Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
File: xnL0plKli8oM49F44ChWDhE-mh0.mft (raw, json)
Hash identifier: FfzFXNtmHbs7Ma2AmqND91ljPZS8RnzRfC8vsNjtYFo=
Subject key identifier: 26:6B:AC:4D:94:29:74:78:C8:FB:BD:DB:A6:B9:AE:D1:D3:E2:26:58
Authority key identifier: C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
Certificate issuer: /CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Certificate serial: 019F916C71B907C36DC14FA2A29F36821433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:31 +0000
Manifest this update: Fri 24 Jul 2026 00:00:31 +0000
Manifest next update: Sat 25 Jul 2026 00:00:31 +0000
Files and hashes: 1: wJZSwL8BiBquq-vmCFMDh-9C9DY.roa (hash: B748XBhRBLvB0DrGzXE/NmjkYhX92fM+cPyhqGUPC8Y=)
2: xnL0plKli8oM49F44ChWDhE-mh0.crl (hash: aoFegQBReencFkQp/DC3z1OEGH0bjJjhurYT8jR8DFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:71:b9:07:c3:6d:c1:4f:a2:a2:9f:36:82:14:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Validity
Not Before: Jul 24 00:00:31 2026 GMT
Not After : Jul 25 00:00:31 2026 GMT
Subject: CN=266bac4d94297478c8fbbddba6b9aed1d3e22658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:de:de:95:ae:f8:56:69:7f:a9:a2:9c:e9:
bf:4f:6d:14:6c:fb:07:28:20:89:71:10:a1:c6:8f:
9e:9c:bd:59:4b:fd:de:8a:b4:fa:b2:01:cf:92:07:
79:0e:4c:e7:46:3c:f0:fa:3b:90:d4:12:aa:e7:b7:
ea:7e:11:00:98:8d:dd:f4:19:9e:bc:00:b5:28:26:
98:66:e5:73:5a:7a:78:af:66:fc:b2:05:7e:0b:20:
e0:61:a9:b0:9f:73:7f:5a:2c:ab:bf:35:83:b7:6d:
4d:7b:c4:c3:37:35:e1:4f:a1:03:cd:c3:62:2f:a7:
48:87:09:b1:db:92:51:22:1b:95:89:0b:f1:54:50:
78:c7:5a:ea:ee:6a:59:7a:2f:11:3c:8f:12:6a:c6:
5b:5c:e6:81:32:80:6f:15:1c:9c:5a:c6:e5:63:a0:
a1:b6:be:81:ee:be:ec:f5:da:1c:69:30:5c:31:16:
f5:63:cc:b7:4b:f3:67:2a:0d:f3:be:b5:a5:be:82:
9c:30:39:96:56:10:77:87:e3:24:b4:b5:ce:c8:4b:
d2:19:80:4d:9f:71:fc:36:cc:3e:49:06:a3:5e:82:
48:e6:bd:18:0f:6f:92:3b:b4:4e:83:6c:33:89:81:
e0:a6:12:6f:11:4b:67:41:db:c9:9b:42:c2:cb:cb:
e9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6B:AC:4D:94:29:74:78:C8:FB:BD:DB:A6:B9:AE:D1:D3:E2:26:58
X509v3 Authority Key Identifier:
keyid:C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:71:18:b0:ec:57:bc:77:58:61:22:91:40:cf:5f:86:7d:b6:
fc:02:1a:50:54:08:e5:96:82:61:ad:70:28:05:55:1c:11:cc:
d1:c6:98:d2:43:0b:38:28:51:80:8a:2a:c2:b3:46:76:55:f9:
7c:aa:ed:4f:3f:e7:1c:ca:b8:a7:d1:c1:5c:5d:01:99:76:ba:
bf:fc:4e:da:a6:4f:1d:7b:f4:2f:1c:cc:c5:ec:05:8c:45:4e:
d0:9a:8a:53:3c:31:be:79:e4:f9:e2:cc:3a:45:d5:ec:69:07:
d8:f5:08:fd:b2:d1:f0:08:ce:bb:2c:db:9f:32:65:25:13:5e:
d0:c9:92:3c:ce:e0:4c:3b:e6:ba:06:a6:9b:fe:a8:66:0d:c4:
19:21:4b:92:b0:b5:3a:c3:3b:6f:ac:82:e2:57:18:3b:7b:fe:
8c:3f:81:dd:c6:75:16:47:21:73:ae:3e:9d:15:2a:82:aa:9c:
7a:9d:57:db:d0:8a:f4:07:5e:40:dd:b9:9e:7a:90:86:e9:4e:
91:32:e0:a3:33:a0:ce:f1:bd:45:b8:6b:60:f4:4e:8e:62:42:
63:5a:fa:54:e5:76:41:fd:ec:2b:e5:7b:d2:0c:f6:52:e2:fa:
c9:7b:6b:8b:72:58:b8:c4:ef:f6:af:34:aa:d9:27:9f:53:ad:
99:3d:ca:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:39 2026 by rpki-client