Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: nkAqPqmuISRPlhw5iIHwAoSInS8juiTwoshaT1rQYy8=
Subject key identifier: 75:43:21:35:67:0A:16:97:CA:5D:75:4C:A5:5B:65:3C:6D:04:EC:B5
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 01A1667DB564700EA0CC95516947498DB5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 1888
Signing time: Fri 23 Oct 2026 02:01:16 +0000
Manifest this update: Fri 23 Oct 2026 02:01:16 +0000
Manifest next update: Sat 24 Oct 2026 02:01:16 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: 8uN7yrpOOB7YoX7s6supCyEjejZMu6K2kIycp82DFW4=)
2: I9OU46hLv3YAsUVV8jYm-K3ogQc.roa (hash: PTrVMEbjSSvbOH15AKpjuFbu9tPLz/RRTf10Mbtb4p4=)
3: rbBoW2EoIYr4WTvaRxP1eRxLC9A.roa (hash: J3nkU/5cOyHNdOGxEte3et6IIXxfoCGaTYZOSkdKSjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:7d:b5:64:70:0e:a0:cc:95:51:69:47:49:8d:b5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Oct 23 02:01:16 2026 GMT
Not After : Oct 24 02:01:16 2026 GMT
Subject: CN=75432135670a1697ca5d754ca55b653c6d04ecb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:ef:b1:b5:51:4d:63:bc:34:b5:fd:91:48:
8e:1f:46:66:29:6d:07:2e:60:b8:86:2e:3a:44:b6:
d6:1e:2b:0b:ab:a4:b1:f4:df:4a:03:43:50:51:4d:
ec:15:81:fa:98:5d:4c:75:55:69:00:05:02:36:5a:
d8:e1:7b:77:16:de:53:8a:b0:c4:64:f1:48:89:0f:
21:c4:e7:1b:84:18:6b:36:a0:0e:94:95:13:69:69:
34:46:93:cb:3c:df:0d:f5:c1:87:ed:ed:f8:b6:ae:
3c:95:9b:76:6d:f9:7b:fb:13:62:cb:0e:f4:4a:fe:
1f:4c:df:62:f6:ca:6f:79:3b:92:18:64:5f:0d:8f:
2b:a8:a6:1c:f5:26:76:22:c9:58:22:28:aa:eb:a6:
8f:77:9f:31:70:25:4b:ef:73:bc:a7:7d:49:0c:ef:
55:0d:f1:27:36:09:99:a6:be:6e:9e:91:12:cd:b2:
1e:c1:cf:b8:2a:45:ee:f5:52:11:bf:b5:0d:d3:16:
31:da:8c:0d:ef:56:6a:66:55:cb:c8:3f:72:30:54:
98:52:91:e0:c3:3c:d0:bb:c0:b3:5b:f7:58:8a:db:
9f:55:8c:72:ab:b6:af:aa:70:d4:c2:48:81:c0:fe:
dd:7e:93:88:90:01:34:18:fa:a5:e2:d6:d4:72:bc:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:43:21:35:67:0A:16:97:CA:5D:75:4C:A5:5B:65:3C:6D:04:EC:B5
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6d:f2:63:56:ed:bd:2e:ec:1e:f8:b1:77:9a:e1:0e:a8:2e:
a2:2f:ce:3e:1a:9c:7f:c7:b3:6c:a0:25:f6:bf:91:77:b7:a0:
ec:c9:28:dd:3b:18:24:66:ea:b0:2b:07:11:84:0e:32:f4:00:
c2:4f:94:c8:2d:92:ba:2b:2d:96:d4:68:5b:13:11:9f:b4:c1:
fb:73:33:5e:d1:12:a6:7a:a7:a6:c6:d2:23:98:ab:bf:7a:4d:
65:fa:4c:83:cb:48:a5:09:5b:eb:e0:56:f1:d6:75:45:e0:bd:
ad:a5:74:22:af:ec:69:06:a9:27:c4:00:8f:79:ea:fc:17:5e:
6f:0a:6a:90:3b:8b:14:bd:d4:a6:1b:4e:96:37:91:89:3f:44:
78:f4:f6:be:d5:4d:d4:4e:14:5a:81:fc:69:ad:65:c0:76:93:
fe:47:3d:f5:fd:5b:6e:bd:95:50:fb:2e:74:f8:17:73:70:df:
02:85:66:5a:a2:91:e9:8a:10:7e:f0:52:7c:a1:53:d8:bb:0f:
3a:34:76:2e:d8:16:24:49:51:e1:41:c1:56:0a:d8:b4:d5:0f:
a5:be:38:71:0a:0f:34:89:e9:49:b4:f9:75:9f:bf:b6:9d:18:
64:7e:ef:60:26:fd:05:0a:10:4d:d9:5d:75:b7:b6:ef:d3:8b:
8b:8c:56:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:24:29 2026 by rpki-client