Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
File: 1XEqnWm0rsl4nBTLBStxObBuddo.mft (raw, json)
Hash identifier: PUfq5ANzkLTUFs/nHpu7/p3g80hFrWtcIVEwJ//HGYI=
Subject key identifier: 07:9E:F7:0E:18:B7:46:1F:5C:46:19:B0:06:98:3D:2B:25:54:24:0D
Authority key identifier: D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
Certificate issuer: /CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Certificate serial: 01A03ECE53648EDDB8E382D3C6F7F1FD8A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
Manifest number: 98
Signing time: Wed 26 Aug 2026 16:01:44 +0000
Manifest this update: Wed 26 Aug 2026 16:01:44 +0000
Manifest next update: Thu 27 Aug 2026 16:01:44 +0000
Files and hashes: 1: 1XEqnWm0rsl4nBTLBStxObBuddo.crl (hash: oRX3tLVahhCaqDyUlr3/ssxJYTrqrmAr7evAxBEyaZY=)
2: xZ59-pNTc7ezOemP3gmY_8tZ3KA.roa (hash: +8eOBSGGw03CBaqRTg+4T+O7Q/El7GL/vSuip22cJd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 16:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:ce:53:64:8e:dd:b8:e3:82:d3:c6:f7:f1:fd:8a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Validity
Not Before: Aug 26 16:01:44 2026 GMT
Not After : Aug 27 16:01:44 2026 GMT
Subject: CN=079ef70e18b7461f5c4619b006983d2b2554240d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:81:27:b1:7f:0a:7f:80:f4:d4:11:af:1b:
57:6e:4d:83:36:47:c9:d2:c2:09:cf:a9:eb:98:ad:
a8:70:ed:83:54:0d:cb:e6:f7:4b:44:53:06:c9:dc:
66:a8:c9:c1:92:27:99:86:8f:a1:38:98:eb:a6:f7:
d4:e8:41:8f:0c:73:4f:b0:a4:59:53:97:dd:57:9a:
d1:34:ed:bd:8a:71:86:fe:94:09:45:52:de:df:14:
51:6b:e4:81:b3:72:8c:9d:13:4d:b4:dd:d5:6f:0b:
71:54:02:97:50:52:f3:ea:0d:df:83:8a:17:59:2c:
24:c1:7f:43:f6:e1:96:3c:90:2d:e7:af:20:f4:6f:
67:81:6e:f9:49:90:14:cd:1d:ac:66:2a:47:11:06:
06:8f:73:8e:06:e5:0f:dd:3a:42:b3:23:95:b2:80:
75:c5:02:05:a8:6c:05:37:25:4f:20:46:c6:f2:d2:
d7:9f:e4:61:e9:b4:c2:4d:12:11:33:cc:cb:46:9d:
d2:3e:d2:91:eb:1b:d9:2e:5e:db:8e:88:f3:e0:71:
f2:47:70:ef:d6:74:45:76:1d:8c:b4:62:13:7a:de:
e0:2a:d7:4a:16:4d:91:c7:c7:11:20:cf:a9:f9:9d:
a1:fb:44:5c:65:5a:75:92:50:87:d3:8e:ad:49:78:
9a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9E:F7:0E:18:B7:46:1F:5C:46:19:B0:06:98:3D:2B:25:54:24:0D
X509v3 Authority Key Identifier:
keyid:D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9f:3f:a9:ce:e5:c8:39:d6:e3:53:b1:92:07:85:1c:b2:2a:
ea:8a:ef:70:fc:ce:72:ee:d1:4c:8d:91:22:4f:16:07:29:38:
34:6a:72:41:08:59:e7:89:ce:8d:53:5a:8f:3a:66:d8:0a:25:
38:a1:1e:bb:12:f3:10:85:fa:23:81:25:fa:19:d1:d8:b4:8f:
44:05:9e:d0:7b:15:c7:a7:ca:7c:0a:dd:06:70:23:2a:dd:17:
66:aa:ac:77:78:30:e0:50:6d:cc:d3:a1:08:f8:f3:80:b2:33:
12:e3:9c:24:a9:0b:15:98:bc:97:10:ce:2b:cc:79:bb:97:d2:
36:49:5a:2d:b2:44:ef:29:84:66:e9:f3:83:74:86:f1:bf:94:
b8:d0:1c:e5:7e:01:32:9f:4a:f1:f0:cd:9b:4d:18:9d:b8:e2:
95:9d:e6:9e:6f:50:da:46:7b:ec:72:97:93:de:38:f6:01:80:
68:71:05:0e:5a:d8:0b:7d:fa:11:80:ea:5d:19:00:7e:a3:a1:
f8:4e:fd:15:b6:36:34:f9:c0:cc:c8:b2:9f:c5:c4:ca:df:84:
c5:9c:d8:42:c5:f3:cf:b8:ae:f3:b8:2c:c4:78:20:cd:53:52:
6c:8a:65:14:e9:f3:b8:ee:35:63:e8:98:5a:9b:ef:6d:32:7c:
96:cf:29:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:24:54 2026 by rpki-client