Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
File: 1XEqnWm0rsl4nBTLBStxObBuddo.mft (raw, json)
Hash identifier: PMt8Oa6WP/x5QzXEmbe50h++QpxCdbQ0bh4pW/I8iXE=
Subject key identifier: BA:42:57:3B:20:B9:C4:56:44:07:3F:14:E1:DE:4A:C3:DE:A7:EC:76
Authority key identifier: D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
Certificate issuer: /CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Certificate serial: 01A181F48BDA6E8CA64579C286F1D6E7FF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
Manifest number: 0143
Signing time: Wed 28 Oct 2026 10:00:49 +0000
Manifest this update: Wed 28 Oct 2026 10:00:49 +0000
Manifest next update: Thu 29 Oct 2026 10:00:49 +0000
Files and hashes: 1: 1-weOiU_pH6PrjNpa-GE0KnH7irc.asa (hash: JI42zOYreA+n37JUoTRA2ZhWTsJcuughghX2Yz9FgMA=)
2: 1XEqnWm0rsl4nBTLBStxObBuddo.crl (hash: ikiKOdCwzF1YMBdvUOi95Va9ER3lUr4vxBaFFutGik0=)
3: p3oDOHgOBUquyHxeOzPNLZDbBV8.roa (hash: SIpRRKiTJavAEPnglZMtAVfyMKpObUjWtFsTsETWsUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:f4:8b:da:6e:8c:a6:45:79:c2:86:f1:d6:e7:ff:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Validity
Not Before: Oct 28 10:00:49 2026 GMT
Not After : Oct 29 10:00:49 2026 GMT
Subject: CN=ba42573b20b9c45644073f14e1de4ac3dea7ec76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:97:bc:ec:32:1a:6a:94:40:de:4e:0c:ed:
d8:49:1e:d8:80:77:97:7a:26:aa:86:34:6b:4f:f9:
1a:5c:ee:dc:a7:b4:a9:12:f4:9a:b5:86:d7:42:24:
b6:15:c9:15:a5:23:f0:ec:84:0f:c1:4a:1c:a8:12:
1f:fc:d2:cd:75:05:ab:c4:6b:ad:bb:c2:f1:eb:bd:
aa:f9:dd:45:c5:8d:2b:bd:2f:a9:c9:c1:ea:4a:23:
20:59:ac:01:fd:af:91:45:48:cb:24:b9:65:b0:f2:
42:c8:2b:f6:d6:eb:43:22:14:9e:27:a4:9e:ea:75:
1b:55:d0:d3:4c:d8:c3:19:4b:84:6b:32:76:2c:80:
22:75:3c:14:8b:6f:60:9e:84:e1:46:2a:64:fe:98:
2d:9e:95:38:46:b3:87:48:8d:13:57:ae:4d:f9:55:
51:7e:61:ff:6e:12:52:37:eb:d0:51:e7:e8:fe:56:
fe:8b:2b:b9:8b:f2:5b:bc:57:f4:b8:d9:15:b4:c1:
c5:e1:5c:3a:14:17:aa:e4:0b:db:d6:dd:30:c8:ea:
07:6e:4d:cc:1b:9a:4d:c1:99:fc:07:a1:a1:6a:f9:
d9:aa:69:1e:b5:59:31:0b:8c:d4:03:d4:f6:2f:40:
13:38:36:d8:cb:1e:db:21:ff:a4:12:f8:55:f6:65:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:42:57:3B:20:B9:C4:56:44:07:3F:14:E1:DE:4A:C3:DE:A7:EC:76
X509v3 Authority Key Identifier:
keyid:D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:52:c5:17:f3:8f:43:34:d6:57:2b:2f:b3:4c:68:94:5e:ed:
df:91:a0:35:a9:ae:75:a1:d9:bb:c7:02:2a:3f:11:0b:ad:26:
8a:18:27:ae:96:65:92:66:8e:36:35:84:c0:16:af:e8:40:94:
f7:b7:79:43:05:1e:50:f0:f3:6f:a8:75:ec:bb:f7:49:c9:9c:
11:a6:40:f4:20:be:ca:20:bc:fc:e3:ec:e1:5d:f7:32:8b:cd:
f9:9a:32:30:58:34:30:2c:54:f3:64:ed:c8:cc:99:09:71:ac:
c3:b5:f2:d8:3f:13:b5:4c:44:42:87:ff:ed:8e:c4:4d:79:26:
e6:62:4d:d0:4e:14:66:73:c4:32:ef:68:0d:5a:55:28:bb:cd:
05:b8:56:06:ac:27:1e:2f:1e:79:a1:46:72:de:55:75:de:61:
77:ef:7e:0b:1d:30:80:19:27:37:f5:e0:a2:50:37:c2:c6:73:
89:6b:71:5c:4e:78:46:20:0b:4f:7d:fb:c8:cf:ef:6d:78:ff:
fc:84:e6:01:f5:41:49:ab:ed:15:a3:8a:58:df:fc:1a:62:9e:
69:ec:3b:24:50:99:61:c3:55:e0:46:7c:9e:19:ac:56:2b:64:
c4:a4:15:55:f5:ce:cb:41:21:42:a0:5a:31:06:90:d4:a1:78:
36:72:12:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:33:55 2026 by rpki-client