Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: DKJpHSEoQSBsJmq6yHjFVlMTMyJSqAs8L2JZ0Rcx8SI=
Subject key identifier: FB:BE:4B:00:61:72:18:BF:B5:5F:EA:FD:B1:9C:CF:DB:96:AA:6B:60
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 019D984FC048FFEFE9DDDDF1D6E8DE2A44BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 15DA
Signing time: Thu 16 Apr 2026 22:00:56 +0000
Manifest this update: Thu 16 Apr 2026 22:00:56 +0000
Manifest next update: Fri 17 Apr 2026 22:00:56 +0000
Files and hashes: 1: I-G0evMv-W7tENceyq5-skj-8AE.roa (hash: 0oUsrZrwTBnL45zRT8Ja0q/9Hr2Qx4L4ROr/jwER66I=)
2: WfkhMRx1wTZYcucf2qwTH45YfJU.roa (hash: ne29/g3IaHLU5Kezd9KD2anObeKvyRSWNiQhh2XNOoE=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: CySTKFlTy0WmsPdlFz3cc+arU+hT6xI1jfnCgn94k+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:c0:48:ff:ef:e9:dd:dd:f1:d6:e8:de:2a:44:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Apr 16 22:00:56 2026 GMT
Not After : Apr 17 22:00:56 2026 GMT
Subject: CN=fbbe4b00617218bfb55feafdb19ccfdb96aa6b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:25:79:05:c0:f9:8d:f5:ba:e0:7b:0b:d0:
1a:c1:c5:db:6f:5d:c4:db:27:c9:3f:b0:dd:77:7a:
e4:75:6b:bf:04:e4:17:24:7e:75:79:65:46:8b:05:
d5:09:07:03:9b:1c:a0:03:54:05:ce:14:45:a4:18:
5c:99:71:bf:c7:bf:8e:4c:da:a5:83:82:c0:be:6b:
bf:d0:23:2c:6e:11:33:1c:67:9c:dd:43:db:7d:8f:
d6:84:8b:74:69:d8:f4:12:53:0a:6b:df:54:96:79:
ac:07:d3:2b:e1:0a:1d:0b:e3:62:02:2a:ed:f2:9c:
f4:5e:b9:8e:29:c5:86:3f:65:71:54:a8:be:a9:99:
b2:7b:bb:63:57:a8:2d:b0:09:6b:49:19:e1:40:15:
d1:3b:71:75:6f:07:8f:79:ad:f2:b5:fc:0d:aa:e4:
27:e5:e5:3f:cd:d7:cd:cb:81:d1:26:be:4b:2c:82:
4e:7d:59:f4:be:39:2c:84:2b:ef:7d:22:cb:8a:2d:
14:b9:fd:e6:86:de:a8:1d:83:e1:0f:8d:3c:b0:67:
53:d2:95:a9:0e:af:14:40:99:39:47:3c:1c:ad:8c:
57:cf:8e:e3:f3:93:7f:a0:62:57:b9:72:4c:0a:22:
eb:b8:d7:90:c8:70:bf:5f:0c:67:dc:ae:b4:1b:2d:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BE:4B:00:61:72:18:BF:B5:5F:EA:FD:B1:9C:CF:DB:96:AA:6B:60
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b5:bd:35:eb:fb:14:4b:0a:98:83:7e:d0:a7:10:2f:bb:8b:
f3:42:0e:0a:8c:a1:73:0e:71:44:ab:22:16:b3:61:69:4f:ff:
40:29:ae:14:b8:76:ea:f2:8c:b0:94:61:ed:83:72:33:d3:43:
4b:2d:eb:05:3c:9e:a0:81:53:f5:ce:b1:ab:2d:8f:e1:c8:10:
ae:05:a9:56:74:28:58:c8:35:f0:cc:a8:92:42:89:90:9a:04:
bc:29:ed:e2:64:b4:2d:43:5e:0e:32:8d:b0:83:b3:cf:6f:c4:
0b:d3:eb:41:66:0d:a3:98:78:f3:ce:ee:06:76:e1:bb:59:9d:
64:40:8c:70:35:c9:53:bb:d3:db:60:e6:bf:1e:83:8c:2a:e6:
c1:47:5f:6b:47:cc:75:ab:8e:ae:b0:ec:a6:c0:97:4d:11:61:
65:9a:e0:be:6c:ac:8b:42:79:26:a9:3c:9c:72:36:1d:f6:5b:
cb:cc:08:e1:f1:dc:a2:47:16:2c:d5:46:1d:e9:f4:ee:d2:b1:
9c:33:ff:c2:41:22:6e:fd:37:e9:10:a5:e3:51:99:e3:9e:df:
65:61:78:c5:ed:e0:0f:46:fb:84:89:f0:d1:ec:45:9a:17:e9:
c0:39:a9:99:7e:48:e8:21:c2:37:e8:af:9c:a7:ab:3c:c9:2e:
98:87:0c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:01 2026 by rpki-client