Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
File: 1XEqnWm0rsl4nBTLBStxObBuddo.mft (raw, json)
Hash identifier: Pet/x71vhtZ4x88I4fcLGl1mgNTATRY7waPd7dG720o=
Subject key identifier: 12:7D:8A:DE:6D:25:BF:02:79:F1:1E:CF:FC:C1:0B:5B:6E:41:FF:D4
Authority key identifier: D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
Certificate issuer: /CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Certificate serial: 01A185D15C42B07472C2EC0C10C954F6CEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
Manifest number: 0145
Signing time: Thu 29 Oct 2026 04:00:52 +0000
Manifest this update: Thu 29 Oct 2026 04:00:52 +0000
Manifest next update: Fri 30 Oct 2026 04:00:52 +0000
Files and hashes: 1: 1-weOiU_pH6PrjNpa-GE0KnH7irc.asa (hash: JI42zOYreA+n37JUoTRA2ZhWTsJcuughghX2Yz9FgMA=)
2: 1XEqnWm0rsl4nBTLBStxObBuddo.crl (hash: JKsQd3uZcQtPQS2tIVlqX4Lma2rTWrR9qTqUOSYBQyY=)
3: p3oDOHgOBUquyHxeOzPNLZDbBV8.roa (hash: SIpRRKiTJavAEPnglZMtAVfyMKpObUjWtFsTsETWsUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:d1:5c:42:b0:74:72:c2:ec:0c:10:c9:54:f6:ce:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Validity
Not Before: Oct 29 04:00:52 2026 GMT
Not After : Oct 30 04:00:52 2026 GMT
Subject: CN=127d8ade6d25bf0279f11ecffcc10b5b6e41ffd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:5e:dc:9c:90:76:d0:12:33:07:ce:77:34:
cb:db:e4:93:3a:53:11:d5:c7:c3:5e:ac:c3:6f:46:
de:bc:c4:4a:46:32:bc:dd:5f:dc:12:87:a8:1e:c1:
a8:0f:21:7a:c1:72:66:09:54:f7:2a:51:12:ce:58:
69:d6:ee:2b:a3:f8:a4:5c:f1:54:c7:c7:ae:94:05:
5e:28:e5:d3:5b:f7:ae:06:42:03:a6:2a:92:c6:e2:
c3:88:71:be:b0:f4:83:57:02:03:9e:2b:34:12:13:
40:96:e1:32:6e:de:e1:22:59:b4:48:be:24:7e:d6:
19:01:c8:85:05:90:89:0c:17:01:39:3d:07:43:cd:
d4:02:0a:3b:75:73:16:a2:2a:78:2c:d4:10:20:25:
86:ed:9f:7d:b4:89:7d:c9:89:48:fb:d8:cf:1b:d8:
8f:a9:ba:ad:2c:11:6f:09:92:a2:99:88:e3:e6:e8:
e3:66:23:c5:08:f6:86:e6:18:92:fb:b7:93:12:0b:
e0:71:b5:70:20:6c:46:f7:79:0e:a7:aa:40:d3:67:
29:ea:cc:9e:01:64:88:33:08:1a:66:97:a4:59:05:
10:a7:aa:79:54:02:d0:06:5d:f7:02:21:da:65:93:
27:70:11:ce:8e:e0:14:db:e6:07:ed:02:bf:35:ea:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7D:8A:DE:6D:25:BF:02:79:F1:1E:CF:FC:C1:0B:5B:6E:41:FF:D4
X509v3 Authority Key Identifier:
keyid:D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:11:7f:f0:9b:64:7e:0a:0c:02:70:99:53:07:45:e9:c0:db:
bd:fc:21:b4:3d:74:ff:17:93:a2:2a:56:dd:3b:74:ef:2f:b1:
c9:15:05:dc:ff:c9:78:ba:76:bf:2c:a2:02:65:c4:5d:47:10:
79:1e:46:25:99:81:a8:1b:93:22:5a:6f:3e:bd:3d:25:d0:44:
59:e8:bb:be:6e:7e:4e:f2:83:33:02:43:3e:2e:c8:da:59:3d:
54:35:3f:68:e5:2a:df:e5:1a:85:00:af:1d:70:9c:22:e0:49:
ac:12:b1:1b:fa:49:ad:fe:56:7c:65:94:48:39:82:85:3c:6b:
1e:eb:0a:5f:08:90:8e:cf:ca:0e:cc:e9:21:93:ae:12:a7:a1:
89:21:20:06:60:bf:d6:23:2e:86:71:09:bd:24:a3:5a:3d:ab:
ea:4f:cf:1b:7a:64:99:8a:12:a2:50:d9:b9:84:32:d2:43:79:
94:29:ee:11:af:45:dd:dc:9e:4d:05:ab:c3:68:39:68:92:d1:
4b:57:bd:58:39:36:64:64:cd:cc:b2:88:0c:73:94:ed:63:ba:
00:e5:aa:0e:8b:e8:39:59:bf:cf:d7:af:71:89:d4:da:06:3a:
ec:83:a9:a0:15:c0:b6:ee:80:3d:31:86:f7:63:63:8c:64:76:
c9:b1:d5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:17:48 2026 by rpki-client