Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: dGF870hg1AvcXZVyqqZEAD5OfYXPL1F0J2UW9itGu8g=
Subject key identifier: 97:3A:05:B2:CA:95:DE:04:21:8B:55:6D:33:E8:76:26:57:33:49:8C
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 019D284D7BBED6287A1AF9D446883EA2E051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 15A0
Signing time: Thu 26 Mar 2026 04:00:59 +0000
Manifest this update: Thu 26 Mar 2026 04:00:59 +0000
Manifest next update: Fri 27 Mar 2026 04:00:59 +0000
Files and hashes: 1: I-G0evMv-W7tENceyq5-skj-8AE.roa (hash: 0oUsrZrwTBnL45zRT8Ja0q/9Hr2Qx4L4ROr/jwER66I=)
2: WfkhMRx1wTZYcucf2qwTH45YfJU.roa (hash: ne29/g3IaHLU5Kezd9KD2anObeKvyRSWNiQhh2XNOoE=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: 2vF+BDRj641aFVIpLdNxNK59Y1fSn9NUiuHE8vo0YH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7b:be:d6:28:7a:1a:f9:d4:46:88:3e:a2:e0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Mar 26 04:00:59 2026 GMT
Not After : Mar 27 04:00:59 2026 GMT
Subject: CN=973a05b2ca95de04218b556d33e876265733498c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:ce:04:db:7d:c2:5f:7d:9f:8e:6b:24:4b:
63:6c:17:65:11:29:57:94:3c:06:c4:1a:25:e8:e6:
b1:a8:d8:aa:02:f1:82:4e:c8:c0:7e:bf:ce:33:1a:
e8:d2:bc:ae:6f:10:e7:59:02:ab:9e:47:2c:2a:fa:
c5:d4:d0:39:d5:86:9f:89:4d:de:be:6c:c7:cc:45:
a7:0c:81:bc:33:6b:ee:8b:27:ae:e7:f2:34:e9:6d:
31:ab:55:2e:b3:61:d6:89:15:8b:ab:e3:26:8f:d5:
e4:45:3f:31:bd:91:0b:19:b1:97:7f:55:e0:62:2f:
b0:d3:91:66:a0:cc:8a:90:0f:11:bd:a7:40:f3:fb:
1a:15:88:8d:0b:ab:77:ac:ff:4a:c6:ce:18:ba:ab:
06:95:5f:6d:f0:20:ca:cf:97:a2:9a:b8:25:9a:3b:
79:18:3f:55:e2:66:a2:44:f9:25:73:0d:93:23:f2:
09:db:40:59:81:bc:ff:62:c1:18:6e:4b:ed:45:05:
d7:e0:f5:15:c5:fe:52:c7:e1:f2:4f:db:b8:af:eb:
69:62:c4:c4:ea:7a:40:3c:ea:f1:4b:68:ce:c3:63:
5c:1c:0a:4d:c6:41:60:a7:5a:8f:d0:2d:dc:14:cf:
82:ec:f2:31:c4:0c:de:1b:d8:8a:b1:70:9c:2c:08:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3A:05:B2:CA:95:DE:04:21:8B:55:6D:33:E8:76:26:57:33:49:8C
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:cb:94:37:5a:e3:d7:ed:84:39:fd:2b:69:f8:c1:48:29:86:
fb:d7:a9:28:58:f2:16:5b:06:39:0c:bc:bf:b8:03:d7:97:78:
1f:91:7f:62:f4:a0:66:62:62:4b:a4:71:f2:22:99:06:99:6c:
52:d7:b3:32:b8:f1:70:46:b1:ac:c8:99:fc:f4:4c:11:79:8f:
f5:a3:76:6d:27:39:5b:ba:53:06:c9:2c:31:f4:d2:fa:a4:89:
db:6b:fa:c2:a4:3c:cb:c1:a8:04:5f:57:f5:ee:29:59:04:84:
ac:ff:ed:bc:06:dc:4f:0e:0a:13:35:24:19:d1:7e:82:ff:f3:
53:c1:cf:7b:4f:c1:e8:56:74:83:49:88:d2:24:69:1a:b0:08:
d9:68:3c:85:d7:0a:9d:a7:7c:74:fa:2e:b4:21:77:24:fe:22:
6d:a0:b8:b9:af:2b:b3:76:45:3e:91:ca:07:5f:32:be:dc:6f:
b3:fa:f0:78:bf:1f:d9:fd:85:a3:f3:d7:c3:ec:37:87:19:23:
3c:73:43:ba:21:a3:b9:72:50:b7:f8:d0:c9:37:86:0c:c2:1f:
4d:58:ff:2b:50:49:a6:0a:4a:a3:b0:d3:df:2c:df:d4:aa:57:
9c:06:8d:01:30:6b:5c:4a:48:0a:65:c8:ad:74:69:c8:6f:db:
6f:d7:5d:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTXu+1ih6GvnURog+ouBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2Nzk1MjJlYjg5MjU4OWQ3MzY0YWY1NzlhNzI0MDQwZTky
OWYwYWEwHhcNMjYwMzI2MDQwMDU5WhcNMjYwMzI3MDQwMDU5WjAzMTEwLwYDVQQD
Eyg5NzNhMDViMmNhOTVkZTA0MjE4YjU1NmQzM2U4NzYyNjU3MzM0OThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvPOBNt9wl99n45rJEtjbBdlESlX
lDwGxBol6OaxqNiqAvGCTsjAfr/OMxro0ryubxDnWQKrnkcsKvrF1NA51YafiU3e
vmzHzEWnDIG8M2vuiyeu5/I06W0xq1Uus2HWiRWLq+Mmj9XkRT8xvZELGbGXf1Xg
Yi+w05FmoMyKkA8RvadA8/saFYiNC6t3rP9Kxs4YuqsGlV9t8CDKz5eimrglmjt5
GD9V4maiRPklcw2TI/IJ20BZgbz/YsEYbkvtRQXX4PUVxf5Sx+HyT9u4r+tpYsTE
6npAPOrxS2jOw2NcHApNxkFgp1qP0C3cFM+C7PIxxAzeG9iKsXCcLAgGIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc6BbLKld4EIYtVbTPodiZXM0mMMB8GA1UdIwQY
MBaAFMZ5Ui64klidc2SvV5pyQEDpKfCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgt
ZGMxMGQ1ZDNiZDgwLzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgtZGMxMGQ1ZDNiZDgw
LzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw8uUN1rj
1+2EOf0rafjBSCmG+9epKFjyFlsGOQy8v7gD15d4H5F/YvSgZmJiS6Rx8iKZBpls
UtezMrjxcEaxrMiZ/PRMEXmP9aN2bSc5W7pTBsksMfTS+qSJ22v6wqQ8y8GoBF9X
9e4pWQSErP/tvAbcTw4KEzUkGdF+gv/zU8HPe0/B6FZ0g0mI0iRpGrAI2Wg8hdcK
nad8dPoutCF3JP4ibaC4ua8rs3ZFPpHKB18yvtxvs/rweL8f2f2Fo/PXw+w3hxkj
PHNDuiGjuXJQt/jQyTeGDMIfTVj/K1BJpgpKo7DT3yzf1KpXnAaNATBrXEpICmXI
rXRpyG/bb9dd+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:07 2026 by rpki-client