Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
File: XeNpl3lT5b198zgXiKQlpXvBwlQ.mft (raw, json)
Hash identifier: Tzv7QBkLTSuCRWrwpQFv6eMlyoQ0zgFXdUskXDzK+Ik=
Subject key identifier: 7F:22:9B:D7:B0:7A:B2:1A:37:5C:0E:85:16:F2:99:6E:15:99:A6:B4
Authority key identifier: 5D:E3:69:97:79:53:E5:BD:7D:F3:38:17:88:A4:25:A5:7B:C1:C2:54
Certificate issuer: /CN=5de369977953e5bd7df3381788a425a57bc1c254
Certificate serial: 01A0E175031376223F54AAEB07CB89918572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:02:17 +0000
Manifest this update: Sun 27 Sep 2026 06:02:17 +0000
Manifest next update: Mon 28 Sep 2026 06:02:17 +0000
Files and hashes: 1: XeNpl3lT5b198zgXiKQlpXvBwlQ.crl (hash: KaIMt6o0N8gQVxq/fu1Df1GgkVChnFcRxRbTnD1FAa4=)
2: gjzkvOpwo1VRhdor0ibZ6CC1RMY.roa (hash: rl9pYDDMx4wTP/iHtIkLTivkQb2U2V3qvKBigsxkyqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 06:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:75:03:13:76:22:3f:54:aa:eb:07:cb:89:91:85:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de369977953e5bd7df3381788a425a57bc1c254
Validity
Not Before: Sep 27 06:02:17 2026 GMT
Not After : Sep 28 06:02:17 2026 GMT
Subject: CN=7f229bd7b07ab21a375c0e8516f2996e1599a6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:7c:9f:fc:cd:4a:ab:47:cf:12:3a:5b:64:
1d:c1:c4:9a:9f:31:83:2f:f7:05:b4:6c:83:ee:7a:
0f:3b:28:86:51:5b:a5:ec:08:1b:cd:25:87:e9:1b:
a9:6f:b7:c0:97:a3:a7:22:d1:8f:63:f4:db:7b:b2:
37:2d:8b:d2:a6:75:35:23:07:47:92:72:d1:93:40:
7c:8d:22:b5:91:a2:9a:d5:91:68:c4:4d:b7:0c:00:
08:d9:74:7c:f8:84:64:fc:d2:fd:98:5d:10:78:ef:
65:8b:48:de:fe:79:d3:0c:1a:8e:ec:45:f7:8a:29:
8c:47:5b:61:a7:c7:0d:3b:2f:04:ca:89:bf:32:ce:
a1:9f:47:24:8e:e6:db:14:d5:63:bc:ab:cb:e7:21:
55:62:80:67:e6:29:85:ae:96:72:51:ef:fb:1d:ce:
78:ab:bb:e7:45:8e:ac:57:3e:d5:7f:d0:90:38:71:
a6:75:5a:2a:a4:16:34:58:df:75:88:7e:e4:32:e8:
7b:af:e1:d9:17:10:5a:fa:47:9a:cb:51:2e:4f:cf:
66:76:47:db:9e:d8:ff:f4:75:01:27:95:ba:7e:af:
36:66:43:13:66:4f:a4:df:24:61:ee:d6:ee:eb:49:
da:82:07:25:c9:f7:3b:cf:0b:b8:e4:79:b9:02:4e:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:22:9B:D7:B0:7A:B2:1A:37:5C:0E:85:16:F2:99:6E:15:99:A6:B4
X509v3 Authority Key Identifier:
keyid:5D:E3:69:97:79:53:E5:BD:7D:F3:38:17:88:A4:25:A5:7B:C1:C2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5a:4c:14:3d:ba:ef:64:6d:18:9d:b9:d0:21:2a:33:b2:c5:
86:aa:ea:d1:17:73:1f:58:00:ed:a2:82:c0:6c:19:91:2b:b8:
ae:b2:6d:dc:59:af:79:ac:20:e5:4b:38:45:b9:01:0e:0a:f9:
55:ee:fb:9c:ba:5e:9d:dc:16:77:38:2c:1d:61:6d:58:24:68:
c1:2b:7a:8b:13:77:d2:0c:a9:af:07:01:58:40:db:24:54:d4:
fd:4c:1f:a9:0f:c8:24:41:4b:17:f4:81:5f:b3:f3:f7:22:d2:
f2:9d:48:59:c5:91:ab:bf:d7:52:81:43:dd:29:0b:99:0c:ab:
eb:7d:51:d4:10:2c:95:1b:4f:bc:9c:38:85:69:6d:78:45:c6:
e6:82:40:2c:8e:77:f4:79:84:f1:ee:42:d5:1d:bd:02:8b:92:
a2:f1:5c:73:c9:1c:ab:57:e2:38:5e:b1:59:7b:73:4b:65:2b:
43:e8:02:c8:31:00:5d:4c:01:ce:9e:4a:be:be:da:a1:e8:36:
39:26:f5:56:b0:0f:66:fc:d3:da:30:76:80:a1:d4:93:61:a7:
62:91:4c:6c:f7:d2:8a:e2:62:8b:f3:e5:fb:a2:86:73:32:44:
00:67:b3:c4:b3:1d:63:0f:bd:00:1c:b1:e0:a7:66:5f:39:00:
bd:7e:77:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:42:51 2026 by rpki-client