Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
File: xnL0plKli8oM49F44ChWDhE-mh0.mft (raw, json)
Hash identifier: NybYVzMzaV2F0sRRduo2i8bY5g7OGqF58QtUczcEmQ8=
Subject key identifier: FF:85:FE:38:B4:36:27:3B:2F:47:DE:BD:9B:8E:F6:C5:DF:59:68:5E
Authority key identifier: C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
Certificate issuer: /CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Certificate serial: 019FA0E0482D374EC057968AA235CF30686A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:20 +0000
Manifest this update: Mon 27 Jul 2026 00:01:20 +0000
Manifest next update: Tue 28 Jul 2026 00:01:20 +0000
Files and hashes: 1: wJZSwL8BiBquq-vmCFMDh-9C9DY.roa (hash: B748XBhRBLvB0DrGzXE/NmjkYhX92fM+cPyhqGUPC8Y=)
2: xnL0plKli8oM49F44ChWDhE-mh0.crl (hash: tnf37xyuZbQ2WN8azEsZYW/3uOY0a+7tbDlOGoVbVUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:48:2d:37:4e:c0:57:96:8a:a2:35:cf:30:68:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Validity
Not Before: Jul 27 00:01:20 2026 GMT
Not After : Jul 28 00:01:20 2026 GMT
Subject: CN=ff85fe38b436273b2f47debd9b8ef6c5df59685e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:75:a5:87:8d:39:1e:ac:7a:61:5c:3e:43:
fb:82:a4:07:0b:50:9a:67:db:e0:ce:10:26:e4:83:
fd:65:15:f6:fd:e1:ec:fc:4f:6c:67:e0:b1:d3:ba:
11:ee:1e:2b:4e:75:c9:ad:5c:f2:ab:db:1e:0a:1c:
78:b7:03:96:35:9e:ab:d9:43:75:84:22:63:ec:79:
20:e8:e3:b7:79:29:3d:28:f5:23:68:dd:8b:d4:c5:
aa:61:c2:61:71:8c:67:bb:33:41:d8:2e:fc:cc:49:
bd:01:07:6c:a0:c2:e2:e9:30:35:82:ff:ed:0a:12:
98:08:57:ec:5d:ed:23:56:15:3f:a2:94:dc:ef:41:
c5:7e:48:79:52:b9:7f:be:77:e1:60:62:c6:0a:1e:
f9:3e:1d:d2:c7:6e:44:4b:5e:3c:81:ec:60:60:00:
f8:c4:ed:31:01:dd:4e:a1:2f:ee:a2:b1:3a:00:b1:
1d:f1:91:3f:d0:df:04:bb:05:0a:a9:94:c1:38:5b:
83:9d:eb:9f:38:d1:1b:c3:51:b8:15:55:26:74:04:
81:e0:38:0b:2a:f9:48:9f:40:07:d0:fb:c0:50:ec:
dc:49:45:9d:ae:16:02:15:0b:b5:6c:12:a8:2e:2c:
34:5e:d4:fd:ac:a2:b5:49:56:ad:f1:9f:cb:d7:4d:
c5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:85:FE:38:B4:36:27:3B:2F:47:DE:BD:9B:8E:F6:C5:DF:59:68:5E
X509v3 Authority Key Identifier:
keyid:C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a1:27:a3:69:f6:77:98:0e:3b:ac:4b:36:d3:50:9f:fd:20:
65:2a:30:26:a2:33:62:3e:8b:36:3c:f8:62:25:db:c2:36:2d:
07:cf:af:3f:74:8a:4e:ff:98:dc:d1:d2:2c:fc:d0:ad:bb:5c:
bb:26:78:ac:0f:58:51:87:36:82:a5:d3:e3:07:07:d3:7e:4c:
84:f8:05:6f:71:13:ed:82:0c:c5:39:1c:22:29:31:9f:c7:3d:
fc:10:22:f1:3a:64:19:f8:c5:53:cf:e0:10:77:c2:c6:e6:42:
1e:4f:1c:5d:bd:e6:08:44:46:2e:c4:cd:cd:d1:98:8c:da:8f:
0a:91:1a:b7:f6:a7:a8:0d:98:70:10:6d:75:2d:bc:c4:90:aa:
2f:87:34:9a:0e:3c:0c:6e:14:11:f9:d1:e7:a3:e9:9d:46:99:
49:e6:4a:7f:f7:b0:24:1f:a5:ee:e2:db:0c:a4:d5:24:f8:4f:
7b:68:3f:a2:35:ea:6c:82:e7:4f:87:ef:52:17:01:ce:3b:97:
67:f1:df:f1:4a:31:1a:15:31:79:8b:fb:bb:db:28:68:6d:41:
f6:3a:42:6d:e5:d7:d2:3e:8b:6d:6b:ee:59:24:e5:f2:0b:54:
84:19:88:4e:93:d3:48:4f:2e:c7:87:bd:2f:d8:f7:30:f5:dc:
ec:9a:31:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4EgtN07AV5aKojXPMGhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NzJmNGE2NTJhNThiY2EwY2UzZDE3OGUwMjg1NjBlMTEz
ZTlhMWQwHhcNMjYwNzI3MDAwMTIwWhcNMjYwNzI4MDAwMTIwWjAzMTEwLwYDVQQD
EyhmZjg1ZmUzOGI0MzYyNzNiMmY0N2RlYmQ5YjhlZjZjNWRmNTk2ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphp1pYeNOR6semFcPkP7gqQHC1Ca
Z9vgzhAm5IP9ZRX2/eHs/E9sZ+Cx07oR7h4rTnXJrVzyq9seChx4twOWNZ6r2UN1
hCJj7Hkg6OO3eSk9KPUjaN2L1MWqYcJhcYxnuzNB2C78zEm9AQdsoMLi6TA1gv/t
ChKYCFfsXe0jVhU/opTc70HFfkh5Url/vnfhYGLGCh75Ph3Sx25ES148gexgYAD4
xO0xAd1OoS/uorE6ALEd8ZE/0N8EuwUKqZTBOFuDneufONEbw1G4FVUmdASB4DgL
KvlIn0AH0PvAUOzcSUWdrhYCFQu1bBKoLiw0XtT9rKK1SVat8Z/L103F7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+F/ji0Nic7L0fevZuO9sXfWWheMB8GA1UdIwQY
MBaAFMZy9KZSpYvKDOPReOAoVg4RPpodMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG5MMHBsS2xpOG9NNDlGNDRDaFdEaEUtbWgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2Qt
YmUwNjVlMWFjMDY3LzEveG5MMHBsS2xpOG9NNDlGNDRDaFdEaEUtbWgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2QtYmUwNjVlMWFjMDY3
LzEveG5MMHBsS2xpOG9NNDlGNDRDaFdEaEUtbWgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaEno2n2
d5gOO6xLNtNQn/0gZSowJqIzYj6LNjz4YiXbwjYtB8+vP3SKTv+Y3NHSLPzQrbtc
uyZ4rA9YUYc2gqXT4wcH035MhPgFb3ET7YIMxTkcIikxn8c9/BAi8TpkGfjFU8/g
EHfCxuZCHk8cXb3mCERGLsTNzdGYjNqPCpEat/anqA2YcBBtdS28xJCqL4c0mg48
DG4UEfnR56PpnUaZSeZKf/ewJB+l7uLbDKTVJPhPe2g/ojXqbILnT4fvUhcBzjuX
Z/Hf8UoxGhUxeYv7u9soaG1B9jpCbeXX0j6LbWvuWSTl8gtUhBmITpPTSE8ux4e9
L9j3MPXc7JoxFA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:43:28 2026 by rpki-client