Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
File: xnL0plKli8oM49F44ChWDhE-mh0.mft (raw, json)
Hash identifier: UA/E0vIEH2uJmS4Wt+7IshoIo4zP+W6JRIaZqorM+uY=
Subject key identifier: 00:16:03:41:FF:CE:1D:49:8F:56:6F:E7:33:68:85:C4:2A:C1:05:6A
Authority key identifier: C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
Certificate issuer: /CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Certificate serial: 01A08C7A89D3CF9C41A9B735E6675F2E05E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:35 +0000
Manifest this update: Thu 10 Sep 2026 18:00:35 +0000
Manifest next update: Fri 11 Sep 2026 18:00:35 +0000
Files and hashes: 1: wJZSwL8BiBquq-vmCFMDh-9C9DY.roa (hash: B748XBhRBLvB0DrGzXE/NmjkYhX92fM+cPyhqGUPC8Y=)
2: xnL0plKli8oM49F44ChWDhE-mh0.crl (hash: Tj4gJNoq584GUfKmrM98kBAabEqs6ihhg23OFLqLk+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:89:d3:cf:9c:41:a9:b7:35:e6:67:5f:2e:05:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Validity
Not Before: Sep 10 18:00:35 2026 GMT
Not After : Sep 11 18:00:35 2026 GMT
Subject: CN=00160341ffce1d498f566fe7336885c42ac1056a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:7c:c6:a2:b7:1b:a4:51:f0:1c:db:c9:f0:
58:2c:40:46:eb:3e:c7:a5:5f:60:13:6d:5f:1d:4d:
cf:01:8e:c2:a6:7e:28:6b:e7:06:fe:04:10:81:2c:
a6:72:97:a3:a6:e0:78:40:8e:6e:f4:c8:3e:d5:cc:
c8:78:4f:e4:e2:0a:8f:1e:15:dc:2c:d4:7d:30:db:
76:4e:30:87:fa:4d:76:6e:61:d6:88:6d:2e:34:47:
fb:00:b7:17:79:29:53:66:96:0a:67:92:3f:eb:90:
dc:9f:66:5a:4d:c2:a9:6d:88:29:fc:da:9c:bb:3e:
28:f8:f3:6e:c4:87:3a:e5:5b:58:2b:fc:95:f4:46:
13:38:09:bb:c5:21:b1:63:42:94:20:24:f2:fb:d2:
b9:f4:d1:47:f7:cc:a7:33:52:d9:9e:8e:4b:03:3a:
2d:40:a3:90:e0:54:5a:c8:3f:17:ee:b7:c7:51:a3:
e7:8a:83:32:b1:52:07:43:63:b5:9b:3f:22:c7:5f:
6a:e5:d7:a5:57:7a:bd:f9:f0:22:3b:99:6f:3e:43:
7c:ae:e1:74:4c:6a:be:f4:5a:39:f5:ac:ab:f9:3b:
5a:fb:2a:d4:48:68:62:37:87:69:88:f9:2a:6c:1a:
da:cd:b7:2d:22:35:ad:6f:a7:98:89:1a:ab:42:45:
9e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:16:03:41:FF:CE:1D:49:8F:56:6F:E7:33:68:85:C4:2A:C1:05:6A
X509v3 Authority Key Identifier:
keyid:C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:50:ef:96:d8:1c:22:38:94:38:0c:17:21:5d:f9:5e:38:13:
2d:ad:6e:da:91:6b:91:88:1f:d7:86:73:3f:11:f9:7d:19:82:
55:cd:86:0b:2a:93:3a:4f:66:fa:cb:8b:2a:23:9a:2d:37:48:
e3:ed:9d:c4:33:d6:9a:8a:53:16:cc:44:1e:18:bd:eb:a9:54:
09:07:59:39:ba:65:b6:51:cb:7c:61:12:d3:2a:f7:fe:05:ff:
63:7a:82:d9:d6:a5:ca:89:4d:b7:b4:77:84:4d:88:7a:cf:d4:
2d:69:7e:df:2e:2f:fb:88:21:61:aa:4b:33:96:76:0a:6c:c1:
d8:d6:29:7a:da:78:51:c5:b6:46:e7:b0:8c:ae:7a:0f:e5:bb:
a7:ec:2c:da:9d:98:df:b7:0e:24:cb:c2:97:0f:f5:72:56:d1:
96:bb:51:9d:20:78:a9:0b:e9:71:d8:55:6f:5d:ed:f7:4f:8b:
e4:ba:93:0c:04:18:ba:e8:0d:3b:95:bb:8a:06:f5:1c:4e:4c:
19:29:fc:f5:67:c7:15:38:d8:ae:14:db:9a:e4:46:19:e1:b5:
c4:6b:bb:68:0e:f5:b8:57:89:50:64:de:20:6b:dd:80:3b:c5:
a5:ff:5d:e5:ad:9d:f9:59:77:a6:04:4c:8f:b7:38:a4:9b:7a:
9d:47:86:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:12:57 2026 by rpki-client