Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: 5oe9IrZ66tUUAZ0bDthA7GGAXw+l5VFpObafsVKHfpI=
Subject key identifier: A5:D3:04:82:DA:A9:E0:7F:11:3F:8B:C8:0A:42:F8:7C:5B:CF:4D:2C
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 019CAAC718F4EF259E1D9DB5C8A16F10FBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 155F
Signing time: Sun 01 Mar 2026 19:01:40 +0000
Manifest this update: Sun 01 Mar 2026 19:01:40 +0000
Manifest next update: Mon 02 Mar 2026 19:01:40 +0000
Files and hashes: 1: I-G0evMv-W7tENceyq5-skj-8AE.roa (hash: 0oUsrZrwTBnL45zRT8Ja0q/9Hr2Qx4L4ROr/jwER66I=)
2: WfkhMRx1wTZYcucf2qwTH45YfJU.roa (hash: ne29/g3IaHLU5Kezd9KD2anObeKvyRSWNiQhh2XNOoE=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: CvCmOJC7762tZEfabHuaHtUNZC4e9dfAv5nH+y57ykQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:18:f4:ef:25:9e:1d:9d:b5:c8:a1:6f:10:fb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Mar 1 19:01:40 2026 GMT
Not After : Mar 2 19:01:40 2026 GMT
Subject: CN=a5d30482daa9e07f113f8bc80a42f87c5bcf4d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:c1:57:c4:c3:f5:b9:04:4e:84:e9:ce:aa:
ea:00:da:96:dd:f7:c1:bc:39:93:dd:35:e0:14:15:
31:48:df:a0:be:90:e1:06:e5:32:cb:04:bc:c1:55:
a4:7b:30:1b:5a:c8:e8:8a:98:af:0d:a1:8e:9a:48:
29:06:e8:18:d7:82:85:ea:9f:e1:86:25:fd:44:81:
1a:c0:6e:c2:60:67:f5:8b:79:8e:2e:c6:8e:0f:54:
0b:61:02:2d:d6:06:20:70:54:79:3b:b3:2f:1a:40:
03:26:3f:e5:74:26:61:ad:06:07:f6:e1:f2:00:4d:
5d:25:15:e4:a8:a3:99:b7:7e:3d:ed:10:34:4a:7f:
5b:06:a8:d2:bc:78:72:3d:b7:9d:e8:f4:9d:fc:a6:
3f:ba:1a:6d:64:a2:9e:03:21:21:71:e4:71:d3:ae:
a9:ee:14:73:82:54:00:69:20:9c:0d:fd:e3:97:f7:
e5:5d:92:c3:5f:de:be:75:0a:03:ce:3a:af:f5:24:
8e:99:d4:b4:d9:70:5b:d6:83:a2:f9:22:dd:4b:93:
00:35:b5:31:f5:71:dd:6f:a9:23:8f:27:d2:55:35:
16:42:b9:76:c6:c6:d8:5d:60:81:4e:7f:f7:9f:c0:
17:21:63:66:c5:ea:39:3e:18:27:e0:bf:0c:c2:ce:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:04:82:DA:A9:E0:7F:11:3F:8B:C8:0A:42:F8:7C:5B:CF:4D:2C
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:65:e8:87:41:11:12:f6:b2:e2:68:27:22:70:19:4c:38:34:
a4:fe:50:07:c2:56:a2:6f:df:fb:e6:de:ac:97:5c:30:ba:c5:
5b:d0:ad:d6:ad:df:c7:85:a8:2e:93:6c:c2:ca:89:11:26:55:
7f:57:4d:2a:5d:02:8d:87:62:a2:7c:a8:b5:f3:a4:cf:9c:65:
2f:c7:c8:4a:9f:d1:bf:e0:22:25:bd:c5:59:b9:3f:31:28:6e:
ea:85:bd:6f:32:bb:ee:77:36:83:58:25:b4:3c:43:ea:0e:63:
45:8e:26:f4:d9:51:02:70:2f:88:e5:f1:80:68:71:64:3e:d8:
78:18:c6:30:14:41:7f:9b:1a:f0:cc:86:8d:98:d9:cf:0a:30:
60:fa:dc:4e:7f:20:f1:e8:b8:7a:14:31:30:9a:50:d7:81:c3:
5d:cc:39:39:d5:ce:d0:a1:3c:13:48:28:17:f0:c0:1b:07:0b:
e6:96:19:73:11:22:94:a8:c1:59:39:54:69:71:1d:11:d1:e6:
18:d9:60:f8:bb:63:c0:fe:fc:bd:84:8b:b3:1d:1c:6d:e1:71:
00:3d:63:1b:ba:ac:25:80:99:43:77:aa:44:e1:25:6a:44:03:
3f:43:3c:d5:b6:6b:02:8c:a0:6c:1a:84:76:c1:99:88:8d:42:
ca:e8:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:40 2026 by rpki-client