Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: OOKMGTt6ejfC4NGbRq7q222vwQnJuLNQPxBFq3h6To0=
Subject key identifier: 51:C3:07:CD:EC:C8:8B:30:95:B5:F0:6A:7C:1E:AC:2D:6A:08:D7:16
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 01A0E2BDFBA411137E142E2F1CF122D1F84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 1A84
Signing time: Sun 27 Sep 2026 12:01:36 +0000
Manifest this update: Sun 27 Sep 2026 12:01:36 +0000
Manifest next update: Mon 28 Sep 2026 12:01:36 +0000
Files and hashes: 1: JU90aQ8JffWPKUNs4WRBmjC5fmg.roa (hash: RTDjP0CmxRz9mg1HQcbaHVAmbmYErR/CAHIxD2kjR7M=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: KRY5aDhzTXpk9f4XwUrh1Uq1Zf+e8ymtQt/CgOKI4nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:fb:a4:11:13:7e:14:2e:2f:1c:f1:22:d1:f8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Sep 27 12:01:36 2026 GMT
Not After : Sep 28 12:01:36 2026 GMT
Subject: CN=51c307cdecc88b3095b5f06a7c1eac2d6a08d716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:4b:ec:ab:06:15:c7:93:ab:2d:06:cb:e9:
8f:6d:b2:b1:4c:68:d1:25:db:f3:d4:e2:d8:e5:ff:
27:f9:16:17:c7:76:b5:42:75:c8:7c:0a:34:9f:e2:
46:2f:e6:a8:58:e8:2c:d5:3e:f2:73:0f:19:f4:56:
6a:33:2d:90:86:60:26:fe:d7:d5:44:4b:58:88:81:
99:89:18:8a:57:d0:9a:9c:97:2b:2a:64:11:1a:b2:
02:d8:82:9b:cf:e8:85:49:37:67:77:63:63:8e:e5:
d3:8a:4a:05:31:8e:e1:44:01:bc:b5:e8:b2:3f:19:
7b:a1:21:88:60:01:bf:b7:88:4a:29:b3:fd:84:4c:
07:43:3a:b7:36:31:2f:29:4f:0b:82:cc:5b:f4:cd:
d6:46:c4:7b:b5:b0:ca:17:37:d3:27:64:92:a9:91:
71:a5:ae:d2:a2:d0:ed:d8:7f:c9:ce:b8:3d:56:d8:
e6:51:bf:f2:70:f2:25:36:bb:18:2a:39:46:05:c9:
25:78:6e:af:7c:69:04:4a:52:aa:47:db:8b:02:6a:
44:33:da:91:51:2e:56:04:f8:5b:9a:f7:1c:24:30:
66:e6:fa:dd:65:e8:c5:87:04:6a:4a:ce:96:00:92:
f3:7b:d3:f7:02:dc:be:d0:bc:e8:ab:75:bb:66:a8:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C3:07:CD:EC:C8:8B:30:95:B5:F0:6A:7C:1E:AC:2D:6A:08:D7:16
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:df:09:bd:78:c0:a5:f9:eb:a8:f2:fc:b2:c9:76:d5:a5:61:
c1:f0:cc:a2:dc:24:be:b0:98:7d:8d:98:87:35:12:39:db:d0:
bf:c7:86:b9:3d:0f:f3:7b:d6:54:b6:13:00:4a:dc:fd:b8:ce:
92:76:cb:64:82:43:41:a3:85:e2:44:f0:7f:65:90:85:11:16:
ea:c3:7b:16:4a:96:f4:b8:a0:77:1d:d3:52:65:48:ea:dc:3e:
e3:f2:de:05:74:61:18:9f:1b:2d:64:27:32:cd:41:40:5d:36:
19:18:01:3a:5d:bb:c0:a9:7d:c4:a3:a4:8a:c1:41:6e:ff:64:
40:9a:7f:e3:eb:9a:9e:3e:5b:b2:1b:7c:e7:ff:41:ec:3b:33:
80:db:12:98:0f:06:af:18:40:3b:e4:48:3b:1a:e8:22:70:53:
b1:b7:62:93:30:88:2e:5a:94:b0:e6:24:d5:c3:3c:79:94:b2:
44:7e:f5:14:d9:54:34:72:35:aa:cd:df:35:69:67:b9:60:65:
d7:fb:76:aa:25:99:bd:c1:61:af:9a:97:3f:49:1b:52:bd:c5:
d9:7d:f2:fc:b1:95:4c:0e:dd:eb:ce:b8:ab:71:b9:a0:17:4f:
fc:27:eb:7e:d4:20:bd:44:42:5e:ed:9d:a4:7b:d0:62:fa:d9:
49:b0:6b:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDivfukERN+FC4vHPEi0fhMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NTgzZjU4YzcxMTBhZDRjYzYwOWY0ZmZiN2NhYjJmODBj
ODM1ODEwHhcNMjYwOTI3MTIwMTM2WhcNMjYwOTI4MTIwMTM2WjAzMTEwLwYDVQQD
Eyg1MWMzMDdjZGVjYzg4YjMwOTViNWYwNmE3YzFlYWMyZDZhMDhkNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD1L7KsGFceTqy0Gy+mPbbKxTGjR
Jdvz1OLY5f8n+RYXx3a1QnXIfAo0n+JGL+aoWOgs1T7ycw8Z9FZqMy2QhmAm/tfV
REtYiIGZiRiKV9CanJcrKmQRGrIC2IKbz+iFSTdnd2NjjuXTikoFMY7hRAG8teiy
Pxl7oSGIYAG/t4hKKbP9hEwHQzq3NjEvKU8Lgsxb9M3WRsR7tbDKFzfTJ2SSqZFx
pa7SotDt2H/Jzrg9VtjmUb/ycPIlNrsYKjlGBckleG6vfGkESlKqR9uLAmpEM9qR
US5WBPhbmvccJDBm5vrdZejFhwRqSs6WAJLze9P3Aty+0Lzoq3W7Zqjj8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHDB83syIswlbXwanwerC1qCNcWMB8GA1UdIwQY
MBaAFMZYP1jHEQrUzGCfT/t8qy+AyDWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMt
M2Q1OTNlYmU1MjIwLzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMtM2Q1OTNlYmU1MjIw
LzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn98JvXjA
pfnrqPL8ssl21aVhwfDMotwkvrCYfY2YhzUSOdvQv8eGuT0P83vWVLYTAErc/bjO
knbLZIJDQaOF4kTwf2WQhREW6sN7FkqW9Ligdx3TUmVI6tw+4/LeBXRhGJ8bLWQn
Ms1BQF02GRgBOl27wKl9xKOkisFBbv9kQJp/4+uanj5bsht85/9B7DszgNsSmA8G
rxhAO+RIOxroInBTsbdikzCILlqUsOYk1cM8eZSyRH71FNlUNHI1qs3fNWlnuWBl
1/t2qiWZvcFhr5qXP0kbUr3F2X3y/LGVTA7d6864q3G5oBdP/CfrftQgvURCXu2d
pHvQYvrZSbBrwA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:44:51 2026 by rpki-client