Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: kYjXslE6lBh3Zl9BUx36KH6amBNwGJgiQSOIhIvnJLk=
Subject key identifier: B4:E3:19:A3:4E:DB:DA:27:13:49:37:A2:7B:09:E5:D0:B2:CA:A4:C9
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 01A13E25F9CB55032BD401A90F21BE621E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 06:00:38 +0000
Manifest this update: Thu 15 Oct 2026 06:00:38 +0000
Manifest next update: Fri 16 Oct 2026 06:00:38 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: i7pxfeKTls57hpd6YYAlvJFa40XAbi0rm5bYjTSElqI=)
2: McYjjC5KqcvB_nVezfbVebYSEGE.roa (hash: RfRO6ieaH0AVTevS9LKIVFeYDX2W75T2UkbyiNhzcEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:f9:cb:55:03:2b:d4:01:a9:0f:21:be:62:1e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Oct 15 06:00:38 2026 GMT
Not After : Oct 16 06:00:38 2026 GMT
Subject: CN=b4e319a34edbda27134937a27b09e5d0b2caa4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:30:bb:ed:ce:03:9a:16:04:38:43:f1:90:
bb:60:48:1a:40:d2:aa:7e:23:e1:23:da:83:cc:cc:
f9:9c:0a:4f:fb:e5:1d:58:b8:d2:fe:da:74:17:f2:
4c:e1:90:cf:40:28:60:88:6b:47:8a:74:96:99:df:
66:70:bf:e7:3a:f5:82:7a:95:a0:db:60:2f:57:e4:
8b:c1:a7:19:1a:3f:e0:98:87:3a:24:94:7b:37:99:
ce:79:3d:c6:17:bb:0a:90:17:97:e2:35:d0:d2:cd:
ee:6c:50:f2:74:2b:cf:fa:a7:42:e0:75:e1:3b:40:
5f:44:1d:d2:ff:9d:83:0c:33:58:aa:63:d6:f2:4a:
75:f3:a6:26:8d:8e:7d:a6:03:fb:71:58:3c:42:2c:
53:26:84:85:52:90:87:81:52:08:c3:4b:c8:76:f8:
7e:1b:e0:55:41:e7:a3:48:e4:be:9e:c9:5e:dc:c9:
29:03:fe:a7:09:2a:a4:f6:27:e9:32:98:30:26:41:
a1:10:c1:0a:e4:75:ec:67:f7:c1:0f:15:bd:0b:2b:
e9:29:13:80:3b:9a:b0:f9:7d:45:09:71:52:1a:1e:
b9:61:d7:76:5c:a7:e0:b3:10:f8:6d:15:c6:ad:8d:
8e:9b:8e:78:da:76:ca:6b:4c:eb:ee:ba:d5:de:ba:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E3:19:A3:4E:DB:DA:27:13:49:37:A2:7B:09:E5:D0:B2:CA:A4:C9
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b2:44:f6:7c:11:81:e5:81:66:e1:b9:43:ae:fc:7d:9e:1c:
fb:09:da:68:f3:c9:1a:52:4c:27:33:d8:fc:00:57:c7:84:95:
30:3a:69:64:48:48:36:fe:4d:48:7b:84:4f:b8:56:cb:5b:6a:
97:d5:a7:1d:3c:c6:f5:c5:66:6c:53:80:7b:f1:4d:23:af:4f:
b1:b6:b0:e8:f6:f4:f0:e1:bd:7c:1a:2f:11:a3:07:27:34:a9:
54:54:0e:d2:06:ba:c9:af:4b:40:8a:60:37:24:1a:10:57:41:
76:68:01:fb:2e:fe:44:8b:1e:03:37:f2:c5:99:6b:4d:b7:17:
90:e7:73:00:60:35:89:c5:12:1b:73:d9:69:d8:0d:ce:8b:2d:
7e:8f:0d:9f:ea:8d:8f:66:cd:3a:be:f6:a1:ae:81:eb:ab:30:
d9:85:29:64:84:93:6e:ff:61:c2:c6:a8:6a:5e:e6:b9:62:ed:
d4:1b:66:c4:35:2b:a3:eb:0c:69:53:2f:2e:00:13:7b:45:1b:
25:28:3d:59:be:c9:c8:be:56:46:45:12:30:e2:96:3d:28:52:
d5:d6:4c:3e:63:6b:95:83:6c:c8:7c:21:5c:27:41:08:fa:48:
fc:1f:ce:21:a9:77:cd:20:aa:00:a7:af:b7:35:c9:c4:65:fe:
07:fe:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:26 2026 by rpki-client