Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
File: xnL0plKli8oM49F44ChWDhE-mh0.mft (raw, json)
Hash identifier: i3pvB3ccyOFEtgJRceTYucIS5+lD+sirmyWQ15v1Ynk=
Subject key identifier: B9:FA:64:83:00:72:F2:7F:08:68:A5:00:F0:D9:89:D8:B6:EC:D5:A1
Authority key identifier: C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
Certificate issuer: /CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Certificate serial: 019FAA87718803EF4363D28B354CCFA8D736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:30 +0000
Manifest this update: Tue 28 Jul 2026 21:00:30 +0000
Manifest next update: Wed 29 Jul 2026 21:00:30 +0000
Files and hashes: 1: wJZSwL8BiBquq-vmCFMDh-9C9DY.roa (hash: B748XBhRBLvB0DrGzXE/NmjkYhX92fM+cPyhqGUPC8Y=)
2: xnL0plKli8oM49F44ChWDhE-mh0.crl (hash: DiVpT54EAOBqxzLO9xdmtxsETGCf4FVlN3VxRZa+Cys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:71:88:03:ef:43:63:d2:8b:35:4c:cf:a8:d7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Validity
Not Before: Jul 28 21:00:30 2026 GMT
Not After : Jul 29 21:00:30 2026 GMT
Subject: CN=b9fa64830072f27f0868a500f0d989d8b6ecd5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:01:a4:9e:28:d8:5e:c8:ce:3b:84:92:4b:
89:8c:96:0b:71:99:72:ad:f2:43:a0:ca:24:b8:a3:
ce:7c:8e:3d:c1:f0:22:f8:00:24:8f:fd:ea:25:61:
c9:08:0d:6b:43:57:41:9a:7c:fa:8c:15:32:07:19:
6e:2f:ff:bc:60:ef:30:43:35:89:bf:81:55:00:5d:
8c:00:97:e6:c1:45:e6:16:db:8d:14:8b:aa:a3:a9:
be:85:ea:3a:db:09:7f:cd:f0:84:8c:47:9c:c5:65:
49:1c:ba:fe:b9:e7:8b:36:27:52:33:72:b3:20:51:
31:36:84:97:1d:d2:50:20:7d:51:7a:5a:f7:ed:9f:
13:a3:46:e1:ad:44:4b:be:a7:29:db:09:e6:0b:06:
53:68:ea:5a:22:e6:e2:91:fb:18:23:a3:36:ab:d3:
09:c1:5c:5b:70:3b:7e:dc:11:42:52:5e:cf:d2:d6:
10:8f:ec:ad:f9:01:6f:b4:b2:98:ff:2d:cf:77:2d:
cb:c1:32:c4:e7:78:1c:8a:3a:1a:0c:c6:da:08:69:
94:fa:74:ae:a0:09:64:c0:e3:f8:cb:2e:d4:50:e0:
ce:ff:b7:8a:4a:89:02:dd:a8:74:16:13:65:69:37:
77:0f:cd:dc:95:5c:27:13:73:72:13:2b:40:c2:02:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FA:64:83:00:72:F2:7F:08:68:A5:00:F0:D9:89:D8:B6:EC:D5:A1
X509v3 Authority Key Identifier:
keyid:C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:20:30:25:13:e7:4b:d3:fa:48:5b:75:a5:2c:4e:f3:52:f6:
85:ff:c0:8f:06:ec:de:dc:fd:dd:80:5e:e9:3d:b1:7a:cd:55:
86:29:6a:9e:5e:27:39:cb:03:41:70:dc:e1:46:8b:80:ee:3f:
14:b1:41:70:27:ab:3c:a2:b1:aa:b6:fd:34:4a:a0:61:6b:69:
d5:d1:12:87:dd:e1:4e:9c:de:bc:db:ac:c2:a9:ff:f8:e0:05:
fe:ed:dc:26:88:c6:34:cf:27:e0:fd:4d:c8:37:0e:4a:97:8d:
be:ad:c9:6d:9d:de:96:03:95:44:46:25:08:aa:cc:ea:a9:ca:
0c:48:5f:30:fb:ac:41:4f:31:fe:fb:0f:9d:6e:c7:3b:ef:2a:
e6:87:d7:65:3a:2f:4a:e5:03:79:d8:5b:60:a2:c9:d6:18:57:
af:9b:64:a1:f0:77:fa:8a:f3:87:0f:ca:aa:9d:5e:cd:12:4b:
79:d7:ac:d9:99:96:4f:f5:8f:c2:32:33:c4:fb:4e:74:b0:05:
b5:8f:69:76:94:66:dc:0d:08:06:cb:58:48:53:5d:08:25:6c:
84:de:3a:9a:07:43:8a:e3:77:a2:c0:a8:cd:26:21:e0:b0:a0:
46:52:47:4b:02:ad:c7:27:f5:69:85:3b:39:8e:65:5a:30:b0:
69:bb:91:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:54 2026 by rpki-client