Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
File: xnL0plKli8oM49F44ChWDhE-mh0.mft (raw, json)
Hash identifier: UCp2wM2/Fu2I6IfXTyqZI7L5RNjujKZ5gUvCHLweCjk=
Subject key identifier: 18:19:33:53:02:B5:31:37:4E:C5:8A:EB:87:1A:32:63:47:6C:6A:30
Authority key identifier: C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
Certificate issuer: /CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Certificate serial: 01A0DD970EAD40A2089DD19CC2845298B111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:00:59 +0000
Manifest this update: Sat 26 Sep 2026 12:00:59 +0000
Manifest next update: Sun 27 Sep 2026 12:00:59 +0000
Files and hashes: 1: wJZSwL8BiBquq-vmCFMDh-9C9DY.roa (hash: B748XBhRBLvB0DrGzXE/NmjkYhX92fM+cPyhqGUPC8Y=)
2: xnL0plKli8oM49F44ChWDhE-mh0.crl (hash: sm87o9/1S6jShJaTfWr5WXYQ7afdLV9+YiLYfeohsy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:0e:ad:40:a2:08:9d:d1:9c:c2:84:52:98:b1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Validity
Not Before: Sep 26 12:00:59 2026 GMT
Not After : Sep 27 12:00:59 2026 GMT
Subject: CN=1819335302b531374ec58aeb871a3263476c6a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:17:ed:d9:7b:2b:b4:cd:f5:01:16:f4:54:
2d:0b:97:07:61:0a:9b:61:7b:74:fd:06:c9:67:4d:
dd:f8:2d:cc:d2:f4:f0:44:1f:10:f2:fc:a1:b4:e3:
0f:76:3b:fc:f5:b0:82:60:9c:c6:d7:d1:ab:08:03:
e2:62:95:4b:d8:fb:8f:e9:64:69:eb:db:90:f2:ef:
1c:8b:19:23:c1:2f:50:f3:38:06:b2:6b:19:3f:3b:
e5:2e:07:c3:33:cc:b4:b5:48:b2:47:38:27:f4:d8:
e1:c0:96:40:6d:10:83:1a:29:f4:e9:16:61:c0:f4:
f0:5f:f9:ab:e4:00:0b:a3:3d:c8:97:57:86:a3:b6:
28:5e:1c:af:5c:08:19:67:b7:e8:d5:03:d5:ff:5f:
a7:3b:3c:3b:c6:93:89:1c:64:e8:c8:ed:72:0f:7a:
a2:52:30:e8:48:1f:9f:9c:e6:9c:26:5a:07:c8:e8:
21:9b:78:cd:f4:52:8f:a4:9e:1d:61:77:7b:cf:3d:
ef:b7:d8:39:b6:1a:36:74:8f:63:c4:cb:ed:35:e9:
a6:49:9c:26:60:81:ae:e7:9a:69:47:02:45:f5:5f:
2a:12:b4:4f:95:73:be:b6:88:37:90:ed:74:eb:48:
f8:eb:d9:c3:4b:23:f8:3f:88:f9:42:45:f9:4c:c6:
cf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:19:33:53:02:B5:31:37:4E:C5:8A:EB:87:1A:32:63:47:6C:6A:30
X509v3 Authority Key Identifier:
keyid:C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:db:60:6e:e0:73:8a:a0:78:e9:98:21:7b:b7:4e:2e:30:61:
d1:00:1c:46:2c:7e:62:65:d5:9d:ee:b4:64:80:0d:d1:d6:92:
5d:40:f7:cd:41:af:4c:45:09:9a:56:d2:8e:9f:b4:46:44:56:
53:8f:f4:43:d4:4b:cb:07:0f:3b:84:14:a9:f8:93:35:a0:cb:
34:a4:0e:b4:dd:78:4c:c1:c7:55:e9:23:6d:ca:30:4c:d0:86:
0b:10:03:81:a7:7d:1f:82:88:29:4b:86:ff:1b:d2:36:40:d5:
11:ca:9b:3d:4f:d0:92:64:1e:5c:42:ea:ac:4f:d9:c8:79:19:
3c:07:52:a1:f9:d7:0a:ed:8f:ec:80:08:8c:43:08:f1:1e:2b:
3e:11:42:bc:4b:08:f5:44:49:f4:f9:00:ff:e6:ef:f0:20:c2:
60:c1:fa:a3:9f:29:98:f5:c0:31:16:b8:8e:bc:86:d9:10:b1:
cb:eb:89:f5:70:97:ec:21:ca:39:93:ac:3d:5f:73:6c:b6:0e:
32:eb:d9:75:5d:2f:b4:94:8f:dc:53:39:ee:fd:b1:fd:3d:1d:
83:e2:b5:07:7d:0e:8e:b7:20:ff:b2:50:e0:fa:ea:f8:54:0c:
b7:7d:64:c2:73:2e:47:78:26:51:39:82:2d:31:d3:98:f9:5b:
83:de:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:09:00 2026 by rpki-client