Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json)
Hash identifier: yuo5m5rpV/GU/tAnrKYcWV/ZFQ8JN5n+1F1GFR3EuIo=
Subject key identifier: 61:FD:FE:FB:0D:56:5F:99:A3:8B:87:1B:FB:AE:CB:77:70:36:D2:54
Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Certificate serial: 019CAB6B3AC843FA3B3DA92B38C10D7FF158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
Manifest number: 0592
Signing time: Sun 01 Mar 2026 22:00:57 +0000
Manifest this update: Sun 01 Mar 2026 22:00:57 +0000
Manifest next update: Mon 02 Mar 2026 22:00:57 +0000
Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: b5bRx7tTjG1KLkTiDraxhdntLlMgMnfkpE9JF7B7q6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:3a:c8:43:fa:3b:3d:a9:2b:38:c1:0d:7f:f1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Validity
Not Before: Mar 1 22:00:57 2026 GMT
Not After : Mar 2 22:00:57 2026 GMT
Subject: CN=61fdfefb0d565f99a38b871bfbaecb777036d254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:1e:96:c8:6c:96:73:26:29:97:0e:90:72:
12:01:39:d1:a1:16:56:57:6d:54:c8:ca:7f:ae:ce:
b4:65:06:35:cd:e2:db:0b:a1:5c:e6:bb:9e:79:d1:
d4:07:48:06:db:12:13:7d:85:a6:00:df:59:69:70:
d1:3a:3c:f7:3a:15:46:f6:ab:1a:38:a5:eb:57:a7:
46:de:66:4c:e7:10:61:3d:6d:1a:69:ad:84:56:8c:
3e:c7:89:71:43:e9:5e:1c:c7:d3:b6:cd:d2:90:f9:
c9:04:7b:4d:d1:6c:74:20:cc:74:b7:cc:66:5d:ba:
3c:db:d9:f3:58:41:5b:4b:65:78:b7:1d:12:85:b6:
ac:19:5c:29:51:d0:31:02:a0:cf:51:9a:e0:ae:e6:
2e:fc:fb:24:7e:7d:68:c4:6e:a4:4e:9a:c0:1e:f9:
ce:89:b5:07:3e:8e:03:2b:a1:c5:d5:95:f8:7e:f3:
0a:a4:7e:47:e2:ba:76:20:4a:b1:6d:cf:12:61:82:
f0:55:08:77:1d:40:16:7f:09:ee:26:59:60:0b:de:
39:db:3f:92:72:a8:68:09:bb:a2:90:f4:04:1a:e2:
33:e2:c1:31:8f:e2:5a:16:e6:d5:19:21:81:3b:b2:
95:67:27:6c:0f:bc:a1:6e:75:1f:c5:9e:e4:61:d0:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FD:FE:FB:0D:56:5F:99:A3:8B:87:1B:FB:AE:CB:77:70:36:D2:54
X509v3 Authority Key Identifier:
keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:27:2a:30:09:90:80:6d:c5:9d:d5:5e:3c:0a:95:e8:46:08:
96:59:a3:92:4e:fc:15:c0:58:8b:c7:15:8d:98:8f:65:b2:76:
ca:8e:88:e9:3c:51:22:02:61:e9:c9:da:8f:15:d9:d6:e4:bf:
1c:65:b0:32:75:bb:27:62:77:cd:93:e9:35:ab:60:42:cd:ed:
25:0a:8d:c7:4d:45:22:ca:65:d4:b0:33:68:e6:39:69:ed:70:
ab:bf:54:55:f6:8e:6b:36:2c:21:83:b2:3e:cd:24:93:dc:02:
c2:38:06:54:e8:0b:79:c5:98:b8:c0:f5:ba:30:17:2d:a0:2d:
5e:24:b2:52:e7:03:b9:6c:c4:d1:f9:3d:d6:f8:74:e2:6f:77:
3a:0b:bb:91:21:f6:32:5a:e2:95:7b:01:8f:b4:53:c5:fd:f1:
ba:67:be:2a:df:e9:a4:c5:a7:3a:e3:51:53:79:aa:c3:df:b4:
db:a6:af:9c:4e:5c:0a:64:17:0d:be:e9:b0:3b:0a:e6:0a:f5:
21:c8:e3:6f:8a:8a:e1:d2:bf:de:1b:31:88:47:1e:b9:b6:4b:
c4:43:b6:3d:6e:8e:71:29:2a:c4:26:c5:78:08:14:a5:06:16:
08:fc:fd:fc:58:5d:5c:2f:ab:26:7c:2a:e6:41:8a:cc:c9:02:
3f:de:a6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:38 2026 by rpki-client