Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: UTLGPf1x18wYlUWFjecPGrVrZ5h8CDX2oHnxMwBXGXg=
Subject key identifier: 14:04:26:7C:22:86:8A:12:AF:A2:C6:7A:8B:48:EC:CD:54:D5:F5:96
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 01A16E3697B2A8B9DF8713466DE0E722EC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 188C
Signing time: Sat 24 Oct 2026 14:00:33 +0000
Manifest this update: Sat 24 Oct 2026 14:00:33 +0000
Manifest next update: Sun 25 Oct 2026 14:00:33 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: ytQJBowpRa1Zg/sI3XF2SGfI75iRukZCeZ3nTgfiEr8=)
2: I9OU46hLv3YAsUVV8jYm-K3ogQc.roa (hash: PTrVMEbjSSvbOH15AKpjuFbu9tPLz/RRTf10Mbtb4p4=)
3: rbBoW2EoIYr4WTvaRxP1eRxLC9A.roa (hash: J3nkU/5cOyHNdOGxEte3et6IIXxfoCGaTYZOSkdKSjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:36:97:b2:a8:b9:df:87:13:46:6d:e0:e7:22:ec:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Oct 24 14:00:33 2026 GMT
Not After : Oct 25 14:00:33 2026 GMT
Subject: CN=1404267c22868a12afa2c67a8b48eccd54d5f596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:2f:7e:06:a9:e4:e5:9c:4e:8a:56:ed:72:
ea:32:87:23:06:90:8e:e2:55:ec:6a:61:91:37:24:
92:b5:dc:f8:f0:30:55:09:3b:53:01:4b:56:6e:8c:
4f:1c:dc:9c:6e:41:24:da:70:84:d4:1f:ad:57:1a:
c0:6b:71:8a:83:5f:0a:c2:b7:95:3d:06:02:11:fe:
cc:11:cf:a1:91:d0:b0:c0:a6:2e:dd:b0:62:28:c1:
bb:59:3f:83:4d:40:31:12:57:03:92:07:73:38:aa:
ba:21:a2:0e:02:53:7b:71:2b:14:eb:31:bb:76:99:
18:65:79:80:48:65:6f:52:73:7e:2e:8c:a7:37:73:
99:58:59:61:51:20:1b:5c:61:1f:0d:34:a3:9f:ee:
c3:e7:13:3a:21:ca:f9:fc:1a:88:82:7e:36:2f:5d:
2f:8f:94:80:46:44:45:04:71:38:d9:b4:7a:a2:ca:
85:64:85:e1:c4:06:c3:18:b8:08:10:48:59:2a:2a:
2c:ca:65:0e:f8:e6:18:7d:7c:a7:b4:ec:55:94:07:
74:4f:41:b8:9f:b9:3c:da:7f:76:8a:e7:59:99:8e:
7a:2e:ff:89:47:ff:42:75:36:a3:e2:43:44:0c:54:
42:08:fd:b7:dd:43:3b:cd:21:af:da:01:d8:79:75:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:04:26:7C:22:86:8A:12:AF:A2:C6:7A:8B:48:EC:CD:54:D5:F5:96
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:82:97:92:fb:c3:9c:35:6c:38:8d:e5:bc:72:f0:08:3e:db:
4e:e2:9a:11:69:6b:d8:b1:fd:ab:a7:fb:dc:61:3b:4d:ae:29:
e4:64:90:71:81:95:f8:83:46:03:12:21:06:cf:f5:0b:4e:21:
06:1c:a6:2b:f6:b6:0f:34:69:e5:ef:00:65:61:e2:6d:f5:85:
af:0f:ac:e8:9a:19:27:51:bd:03:4b:08:a1:4f:05:a2:c7:05:
13:41:98:ef:4d:e0:6c:65:eb:92:76:8b:b3:f0:06:84:64:f2:
e7:65:c8:98:b0:7a:39:01:26:21:72:34:7b:49:c9:3a:74:90:
89:15:7c:ef:64:8e:22:4c:5a:17:12:ed:66:a2:82:ee:0c:a0:
28:19:66:0e:b9:ab:c8:ad:c7:18:be:92:b6:da:d5:1a:ee:b8:
14:ef:6c:19:f2:34:d1:da:d7:7e:ca:6b:d8:06:76:83:d5:05:
29:0b:b8:ed:ed:e5:55:79:3d:e9:45:27:df:15:0e:d5:74:97:
50:1c:79:04:03:47:e4:80:b4:89:53:01:e8:ad:51:e5:f1:1f:
3c:79:4e:2e:95:dc:d8:c8:25:76:5d:10:a9:e6:8e:9a:6e:f5:
2a:cf:ef:95:98:ef:23:4f:42:83:9e:c3:4e:26:1d:06:07:40:
05:1f:9c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:18 2026 by rpki-client