Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: ocUpE67l2SoyY6vXEh8jsDUtlotKPTf+9QT5dsNMRss=
Subject key identifier: 88:0E:03:4F:D1:B7:50:38:50:67:F6:0D:73:71:46:74:8A:FD:08:BB
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 01A08F450227DB3E557E083BC4BABA6AFE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 16AC
Signing time: Fri 11 Sep 2026 07:00:59 +0000
Manifest this update: Fri 11 Sep 2026 07:00:59 +0000
Manifest next update: Sat 12 Sep 2026 07:00:59 +0000
Files and hashes: 1: 9EktXdyZJh18u-aW7yKS4HoPavo.roa (hash: rjDqPIBakWvnRieCU3x6qlMyDbDmiCMZb+0A8kLnWdc=)
2: cPX1K7h-wlaCr7zmE40f44WojxI.roa (hash: Q/KPZCaK+pTYPECUWe3LbMeOLvb3gqHt7TrGMiKZCx4=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: dD6ovhr9FJVYZiNk6QBuGBbSgHOsc3jpLmEJTjD2ir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:45:02:27:db:3e:55:7e:08:3b:c4:ba:ba:6a:fe:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Sep 11 07:00:59 2026 GMT
Not After : Sep 12 07:00:59 2026 GMT
Subject: CN=880e034fd1b750385067f60d737146748afd08bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:16:16:02:92:2a:a2:b3:99:cd:fb:50:72:
a1:05:08:5b:23:27:98:f9:a8:71:d2:60:0e:3c:00:
6a:ee:10:eb:17:9a:cd:be:af:5b:c6:43:47:00:8e:
ca:6a:d5:2f:c6:1f:38:b3:de:30:bf:6d:22:e8:70:
5e:8f:82:4b:24:12:49:02:05:5a:fd:4a:a9:de:ee:
cd:fc:b1:fe:13:20:88:81:3d:4d:d7:d4:20:76:3a:
ee:ea:3e:c9:03:26:7a:79:27:79:76:b6:f0:67:37:
6e:b1:d4:03:b4:4a:14:f3:9c:63:d6:e2:95:ea:cc:
e3:40:45:00:d0:be:f3:f5:ed:ad:67:a5:56:ce:35:
8c:26:30:69:ff:0e:25:13:f7:c0:27:d1:e4:43:92:
7a:db:70:9a:20:40:6a:54:db:b4:00:a3:be:88:99:
28:55:1e:e7:94:61:d0:d9:3c:4d:75:03:05:24:62:
ac:35:d7:f0:d9:d9:09:56:99:ec:19:5f:07:be:2b:
56:77:2d:a9:20:4f:a3:b2:21:2d:58:86:50:40:8f:
33:66:6e:6f:a4:0d:ac:98:ac:d2:dc:70:61:37:72:
db:8f:a5:f7:4e:db:ce:6f:36:97:74:bd:e2:83:21:
e1:89:57:a5:13:b2:70:76:1c:8e:25:8b:e6:45:ad:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0E:03:4F:D1:B7:50:38:50:67:F6:0D:73:71:46:74:8A:FD:08:BB
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:26:3a:b5:2c:4e:d9:59:57:d5:3a:2e:37:ba:ac:2f:16:64:
a9:bc:75:bc:ed:20:71:be:49:3b:19:9a:5f:8b:17:cf:c9:0b:
ae:0c:db:02:d6:92:f0:1b:e9:04:f2:d6:85:3b:a8:22:d3:cd:
d5:1d:81:20:32:79:08:1f:37:66:c5:29:0c:6b:1c:85:ec:6c:
53:b7:62:f5:c5:ca:82:7a:94:9a:60:03:01:2f:18:29:5f:58:
0e:62:ee:27:00:46:5a:16:f3:c6:14:72:a6:37:ad:86:95:c4:
a8:fa:0d:b6:50:85:6e:9d:1e:7f:c0:ca:bd:9d:55:f1:58:29:
a3:8f:28:d4:76:35:aa:f2:40:0a:ee:e8:54:d9:de:47:48:c6:
d5:74:75:eb:2e:1e:8c:fd:0d:d1:a8:48:28:d0:0d:1c:ae:30:
d8:8e:65:02:7b:79:47:62:f0:a2:3d:c1:b4:00:8f:00:57:63:
42:f5:ae:fd:9d:4f:78:2e:dc:d8:56:48:2a:fb:88:b5:73:bd:
c9:71:2d:0f:5c:05:31:4c:b4:c2:1b:61:a6:a5:47:ae:d0:96:
ad:34:f2:02:3d:c9:8d:52:d5:5c:eb:07:a7:fb:fa:86:2a:fc:
76:4b:44:b7:00:52:ae:9a:de:e7:ed:f8:f6:d1:7b:db:d4:59:
d7:0d:09:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCPRQIn2z5Vfgg7xLq6av4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTk2OGVkYjcyYzE1ZjVmOTU2N2ZkMzQyNjdiODc0ODVl
ZjM2ZDEwHhcNMjYwOTExMDcwMDU5WhcNMjYwOTEyMDcwMDU5WjAzMTEwLwYDVQQD
Eyg4ODBlMDM0ZmQxYjc1MDM4NTA2N2Y2MGQ3MzcxNDY3NDhhZmQwOGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne8WFgKSKqKzmc37UHKhBQhbIyeY
+ahx0mAOPABq7hDrF5rNvq9bxkNHAI7KatUvxh84s94wv20i6HBej4JLJBJJAgVa
/Uqp3u7N/LH+EyCIgT1N19Qgdjru6j7JAyZ6eSd5drbwZzdusdQDtEoU85xj1uKV
6szjQEUA0L7z9e2tZ6VWzjWMJjBp/w4lE/fAJ9HkQ5J623CaIEBqVNu0AKO+iJko
VR7nlGHQ2TxNdQMFJGKsNdfw2dkJVpnsGV8HvitWdy2pIE+jsiEtWIZQQI8zZm5v
pA2smKzS3HBhN3Lbj6X3TtvObzaXdL3igyHhiVelE7JwdhyOJYvmRa3XRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgOA0/Rt1A4UGf2DXNxRnSK/Qi7MB8GA1UdIwQY
MBaAFMWpaO23LBX1+VZ/00JnuHSF7zbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMt
YjJjMGRmYThhMGUxLzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMtYjJjMGRmYThhMGUx
LzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyY6tSxO
2VlX1TouN7qsLxZkqbx1vO0gcb5JOxmaX4sXz8kLrgzbAtaS8BvpBPLWhTuoItPN
1R2BIDJ5CB83ZsUpDGschexsU7di9cXKgnqUmmADAS8YKV9YDmLuJwBGWhbzxhRy
pjethpXEqPoNtlCFbp0ef8DKvZ1V8Vgpo48o1HY1qvJACu7oVNneR0jG1XR16y4e
jP0N0ahIKNANHK4w2I5lAnt5R2Lwoj3BtACPAFdjQvWu/Z1PeC7c2FZIKvuItXO9
yXEtD1wFMUy0whthpqVHrtCWrTTyAj3JjVLVXOsHp/v6hir8dktEtwBSrpre5+34
9tF729RZ1w0J7A==
-----END CERTIFICATE-----
Generated at Fri Sep 11 17:46:19 2026 by rpki-client