEDF91873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
Manifest number: 060D
Signing time: Fri 17 Apr 2026 01:01:04 +0000
Manifest this update: Fri 17 Apr 2026 01:01:04 +0000
Manifest next update: Sat 18 Apr 2026 01:01:04 +0000
Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: K4iw/sGVS+O8ex9J4pUzLK4S2/S9BSvaESmltBmZRUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ab:ab:52:e4:ab:76:23:47:ed:db:ed:f9:18:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Validity
Not Before: Apr 17 01:01:04 2026 GMT
Not After : Apr 18 01:01:04 2026 GMT
Subject: CN=e4a9c6c37fcb836f6b651979004cf599610b9af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:22:5f:02:db:62:a8:9b:91:89:fd:9b:0a:
28:66:8b:5e:94:0a:44:88:ed:c7:a1:3c:8f:1e:76:
d2:cc:82:31:c3:d7:7d:f9:7d:da:a8:02:d9:d4:c5:
2a:a5:39:20:b5:46:71:a7:d7:49:66:31:48:6f:51:
2f:de:bc:00:c0:9d:db:44:ff:65:ec:5c:52:15:9b:
cb:b5:36:a7:dd:50:e0:67:49:e2:94:01:88:28:be:
9a:a1:5a:c6:7a:eb:b7:9f:b3:6d:b7:36:67:0f:fc:
7e:91:ce:af:40:e5:b3:57:fb:89:f5:2d:fc:42:34:
94:67:e7:48:dd:ed:ca:44:98:64:82:85:82:cc:18:
0a:4f:14:8c:9f:fd:87:77:b9:e1:5e:bd:4c:1c:8b:
03:5c:30:36:4a:6e:99:0d:94:2d:f1:d7:be:79:d4:
86:26:62:48:f4:5c:6d:63:40:aa:47:fb:e7:31:a2:
dd:73:07:3e:8e:16:27:d3:e3:08:25:61:74:51:d2:
6a:4f:7f:4e:a1:f6:fe:6a:d7:85:87:1c:99:73:6e:
f9:15:e5:1c:16:4a:93:e0:5e:13:24:10:6a:d4:22:
7b:2d:fe:9a:be:37:56:8c:0d:15:30:2a:87:03:8b:
97:f6:51:1b:da:c7:95:5a:b7:d2:9f:a4:92:88:a3:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A9:C6:C3:7F:CB:83:6F:6B:65:19:79:00:4C:F5:99:61:0B:9A:F8
X509v3 Authority Key Identifier:
keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:51:71:4c:ff:30:9f:94:7f:33:43:46:96:e7:e1:c2:d3:b2:
a9:91:4f:13:c5:cc:a2:b9:25:69:b9:8e:f2:02:a0:45:5a:c2:
7b:d8:bb:6e:a3:f7:85:92:0c:e3:e0:e8:02:a2:a3:e0:f7:99:
23:a0:af:a3:e5:94:b9:56:db:2e:22:b1:95:15:61:9c:1c:70:
57:75:f6:89:86:76:9d:f2:93:eb:63:be:9e:75:da:ad:90:57:
ce:ba:5a:21:c9:7d:67:be:9b:fc:f5:2f:2e:d9:1b:f8:b0:0c:
1b:a1:51:ae:e2:e2:51:0b:58:bf:d1:ed:ca:2e:2e:3c:ec:b4:
83:74:3e:c3:1a:06:7b:e8:58:5c:72:4b:e2:8e:f6:2d:05:43:
19:e7:3c:3a:42:87:ec:48:15:af:11:7c:0b:3e:1d:8b:71:6a:
84:7a:14:7a:61:4f:b5:85:cd:a0:51:bc:9b:25:d1:da:f1:d2:
73:90:bd:e0:ca:39:48:72:ff:6d:eb:11:7f:e1:03:5a:d8:10:
00:70:fa:b2:99:44:5f:cb:5d:21:05:51:87:c9:3c:7b:53:a9:
cb:04:bf:fc:d5:1a:7e:7f:76:59:06:19:9f:bd:3f:13:5a:b9:
99:06:03:5b:5d:de:14:42:20:46:b8:9a:5e:b7:60:24:9c:6a:
87:e2:fc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:17 2026 by rpki-client