Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: QQ50o0o2rFJN67Kmy5rp6/CDgQn8VLZ7uJjQ0u8Tskg=
Subject key identifier: AB:F5:24:B2:64:EF:D6:6E:5D:B5:4C:F7:5A:00:68:CB:E5:68:AE:08
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 01A11E9AA61571C17676112540EF41920721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 1A17
Signing time: Fri 09 Oct 2026 03:00:13 +0000
Manifest this update: Fri 09 Oct 2026 03:00:13 +0000
Manifest next update: Sat 10 Oct 2026 03:00:13 +0000
Files and hashes: 1: 7wQkjJzOFmhj4SlVLo-x26w_WTc.roa (hash: uBOYkM28EcQ5gB0Rh8GkUGQb+Ga2UZ8JgAHYGzfSXXI=)
2: uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa (hash: j629zk7F2qIP3WUGuPA4LCpVgjs/1/AZWtVe090YvCY=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: j+cEj0KW4SKrVA8acCLZk0HEM8szLZcmGm9a/fGwHsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:9a:a6:15:71:c1:76:76:11:25:40:ef:41:92:07:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Oct 9 03:00:13 2026 GMT
Not After : Oct 10 03:00:13 2026 GMT
Subject: CN=abf524b264efd66e5db54cf75a0068cbe568ae08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:8e:ef:52:17:20:02:8b:a0:f6:2c:bf:d9:
c1:8d:4f:fc:d0:fe:83:d8:07:79:28:75:46:e1:e7:
a9:82:ec:aa:95:8b:0e:3d:b7:ae:41:8b:2f:38:c7:
bb:7b:ed:2e:c8:c8:cb:03:51:b8:41:d1:7e:8f:1b:
15:d5:0f:38:3a:09:2f:0b:b9:af:af:d9:4b:48:e3:
dd:55:89:93:1d:86:3e:86:d3:51:dd:a7:3d:6b:9e:
2e:e6:eb:c5:ba:6f:34:f3:65:ef:1b:8b:e4:78:95:
97:3a:97:ba:b4:2b:00:91:dd:0e:48:cd:73:e0:c6:
b2:83:a2:0e:fd:cf:7e:4a:94:71:b0:2a:0a:67:c6:
dd:34:d4:02:b3:d4:f8:10:bb:1f:13:95:d1:6b:36:
b9:fb:4f:cf:e9:ae:78:d3:af:d0:4d:e8:bb:b7:d7:
e8:a6:05:b8:3d:53:e3:68:1e:d9:91:b5:0c:88:47:
51:a5:0f:04:9c:dc:f8:6d:72:4e:ba:3b:c4:f8:1c:
d6:23:4c:cb:6d:cb:03:5c:cb:9e:94:0d:ed:d8:85:
ba:1e:74:05:7a:50:ca:82:2e:b0:37:2f:5a:b4:34:
0e:35:d6:d3:c3:c6:94:b7:21:2e:2f:ed:05:78:c9:
22:6d:83:a1:1f:d3:7c:9a:2c:ef:ff:b8:e1:09:0d:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F5:24:B2:64:EF:D6:6E:5D:B5:4C:F7:5A:00:68:CB:E5:68:AE:08
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:82:d6:8b:62:bd:d9:4e:36:4f:55:e4:86:e9:6d:8e:57:d3:
99:5a:f5:69:c4:d2:10:24:5e:db:6f:fc:0f:aa:75:e0:e5:86:
df:b3:36:b6:a7:92:b8:9f:a9:69:94:de:ea:4e:8d:da:f3:66:
58:ae:5a:97:47:59:ca:bb:25:c7:b7:e0:c7:9b:36:96:e4:93:
2a:42:2d:7e:c8:a3:36:4d:03:f2:5e:cd:61:be:33:28:db:7d:
39:27:ba:e4:2d:34:98:6d:a6:c5:cb:d8:e0:10:39:af:d9:ac:
d5:6c:9e:9a:01:fa:84:48:9b:51:c0:7a:a6:64:a3:54:05:1d:
ad:9c:dc:7c:c2:e4:c0:4a:e6:3d:fe:cb:0e:e2:ec:82:b2:fc:
55:4d:80:47:48:a8:97:50:9e:4d:cd:71:e4:b3:63:ed:bb:6a:
4b:08:be:46:93:7e:75:c2:05:4e:3d:c9:15:4d:73:97:2f:c7:
04:14:37:65:10:70:ae:bc:56:7c:97:2f:2d:b7:6c:6c:68:b4:
b0:7a:c8:b7:6f:39:2d:a8:79:d8:95:3d:d1:68:89:35:32:c6:
a1:89:6a:53:68:41:4d:17:bc:e3:6d:6a:36:a5:96:a8:af:89:
0c:7d:1f:f0:60:e6:38:53:0d:9f:3e:49:66:b4:ad:fb:d1:12:
2a:fe:fe:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 08:22:44 2026 by rpki-client