Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
File: xnL0plKli8oM49F44ChWDhE-mh0.mft (raw, json)
Hash identifier: Eu/4wmeDgMdDwwpgLeLca469iiowOQoSUDEzpZSch1I=
Subject key identifier: 3F:4A:47:7C:9B:73:D4:55:0F:D2:36:2A:83:85:32:C3:A1:3E:75:29
Authority key identifier: C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
Certificate issuer: /CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Certificate serial: 01A17FCF53734B1BC4DB40D8661E4FDE3669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:00:55 +0000
Manifest this update: Wed 28 Oct 2026 00:00:55 +0000
Manifest next update: Thu 29 Oct 2026 00:00:55 +0000
Files and hashes: 1: wJZSwL8BiBquq-vmCFMDh-9C9DY.roa (hash: B748XBhRBLvB0DrGzXE/NmjkYhX92fM+cPyhqGUPC8Y=)
2: xnL0plKli8oM49F44ChWDhE-mh0.crl (hash: BEc7qlWfdrXN8g1+juUMzSNUQnQPBigvt1PA5ja1NX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:53:73:4b:1b:c4:db:40:d8:66:1e:4f:de:36:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Validity
Not Before: Oct 28 00:00:55 2026 GMT
Not After : Oct 29 00:00:55 2026 GMT
Subject: CN=3f4a477c9b73d4550fd2362a838532c3a13e7529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:ad:3c:c2:31:59:bd:32:94:5e:bb:07:eb:
6a:66:7b:b4:0a:63:a2:62:df:e6:2d:78:22:5d:d1:
09:6d:39:5a:64:9c:a7:e6:d5:b3:6a:53:df:b4:a0:
c6:ab:99:47:a3:65:95:f8:38:f5:e2:e4:ad:da:28:
bc:df:8a:e6:ad:41:d9:a6:8f:7f:99:f4:42:b1:20:
e3:cb:bb:be:61:3b:d0:c2:10:1d:47:e5:77:ac:19:
36:f9:b8:fe:5f:2d:d7:4f:fc:e5:68:a1:2d:e2:51:
1d:29:e5:8a:5c:c1:db:50:ed:e1:12:14:d2:fe:0c:
08:8a:06:05:c8:40:72:45:ca:53:f7:fd:36:a2:c3:
aa:e7:6b:5b:e6:4e:cd:09:fd:ff:2b:ae:e6:04:67:
27:a1:e4:e6:45:c0:92:28:21:57:22:6f:3c:33:ee:
ca:16:f6:aa:2b:08:c3:d6:00:8a:67:55:8c:db:57:
b8:4b:25:66:28:98:f1:a9:35:c4:ce:7b:df:77:26:
a2:a5:ab:cd:2c:67:19:b8:d2:2d:e5:ba:4a:ef:14:
d7:57:03:b3:51:2f:8c:1b:40:6a:37:4c:86:74:ad:
29:7a:88:35:71:bc:37:e6:c4:77:7f:94:a5:a5:5d:
43:f0:84:b3:87:af:63:24:4f:01:ef:43:ce:85:c1:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4A:47:7C:9B:73:D4:55:0F:D2:36:2A:83:85:32:C3:A1:3E:75:29
X509v3 Authority Key Identifier:
keyid:C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6d:9c:00:f3:3d:d5:f4:2d:7f:55:be:60:cd:40:13:58:d2:
1d:a3:0f:84:c2:67:45:bb:5d:e5:52:c0:e4:de:a7:72:ac:7d:
5c:f1:ac:93:90:a2:2e:44:67:8c:b0:0b:3a:44:dd:5e:26:b1:
92:54:5a:6c:83:53:6e:34:3d:4b:a3:26:21:fe:42:4b:bf:39:
86:29:b5:6b:0e:be:5b:ef:53:79:69:e3:8c:95:5a:3b:4f:30:
06:fb:80:b5:37:bd:11:21:a0:40:1a:2a:5a:b1:bd:db:10:9c:
46:7a:06:e4:f4:a8:1a:52:c9:8e:51:ad:78:5c:c4:15:83:d6:
15:a7:f4:d5:b5:9f:07:74:f2:9d:e9:d7:84:63:58:7c:c3:ad:
41:58:be:71:a7:89:eb:19:9f:46:98:bd:e1:b1:af:d2:66:64:
38:11:d5:69:2b:5b:11:86:7d:d1:52:9f:27:5c:66:33:f0:9f:
8b:22:b9:83:75:c3:97:20:03:b5:fa:63:94:bb:fa:42:11:c3:
b3:d4:c0:33:54:3d:7e:37:a4:e6:42:ce:d7:cb:f1:f8:27:98:
10:64:c5:1b:7f:19:2d:70:c3:6a:84:c9:c4:89:89:dd:a7:20:
52:dd:20:92:b4:1a:bf:bd:6e:54:c9:49:22:b0:4a:18:09:78:
e7:45:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:26:56 2026 by rpki-client