Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: k1605ZKjowzWlIlTciD1G2OhN6WKGARu8DP5vDYAu4k=
Subject key identifier: 8D:3B:93:48:66:3F:13:CD:10:AB:D7:D5:DC:27:CC:25:21:71:EB:47
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 01A0E25001446DBC458AE020E392A1FC3B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 178E
Signing time: Sun 27 Sep 2026 10:01:28 +0000
Manifest this update: Sun 27 Sep 2026 10:01:28 +0000
Manifest next update: Mon 28 Sep 2026 10:01:28 +0000
Files and hashes: 1: I-G0evMv-W7tENceyq5-skj-8AE.roa (hash: 0oUsrZrwTBnL45zRT8Ja0q/9Hr2Qx4L4ROr/jwER66I=)
2: WfkhMRx1wTZYcucf2qwTH45YfJU.roa (hash: ne29/g3IaHLU5Kezd9KD2anObeKvyRSWNiQhh2XNOoE=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: gkUWuN84jPO08afaEMRicZI9cTuAkYo61T3324Lf8lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:50:01:44:6d:bc:45:8a:e0:20:e3:92:a1:fc:3b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Sep 27 10:01:28 2026 GMT
Not After : Sep 28 10:01:28 2026 GMT
Subject: CN=8d3b9348663f13cd10abd7d5dc27cc252171eb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:fa:88:be:c4:43:a6:ff:66:97:d0:ea:9b:
f0:7a:e6:61:b6:3b:2b:9b:bd:31:fd:98:b8:72:b0:
c6:2c:f1:8a:b9:19:f9:c0:49:82:88:a9:0a:ae:68:
4e:88:71:f4:ae:2f:ab:4b:57:f8:00:ca:2b:59:94:
99:2d:cd:9d:97:45:09:eb:7f:11:51:d9:87:a7:e7:
f1:87:d3:6a:c8:8e:55:8a:4f:89:25:f4:db:a2:a3:
6b:6e:57:2e:68:41:46:9b:61:8f:11:92:19:71:c3:
2f:e4:8c:5f:10:ef:65:d6:90:1b:a3:50:b4:8f:c0:
5e:36:19:2c:64:5e:2c:d2:08:30:3e:a3:72:1d:49:
7f:d9:d8:0e:d2:79:3f:be:6e:1b:da:3c:b4:94:59:
e9:67:12:db:f3:21:ed:3e:53:e3:56:db:78:f3:ad:
ce:b8:eb:b3:35:fd:ed:ef:9a:09:0a:15:85:d7:a4:
62:9f:0f:85:2e:a0:9d:e4:da:c1:5b:95:ac:56:d3:
34:5a:a9:44:c4:83:3a:af:03:41:9b:c2:ee:43:bb:
0f:9a:e0:a7:86:9a:cc:9f:6e:92:a8:e3:76:44:3a:
e4:17:39:70:92:f4:9a:f7:16:50:1a:0b:ce:1a:9a:
cc:f1:6f:d6:fc:2d:ae:36:ff:f5:06:fc:e6:23:33:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3B:93:48:66:3F:13:CD:10:AB:D7:D5:DC:27:CC:25:21:71:EB:47
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:37:53:ad:c7:c7:5b:85:45:a9:1d:f9:12:f9:21:45:fc:cd:
be:9e:c6:78:f1:14:df:03:2e:75:b9:28:f3:3b:24:32:ca:e3:
10:34:6c:24:34:66:07:22:76:77:b1:eb:76:cb:26:d6:74:07:
57:67:2d:03:39:cb:9c:78:4f:c1:aa:c1:2f:a9:e6:8a:12:bb:
4b:62:16:12:f8:b5:9f:9f:05:0e:86:9c:d2:a8:53:c7:cc:21:
fc:26:80:8e:6b:dd:a0:4f:74:51:ad:e7:f7:dc:f9:ba:38:69:
56:76:b9:5a:2d:b5:06:ba:8d:80:f7:fc:9d:09:e5:54:ea:20:
50:e1:14:53:b0:80:e2:16:f1:9e:91:0b:7c:e2:0c:ec:ab:3d:
9d:bc:75:33:a2:d8:46:4c:fc:12:da:60:2b:ef:11:89:64:79:
e7:fb:05:1e:ca:78:55:0e:5d:45:14:48:31:f8:e4:48:f8:29:
5c:69:b2:a0:4e:1a:de:52:bb:83:fc:b1:67:ee:33:3d:e9:35:
27:0d:d7:df:59:5d:72:1b:cb:2d:7d:0f:ba:8f:c0:a2:eb:1f:
6e:8a:4f:44:ad:9b:89:91:49:29:b1:fa:c7:9f:54:a0:40:a5:
59:89:95:a7:d6:97:40:fe:e5:1c:a4:2e:fc:c6:33:bd:68:cc:
e4:95:17:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:44:28 2026 by rpki-client