Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: 80hOVuQc8bnlJUmpAIOzV7PttYmUmX1n9/8d8hfft7w=
Subject key identifier: C1:07:C9:8D:E7:3F:D7:45:97:B1:CA:C5:A0:FA:ED:2B:A0:05:A9:37
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 019E1F7EB40ECDFC91BA79809D55204D8453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 1620
Signing time: Wed 13 May 2026 04:00:57 +0000
Manifest this update: Wed 13 May 2026 04:00:57 +0000
Manifest next update: Thu 14 May 2026 04:00:57 +0000
Files and hashes: 1: I-G0evMv-W7tENceyq5-skj-8AE.roa (hash: 0oUsrZrwTBnL45zRT8Ja0q/9Hr2Qx4L4ROr/jwER66I=)
2: WfkhMRx1wTZYcucf2qwTH45YfJU.roa (hash: ne29/g3IaHLU5Kezd9KD2anObeKvyRSWNiQhh2XNOoE=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: zdPGGYIyJS8Wm1mIqes/rLVyfCaekNJXFUkRKK1DJBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:b4:0e:cd:fc:91:ba:79:80:9d:55:20:4d:84:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: May 13 04:00:57 2026 GMT
Not After : May 14 04:00:57 2026 GMT
Subject: CN=c107c98de73fd74597b1cac5a0faed2ba005a937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:be:87:1d:7e:e1:79:c9:33:98:df:9d:17:
41:70:7b:60:d0:59:90:7c:d7:da:aa:bb:d4:aa:15:
ec:61:46:37:08:85:88:44:3d:a6:58:93:c8:72:3a:
34:86:63:76:d8:85:c6:ef:a5:d1:00:b5:94:41:6a:
5d:d5:63:63:6a:4f:1f:ea:e0:d4:51:18:af:8f:41:
b3:46:c0:66:03:c9:7e:68:fa:95:65:aa:82:de:90:
4c:7c:f5:8d:54:84:bb:df:90:09:fd:95:dc:35:23:
5e:59:c5:14:8d:22:2d:f1:af:50:a8:65:39:3a:69:
1d:d6:c5:80:15:0b:5d:c6:9b:0e:dc:1b:90:4d:1b:
12:7b:5e:ed:24:d2:2d:31:1e:86:b0:44:62:60:88:
a0:2e:2f:69:3e:35:4c:a9:59:d5:45:2e:42:f9:8d:
12:dc:9c:07:78:e7:7c:73:aa:f1:42:12:e3:64:6a:
af:e3:00:94:2b:fd:16:5a:a9:0f:65:9e:6b:cf:b6:
cc:e7:3c:72:6e:a3:52:c4:bb:63:de:5f:c3:ec:d4:
c5:29:f8:c4:05:65:ab:bc:59:ec:04:8d:13:da:78:
f7:0b:a8:de:55:8d:4a:7b:0b:cd:95:38:1f:b1:3f:
dc:ce:11:61:35:40:f5:04:38:e0:0c:69:1d:02:94:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:07:C9:8D:E7:3F:D7:45:97:B1:CA:C5:A0:FA:ED:2B:A0:05:A9:37
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d3:f6:81:a7:88:b0:d7:14:3d:3e:2d:91:37:ae:6f:99:b9:
1d:90:61:a4:ad:76:74:0a:ef:14:41:a6:8e:11:31:80:aa:49:
cf:82:d0:b2:4b:a9:e9:62:17:92:fc:52:10:39:83:1f:fe:39:
90:63:fa:0b:c7:fc:af:3a:06:ef:ce:5e:f2:d7:98:13:6b:15:
53:ed:46:d4:15:1e:92:d1:ad:f9:bf:f4:82:42:9e:57:64:bf:
cf:24:3c:3e:5a:60:ba:b7:1b:5d:b7:91:f1:98:0d:b8:98:74:
31:19:1b:e4:1d:73:86:4e:bc:d2:46:6c:b9:52:f4:06:17:c4:
92:80:df:16:b4:4b:62:a0:a7:54:52:cf:0e:9b:f0:38:1c:38:
29:9c:34:55:70:54:6f:44:c3:7a:9b:83:46:b2:ad:7b:bc:3e:
fd:4b:a5:ac:1e:e9:a0:48:72:71:de:09:ee:53:94:89:0f:31:
80:a5:63:26:16:0f:67:e3:37:bd:2f:96:aa:2e:68:98:cd:ae:
9e:b1:dd:12:8e:48:d8:59:65:a0:cd:f8:8d:cb:70:fa:78:b9:
d5:6f:3a:d4:5c:a4:30:24:75:6b:0a:b0:fd:48:ab:fb:cf:a1:
d6:2c:80:d6:22:69:ad:cc:bb:73:94:5c:2a:14:bd:91:33:bd:
7f:93:fa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:46:02 2026 by rpki-client