Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: TdQTk63Ur+lvddzpgnV7rbkjw+uzEEmlCAaW/Js3k4w=
Subject key identifier: E4:5E:48:41:06:48:64:CC:64:52:BD:2D:3B:D3:E1:2F:A5:B0:DC:30
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 01A05B201F2DE20794D34F7E0A7188B7029A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 1748
Signing time: Tue 01 Sep 2026 04:00:26 +0000
Manifest this update: Tue 01 Sep 2026 04:00:26 +0000
Manifest next update: Wed 02 Sep 2026 04:00:26 +0000
Files and hashes: 1: I-G0evMv-W7tENceyq5-skj-8AE.roa (hash: 0oUsrZrwTBnL45zRT8Ja0q/9Hr2Qx4L4ROr/jwER66I=)
2: WfkhMRx1wTZYcucf2qwTH45YfJU.roa (hash: ne29/g3IaHLU5Kezd9KD2anObeKvyRSWNiQhh2XNOoE=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: OMmvGNVeMdYEffmQWmTdiF6YHwzm9YPJQ1Ld/Fbv8YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:20:1f:2d:e2:07:94:d3:4f:7e:0a:71:88:b7:02:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Sep 1 04:00:26 2026 GMT
Not After : Sep 2 04:00:26 2026 GMT
Subject: CN=e45e4841064864cc6452bd2d3bd3e12fa5b0dc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:b3:c8:22:35:8a:fb:22:d1:96:70:71:49:
6f:89:7a:d4:0a:88:01:84:3f:ff:fc:88:38:7e:ed:
51:c1:39:00:bb:42:a1:c2:43:26:c0:0c:4f:43:76:
b5:cc:d8:d3:64:f8:4e:1f:2d:15:4f:42:c2:aa:b5:
eb:2e:b5:a3:0f:89:2d:c4:7b:b2:99:09:8d:ca:39:
5f:60:af:d9:85:80:1a:97:d1:6e:f7:45:23:9d:25:
61:7e:53:05:99:a1:79:8f:a2:f7:59:78:ee:ec:69:
d2:61:0f:05:55:95:94:8a:8a:48:6a:48:01:c9:9a:
95:2e:48:48:71:3e:37:26:b1:c8:6b:93:bc:42:6a:
7c:5c:89:f9:6e:19:8d:f7:ea:a9:d9:41:aa:45:dc:
ec:db:40:68:4c:f9:80:d6:68:5e:f0:83:d1:7a:dc:
6f:d1:6b:89:17:7e:27:eb:df:0f:b1:cc:be:90:ce:
56:c3:f7:25:d3:4e:13:aa:39:3a:b0:f0:37:53:e5:
1a:b1:0b:fb:7d:4c:08:dc:15:fc:4c:be:82:d1:9a:
21:79:92:a3:49:bd:8e:96:04:89:40:86:7a:99:8c:
7a:50:b5:0e:ce:db:1a:de:3b:85:34:55:43:82:89:
c2:3a:67:cd:ac:c1:32:b8:27:4e:9b:23:63:4a:00:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5E:48:41:06:48:64:CC:64:52:BD:2D:3B:D3:E1:2F:A5:B0:DC:30
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:73:37:93:04:1d:6c:cb:63:e3:31:46:c0:c0:ef:0f:e7:0b:
12:11:0c:22:f8:33:0a:ce:71:29:62:79:f0:6b:e9:5b:73:df:
12:e5:78:4a:9b:99:3c:95:d0:83:f9:3e:46:dd:30:c6:9a:fa:
88:31:7e:b3:69:23:53:bc:d3:e5:3c:b6:35:85:48:e0:41:8e:
68:2b:36:72:61:c1:23:74:48:45:67:b3:e1:a7:e3:4f:63:e4:
b3:de:57:87:42:2e:69:b9:c5:be:ef:4c:0c:1d:47:d4:6c:26:
56:2b:47:f5:66:20:74:7d:f9:7e:36:2c:23:b7:c7:bd:09:83:
c6:4f:29:6d:4d:44:0a:2c:15:f4:7d:97:a3:4f:0c:c5:2a:ff:
4d:a0:ee:cb:66:3f:45:22:08:2b:e3:3b:16:8d:3c:3c:3d:8d:
19:fe:04:99:b5:8b:68:6b:11:0a:2d:b4:7b:76:fa:87:cb:44:
44:6b:fb:aa:1b:f3:23:34:50:cb:ea:dc:7e:87:91:66:1b:1f:
09:1e:ba:4d:8e:c3:98:91:62:c8:9a:f4:76:23:e4:3d:49:9f:
bb:09:38:e9:ef:c3:d5:86:d0:40:60:d3:97:2b:8d:5b:a9:01:
64:f6:65:dc:55:a8:17:8d:f0:e9:5e:2f:e6:e8:f2:0b:c9:61:
04:be:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 09:25:20 2026 by rpki-client