
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: loKx9J1ExX/qIBZ8TikA5VQ8sQKcyWb0Q80cNqomDGo=
Subject key identifier: 18:E4:04:AF:B0:F2:4A:01:9D:3A:4C:71:BD:D5:D5:BB:EC:72:A3:D5
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 01A14014BB1F931BF8A312E243D0F28FF1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 15:01:02 +0000
Manifest this update: Thu 15 Oct 2026 15:01:02 +0000
Manifest next update: Fri 16 Oct 2026 15:01:02 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: B+m1yyIqDOXpdH3wixjnyubTcqGDQ+G4yHOpl9qwx7g=)
2: E66SedHd_vPzIOdI_rSea-dozpY.roa (hash: esa1VAeAMDp/AD53evHUHJNFCVMH1Oxb2JFWktl2xMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:14:bb:1f:93:1b:f8:a3:12:e2:43:d0:f2:8f:f1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Oct 15 15:01:02 2026 GMT
Not After : Oct 16 15:01:02 2026 GMT
Subject: CN=18e404afb0f24a019d3a4c71bdd5d5bbec72a3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:e9:04:59:06:ae:d1:30:89:a8:e8:46:a0:
09:25:39:04:e8:ba:74:df:69:f7:0f:8f:c5:14:27:
a8:fe:d7:3e:e8:14:5f:63:c3:ce:69:7d:66:19:cb:
cc:4a:bb:19:76:6c:de:79:25:8a:ab:75:65:fd:64:
e2:a2:92:47:16:0b:17:00:bf:c7:fe:d1:a7:8d:24:
ec:16:7b:73:d7:0e:02:ad:9c:12:23:bb:b5:ee:9f:
69:12:ab:c3:fb:2c:94:19:81:f5:3c:85:0b:95:95:
1a:98:cf:10:da:36:d9:68:17:86:aa:8c:8d:9f:47:
da:20:db:94:e9:97:3a:9b:57:66:9f:13:00:61:a1:
a9:64:51:51:d6:13:fd:b4:28:3c:2f:a0:86:02:a8:
cb:ba:ca:b8:f8:92:54:58:07:3b:87:17:24:bd:10:
4a:33:ad:59:54:e1:f5:de:2d:3b:76:bd:53:24:29:
4b:b5:80:14:81:4d:4f:76:e3:75:a3:2a:e8:17:41:
b0:53:c1:71:d8:e2:a6:5d:c6:09:77:7c:0e:51:10:
17:59:3b:13:71:46:39:b8:9f:36:2b:51:6d:b2:43:
c1:12:f6:54:91:0e:7d:16:56:79:8a:58:1b:70:6a:
4e:81:69:df:fa:8d:51:7f:34:97:03:e1:22:51:31:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E4:04:AF:B0:F2:4A:01:9D:3A:4C:71:BD:D5:D5:BB:EC:72:A3:D5
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c7:4f:ab:92:20:4e:75:22:c3:52:88:63:d8:79:5f:a8:4d:
e7:b4:e5:e1:3f:38:b0:63:07:e6:2f:94:0d:39:0a:28:4e:73:
0e:84:54:b5:85:79:42:53:62:08:91:18:ce:85:07:1c:cb:b0:
db:c1:ee:af:2a:5f:2a:7e:f5:a9:b7:55:7a:91:38:b6:83:6f:
3c:03:65:ae:43:64:3f:fb:03:08:0c:e3:80:e6:fd:e9:90:24:
7b:76:76:59:fe:f3:d3:36:4c:e1:cd:46:4d:48:52:f9:db:03:
70:c4:39:85:35:d0:a1:ab:b2:46:a9:c3:64:36:b5:ec:63:30:
2c:b2:1e:08:dc:da:cc:d0:f1:b6:e1:86:a3:03:25:38:39:c1:
b3:d9:6e:9c:8e:6b:83:94:3d:25:e8:ff:92:56:2b:1c:1a:8c:
17:66:f4:3a:34:b6:61:15:cb:ab:10:18:eb:37:bd:1b:f4:78:
37:75:03:b8:0e:99:e2:81:03:25:a1:3a:52:b3:d5:aa:f4:b7:
74:55:8d:e9:de:33:9f:fe:01:0d:9a:6a:ae:c2:3a:43:27:6d:
e4:ca:8c:39:2c:d1:f2:e9:59:bc:48:91:61:0b:ba:a3:27:d3:
99:92:79:13:08:2d:3d:67:e2:20:ac:81:aa:4b:b3:ed:14:ed:
61:81:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:59:23 2026 by rpki-client