Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: O5fk/32N0/Awd4qxYdH3zJJCh7ObKM5M9nTLlKYIXJ4=
Subject key identifier: 8A:0B:51:F7:9B:A2:21:D0:76:E4:F0:22:B0:95:EB:C8:2E:80:53:7B
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 01A06D5E147F2C07E10F146353D0E9F1D016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 1807
Signing time: Fri 04 Sep 2026 17:01:17 +0000
Manifest this update: Fri 04 Sep 2026 17:01:17 +0000
Manifest next update: Sat 05 Sep 2026 17:01:17 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: BDtrtCW7tM5+Sv+SHhZFTh5aGOU4TyVsEp+x/Pripm8=)
2: I9OU46hLv3YAsUVV8jYm-K3ogQc.roa (hash: PTrVMEbjSSvbOH15AKpjuFbu9tPLz/RRTf10Mbtb4p4=)
3: rbBoW2EoIYr4WTvaRxP1eRxLC9A.roa (hash: J3nkU/5cOyHNdOGxEte3et6IIXxfoCGaTYZOSkdKSjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5e:14:7f:2c:07:e1:0f:14:63:53:d0:e9:f1:d0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Sep 4 17:01:17 2026 GMT
Not After : Sep 5 17:01:17 2026 GMT
Subject: CN=8a0b51f79ba221d076e4f022b095ebc82e80537b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:5c:28:81:29:2a:bf:31:f3:8b:ca:d4:81:
c1:a8:1c:b5:38:2a:4f:e6:0e:39:9a:1e:b1:07:9f:
52:4d:e8:6e:e2:d6:b5:19:d8:2c:a8:04:93:ee:2d:
6c:a2:39:05:c9:33:c4:b2:c8:a0:a1:74:b9:f5:f1:
36:1d:24:32:c5:46:73:48:36:2e:ba:63:1f:48:ad:
e6:eb:c4:8b:17:bc:50:78:f0:4f:48:b1:f1:f1:4a:
fc:2b:74:60:5e:78:cf:9a:37:28:17:10:4f:7e:70:
c1:7d:a6:de:50:50:b1:d0:7d:88:b1:37:d9:3b:48:
ab:99:02:1c:18:51:07:4d:f5:65:5d:72:7e:79:3f:
a7:dc:ca:66:be:12:fa:fb:56:d7:49:9e:22:d4:81:
60:8e:4d:c2:61:10:c3:03:da:c5:f0:d1:1b:3b:df:
70:52:7d:10:ff:27:d0:4f:fb:82:89:f4:89:b8:72:
d1:67:d0:60:16:e3:de:60:36:9d:2f:7a:df:86:74:
9a:b5:69:a5:fc:08:09:3a:5b:71:78:af:15:16:cd:
cb:c7:f0:84:a5:0c:8c:44:20:fb:55:b9:64:6a:67:
87:67:4c:b8:b7:c4:1c:cb:92:56:9c:70:6a:f3:17:
c6:7b:c3:23:c8:9d:e8:04:d5:79:d0:5e:c3:c0:c4:
d6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0B:51:F7:9B:A2:21:D0:76:E4:F0:22:B0:95:EB:C8:2E:80:53:7B
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:38:83:a0:ca:2b:66:c8:49:36:79:bd:d9:16:b9:7d:09:9d:
12:af:5b:2e:2b:5f:08:f7:b4:ec:e3:2c:a0:11:de:50:d9:60:
de:c7:60:2e:8b:d0:bb:59:38:da:15:bd:46:37:fa:f5:e0:91:
56:85:b1:9f:14:f2:b3:90:b1:3d:43:25:f8:24:b4:6d:2b:35:
4b:0e:58:08:64:2c:8f:28:7f:f6:75:79:a8:f9:e5:9e:27:a4:
96:4a:f8:3c:df:ea:f2:bc:7d:20:92:5d:0e:57:7d:09:57:3e:
1b:76:e7:d5:d6:d8:27:1e:71:ce:79:63:9d:69:16:98:9b:da:
2f:69:04:6f:be:31:40:11:f8:f9:da:55:7d:5f:4e:d3:5b:62:
65:aa:80:76:ee:0f:39:b0:ca:17:72:fa:8d:fd:75:de:82:7a:
e7:b1:58:b9:78:f2:e4:75:f0:d7:58:85:de:45:4b:83:eb:1e:
8c:e1:7b:24:39:ee:f8:d8:04:c2:fe:39:02:86:03:e2:9e:18:
1c:82:e7:4c:42:c5:55:21:03:90:b1:7e:2f:a2:f7:e6:24:9b:
29:74:df:0b:a8:a5:ec:7e:44:f9:39:e9:b0:35:df:cb:d3:af:
7c:ff:64:c4:c5:bf:cd:d4:72:06:06:54:37:42:84:e4:84:3d:
f4:ad:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:23:48 2026 by rpki-client