Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: fz+YfI/15N5ngHxQxRw6z8uXVnevV0MlbEXtixvCiK8=
Subject key identifier: 96:F5:9A:FB:9D:EA:FE:CB:AA:E0:BF:F2:0D:AB:E4:AC:B4:31:73:1A
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 01A0E0615A64183E118A749D69E2A0D89D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 178D
Signing time: Sun 27 Sep 2026 01:01:11 +0000
Manifest this update: Sun 27 Sep 2026 01:01:11 +0000
Manifest next update: Mon 28 Sep 2026 01:01:11 +0000
Files and hashes: 1: I-G0evMv-W7tENceyq5-skj-8AE.roa (hash: 0oUsrZrwTBnL45zRT8Ja0q/9Hr2Qx4L4ROr/jwER66I=)
2: WfkhMRx1wTZYcucf2qwTH45YfJU.roa (hash: ne29/g3IaHLU5Kezd9KD2anObeKvyRSWNiQhh2XNOoE=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: fzySBoTl1Z92JHKTSe8UkrII7h3phxuKzHX5+e08VUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:5a:64:18:3e:11:8a:74:9d:69:e2:a0:d8:9d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Sep 27 01:01:11 2026 GMT
Not After : Sep 28 01:01:11 2026 GMT
Subject: CN=96f59afb9deafecbaae0bff20dabe4acb431731a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:6f:f4:e1:95:5d:8e:55:01:3c:07:b8:81:
20:d0:23:6d:3b:6a:14:f2:ab:5f:c4:54:21:05:33:
06:27:ba:11:0e:a3:30:fe:91:d2:bd:1c:2a:07:d8:
b2:8c:3c:53:de:36:61:ef:62:5c:fa:d3:0e:f7:6d:
3f:b8:b6:cd:03:be:a0:6b:fd:46:dc:de:c6:68:61:
7a:cf:c4:4e:0d:fe:c2:fd:b5:2b:e1:78:76:8d:a3:
8c:99:b4:ca:52:bb:f5:74:84:47:46:e0:cd:bf:e3:
d2:fc:b6:ff:2d:fa:e8:32:6c:66:64:c3:9a:86:8a:
2a:af:ff:23:f8:4c:57:01:6a:20:8d:1f:e7:79:fd:
49:62:66:90:a1:f3:69:61:26:0c:32:42:ae:3c:7e:
b3:23:f9:0f:b3:f2:f8:9a:6e:12:8d:26:67:a2:9b:
8e:09:c0:03:48:73:5c:f9:f9:30:1b:2b:3e:5f:fd:
84:07:dd:0c:ea:a9:9f:63:35:f0:82:c8:cc:46:05:
70:bb:3d:72:d0:4b:ca:17:01:76:72:1b:00:ac:21:
00:38:1b:f4:62:93:0b:6c:27:14:eb:e1:65:5b:ac:
e4:ad:e2:c0:ac:3e:a1:08:e9:6c:43:13:e8:32:c4:
67:4e:67:be:48:7b:0a:30:eb:f2:b6:87:d4:5e:8f:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F5:9A:FB:9D:EA:FE:CB:AA:E0:BF:F2:0D:AB:E4:AC:B4:31:73:1A
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c0:6e:d7:a8:6e:1b:53:ae:8e:cb:f9:71:56:f7:5e:f6:b4:
32:20:8b:47:b1:05:11:6e:a2:65:99:05:88:2e:31:ab:ed:54:
31:3c:a0:3c:a6:fe:c7:07:8c:40:2b:fb:59:63:2f:ee:c2:15:
06:d1:e0:8e:aa:7b:f9:1b:51:c8:90:4f:20:81:7b:c9:44:ea:
08:36:70:6f:08:de:51:e4:64:46:eb:94:10:33:da:c1:25:83:
13:75:c3:50:ca:c4:53:3a:79:94:7c:f3:a4:f5:f4:cb:0e:58:
22:46:a3:a3:25:0b:e4:a9:47:c3:b6:64:8d:81:9e:48:96:6e:
36:18:b1:01:1b:1b:d8:a8:f4:51:a3:6d:37:81:03:fc:21:54:
ce:f7:5d:31:18:0f:0d:33:fc:29:c5:10:2f:b8:f5:9e:5f:88:
64:5e:27:a8:73:e0:05:c5:d9:e7:b8:ae:2a:ad:07:4a:fc:37:
59:b9:2b:66:cb:65:a4:e8:ad:28:31:8c:29:30:c0:2c:df:33:
6d:9e:a8:9b:47:3b:6d:fa:6a:b5:8e:b8:fb:fd:0e:af:04:13:
28:27:33:e7:f8:be:7c:d4:59:58:86:8d:f3:bb:6e:7c:ed:a0:
2f:98:d7:f1:eb:54:8c:06:e5:95:49:0b:c6:4b:50:4c:ee:00:
ba:1c:82:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:13:56 2026 by rpki-client