Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
File: xnL0plKli8oM49F44ChWDhE-mh0.mft (raw, json)
Hash identifier: CUuzhTsXbir2eftcPs7NJR8r8uPI6JFANuAAfptcsyE=
Subject key identifier: C0:D0:B9:B5:3E:C2:B1:63:58:A0:A7:73:28:06:EE:6A:29:EE:CC:7F
Authority key identifier: C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
Certificate issuer: /CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Certificate serial: 01A0D3F014468361B47F7659950B3495027D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:02:01 +0000
Manifest this update: Thu 24 Sep 2026 15:02:01 +0000
Manifest next update: Fri 25 Sep 2026 15:02:01 +0000
Files and hashes: 1: wJZSwL8BiBquq-vmCFMDh-9C9DY.roa (hash: B748XBhRBLvB0DrGzXE/NmjkYhX92fM+cPyhqGUPC8Y=)
2: xnL0plKli8oM49F44ChWDhE-mh0.crl (hash: pYcAPbwWzKKSbmvyOFLkGcWOPB2IbLMr/zNkca3fh58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:14:46:83:61:b4:7f:76:59:95:0b:34:95:02:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Validity
Not Before: Sep 24 15:02:01 2026 GMT
Not After : Sep 25 15:02:01 2026 GMT
Subject: CN=c0d0b9b53ec2b16358a0a7732806ee6a29eecc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:2c:df:2b:e0:51:58:18:0d:33:08:db:76:
fc:f2:36:d7:c3:d5:a8:5d:e8:e2:22:76:fd:66:94:
74:a9:2f:f1:fb:03:d2:f5:11:ff:60:2b:e5:88:61:
6a:47:3b:f9:95:91:55:12:d0:38:ba:50:7a:1b:d4:
5a:c2:83:18:4b:3c:bb:28:c4:81:e0:3e:f9:fc:dd:
d0:53:c1:72:93:b4:32:af:af:70:d4:1e:f8:cb:d6:
3e:7b:9b:c8:96:3c:d1:01:a3:c7:e4:d3:24:e7:8e:
47:c6:38:1d:1c:7f:66:df:ba:ee:fb:2f:0b:a9:06:
ea:52:4d:ae:6e:79:e7:8e:7e:a7:25:c1:52:16:8a:
62:28:75:4e:6d:38:91:e5:d0:10:d4:7d:be:d5:69:
96:6c:2d:0f:ff:5d:a9:ba:13:40:8a:f2:04:e1:8e:
6f:2b:68:43:2b:68:16:a0:cf:b4:85:57:4b:7f:ca:
f9:24:d6:3d:50:50:02:97:b6:8d:37:50:94:f7:1a:
43:83:a9:38:6f:c3:de:24:ae:e6:ab:ca:3a:04:1a:
b9:fb:7d:2d:25:6d:a6:79:88:e4:14:31:e2:d1:2c:
8b:56:4e:0d:f3:89:b8:24:24:08:a6:39:27:81:c9:
2c:cb:27:d7:a2:02:f9:65:e0:73:11:92:fb:5a:f2:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D0:B9:B5:3E:C2:B1:63:58:A0:A7:73:28:06:EE:6A:29:EE:CC:7F
X509v3 Authority Key Identifier:
keyid:C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7c:76:f4:5a:fd:ed:ba:d9:73:d7:fb:db:fc:0f:dc:18:10:
67:d0:95:bd:85:a0:5e:fe:65:29:9d:0f:8b:72:21:54:a0:42:
fc:fa:ae:56:5a:6a:30:73:e8:43:52:66:cb:43:a4:f2:0d:25:
0f:97:61:20:2e:b5:89:5d:44:e0:a4:61:18:05:39:87:05:db:
26:3a:25:7a:a1:3b:0f:d0:e4:73:9a:6d:28:73:69:49:5a:17:
89:6b:46:ab:ff:00:6c:73:72:dd:1b:d3:f6:ae:06:34:ff:16:
fb:47:df:02:f4:63:d0:3e:88:1d:1e:18:80:13:b1:ef:40:7c:
9a:0b:b9:86:bb:1b:dc:fd:70:dc:b5:e1:1e:b1:e2:19:21:58:
d2:b6:2e:e2:6c:f0:14:85:19:98:01:9a:af:c0:58:af:52:7d:
aa:40:84:27:05:d0:37:18:5f:66:38:cd:9b:04:47:c7:59:ea:
c0:f7:6d:d0:42:98:fb:60:20:dd:60:0f:55:82:0f:e2:0e:37:
23:69:53:3c:99:a4:fc:c3:f0:1d:0c:b0:17:d8:58:e8:cb:3d:
c7:b3:4a:e7:dd:a0:78:b1:a4:9c:2c:6f:dc:cb:b0:8e:52:94:
d8:95:43:f3:8a:6e:b2:72:46:d6:1e:82:b7:e4:45:49:42:72:
02:81:27:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT8BRGg2G0f3ZZlQs0lQJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NzJmNGE2NTJhNThiY2EwY2UzZDE3OGUwMjg1NjBlMTEz
ZTlhMWQwHhcNMjYwOTI0MTUwMjAxWhcNMjYwOTI1MTUwMjAxWjAzMTEwLwYDVQQD
EyhjMGQwYjliNTNlYzJiMTYzNThhMGE3NzMyODA2ZWU2YTI5ZWVjYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA060s3yvgUVgYDTMI23b88jbXw9Wo
XejiInb9ZpR0qS/x+wPS9RH/YCvliGFqRzv5lZFVEtA4ulB6G9RawoMYSzy7KMSB
4D75/N3QU8Fyk7Qyr69w1B74y9Y+e5vIljzRAaPH5NMk545HxjgdHH9m37ru+y8L
qQbqUk2ubnnnjn6nJcFSFopiKHVObTiR5dAQ1H2+1WmWbC0P/12puhNAivIE4Y5v
K2hDK2gWoM+0hVdLf8r5JNY9UFACl7aNN1CU9xpDg6k4b8PeJK7mq8o6BBq5+30t
JW2meYjkFDHi0SyLVk4N84m4JCQIpjkngcksyyfXogL5ZeBzEZL7WvJXLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDQubU+wrFjWKCncygG7mop7sx/MB8GA1UdIwQY
MBaAFMZy9KZSpYvKDOPReOAoVg4RPpodMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG5MMHBsS2xpOG9NNDlGNDRDaFdEaEUtbWgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2Qt
YmUwNjVlMWFjMDY3LzEveG5MMHBsS2xpOG9NNDlGNDRDaFdEaEUtbWgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2QtYmUwNjVlMWFjMDY3
LzEveG5MMHBsS2xpOG9NNDlGNDRDaFdEaEUtbWgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXx29Fr9
7brZc9f72/wP3BgQZ9CVvYWgXv5lKZ0Pi3IhVKBC/PquVlpqMHPoQ1Jmy0Ok8g0l
D5dhIC61iV1E4KRhGAU5hwXbJjoleqE7D9Dkc5ptKHNpSVoXiWtGq/8AbHNy3RvT
9q4GNP8W+0ffAvRj0D6IHR4YgBOx70B8mgu5hrsb3P1w3LXhHrHiGSFY0rYu4mzw
FIUZmAGar8BYr1J9qkCEJwXQNxhfZjjNmwRHx1nqwPdt0EKY+2Ag3WAPVYIP4g43
I2lTPJmk/MPwHQywF9hY6Ms9x7NK592geLGknCxv3MuwjlKU2JVD84pusnJG1h6C
t+RFSUJyAoEnyw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:45:40 2026 by rpki-client