Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
File: rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json)
Hash identifier: htpmf9n6buS+FZUXTPKdVk20TMmnA0CDipBeTUhpL/w=
Subject key identifier: 63:DE:00:27:E8:BF:88:ED:66:57:1F:8B:CF:E6:7E:E1:D6:32:73:7B
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 01A08D56AAB5DC20C7EBC326A9EB67F21A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
Manifest number: 1367
Signing time: Thu 10 Sep 2026 22:01:02 +0000
Manifest this update: Thu 10 Sep 2026 22:01:02 +0000
Manifest next update: Fri 11 Sep 2026 22:01:02 +0000
Files and hashes: 1: AQy-kY2cHFUJdvCu8RaXSm0u9OQ.roa (hash: RBQiu9sWWqL4vqKsGVfSX3sl/SJ1Xr1YL1xHQKrA3HM=)
2: K-RSBEB1ZNkw3BDgpDKvXT-jHFk.roa (hash: Ek8U88NKRYg8I4QyXUu+1m6S0Vw3QVig3cYX4BA41DY=)
3: WL2FEa958Kjqled1nJg_T9tBeoM.roa (hash: JqTb5QBDeJhpoV0bTkZHjnWe5k2iGZ6/9FsmESELmIY=)
4: eeigoSZvhxriUU8uVwc0KC2ZNqg.roa (hash: BVqjzzOba75rz4RwKPXup3anTRy7Y0r6aHlcT5afx7Q=)
5: gDEbtn2Bm22RWVusEqJbEgaueu4.roa (hash: xXuFvRKXUrwVjGE6wkVPHC4STPuoOyCxY+cA2kJF334=)
6: gqcIGF4cnQ7Zo-s6vBQeyMRZ3Kw.roa (hash: 5WHbZVFPJqF6d7sQt81f3HSwNWk6p/6vqblB7r2uSB0=)
7: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: fkMq77ANiMSc7diEmXaH2OIDfY9sTm9nC+C5z6ysx7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:aa:b5:dc:20:c7:eb:c3:26:a9:eb:67:f2:1a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Sep 10 22:01:02 2026 GMT
Not After : Sep 11 22:01:02 2026 GMT
Subject: CN=63de0027e8bf88ed66571f8bcfe67ee1d632737b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:1b:b1:5e:52:78:c7:62:02:f3:8a:09:e3:
33:1a:0c:9f:0d:b4:86:93:e6:4f:2b:7d:8d:07:2a:
54:92:5e:09:f1:be:1b:14:45:38:0e:ed:5b:8e:96:
5d:db:d4:ff:c2:ac:b4:9a:5b:a2:0e:a6:2c:3d:5e:
fe:ba:42:33:ec:f9:50:1d:90:0b:a1:bd:04:10:91:
c2:bd:9d:7c:17:08:9c:94:62:ac:8e:ed:1a:b0:09:
69:0b:b4:b8:0c:32:fc:58:83:c4:90:26:9e:6e:4e:
a2:84:50:04:6f:db:ca:c7:62:0d:af:46:46:bb:e9:
59:be:58:9d:e9:cb:4a:f9:1f:6b:cd:5f:44:51:41:
da:9d:ac:9c:b4:f9:4b:7e:95:59:82:3f:c2:11:1d:
3d:99:cd:10:9c:5f:c1:07:fc:84:c7:96:fb:38:aa:
ac:d8:2e:e9:03:4a:f4:bb:ed:5e:2c:fb:02:6c:f2:
e1:ec:33:1c:27:92:ad:3f:c1:0e:1c:a8:f8:a8:5f:
2c:f0:9b:18:b6:75:ef:79:a2:af:af:2e:eb:ff:2a:
bd:86:e8:d9:45:ef:41:b9:b6:2e:60:58:6a:8b:34:
01:91:00:95:d3:b4:15:e4:bb:30:00:f3:ba:1f:20:
58:59:d0:17:a0:12:73:8c:e9:ff:6f:64:84:f9:a7:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DE:00:27:E8:BF:88:ED:66:57:1F:8B:CF:E6:7E:E1:D6:32:73:7B
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e6:26:f3:c1:49:1b:27:a3:0e:c3:64:ac:a8:3c:e5:7f:9e:
d6:6f:56:63:1d:c6:50:60:b2:50:c1:3f:84:7b:a0:cf:c0:42:
cd:22:2a:0e:b0:6b:52:7f:05:0c:dc:21:2d:5c:16:99:5d:9c:
11:c1:7a:75:6f:7a:e1:16:c5:80:66:00:18:39:ed:4a:ec:e0:
7a:69:86:47:7f:10:cc:7b:ab:f5:43:99:6d:95:81:ef:78:56:
fb:0e:45:3d:6f:ab:9c:ea:09:d3:6b:d3:81:00:71:5b:08:17:
14:d9:83:ff:ce:c5:8d:23:1f:51:e7:f5:f4:d4:80:95:5f:48:
9c:ff:8b:50:48:63:c0:2c:dd:84:e8:0f:a1:ce:fe:9b:35:ff:
00:04:a9:59:b4:40:5b:37:7a:29:02:8b:3f:e5:6b:0b:02:12:
f0:1c:93:14:47:7c:2a:69:95:8b:78:dd:93:11:74:10:29:43:
e6:e7:bc:b3:9b:bd:54:d3:c1:ca:5b:84:09:5b:2f:67:43:d4:
d8:80:3c:fd:23:a7:82:76:ef:51:c7:2d:19:2b:13:d7:74:fa:
87:1d:08:5f:b7:34:8e:3f:aa:34:39:3f:97:b5:3b:21:6e:50:
fc:0e:8a:e8:d9:53:e4:61:d0:60:29:40:0a:5c:fa:24:5f:16:
21:3a:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:06:12 2026 by rpki-client