Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: 6+imHolBlPovEe1W5RLsXAhS9HJCw4GGapSSpfwRzEk=
Subject key identifier: C5:01:C4:F2:9C:40:39:DE:09:BA:DA:88:28:58:C9:6E:4D:48:3F:57
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 01A13E26FA007E88B058EBE577695E8D9DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 089A
Signing time: Thu 15 Oct 2026 06:01:44 +0000
Manifest this update: Thu 15 Oct 2026 06:01:44 +0000
Manifest next update: Fri 16 Oct 2026 06:01:44 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: 0sbpz+iPSrQcMBALESDgoKDEwzOhWkgkZ2EHWeVLoFQ=)
2: uR2uktqhw4VUD7MA87wx15LSDMQ.roa (hash: dBrAWGqUgoQMO2aAWFKVKmrXl4B58KcbKhMomtwhN/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:fa:00:7e:88:b0:58:eb:e5:77:69:5e:8d:9d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Oct 15 06:01:44 2026 GMT
Not After : Oct 16 06:01:44 2026 GMT
Subject: CN=c501c4f29c4039de09bada882858c96e4d483f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1a:35:e2:d7:0e:16:25:23:0f:4f:43:65:02:
bf:55:4e:34:9e:f4:1f:1b:79:5d:9f:37:77:16:dd:
a0:4e:d5:49:c7:82:a6:76:30:aa:5f:fb:11:ab:79:
d2:a8:9c:c7:31:a4:5a:eb:c5:ac:a3:5e:ba:f7:ba:
73:ee:87:76:2b:22:22:e8:e8:eb:e4:3d:e1:08:04:
03:c7:e5:5b:19:90:55:b0:ac:8c:f5:a5:9e:04:4d:
64:50:6a:81:f4:c3:45:42:b7:ff:f9:73:18:1d:e3:
fc:89:9a:a2:a5:37:02:54:a3:7a:94:15:87:94:25:
b9:c4:f6:26:1f:d1:2d:21:de:85:e5:80:f8:a5:79:
be:16:3b:15:78:99:66:bc:14:e9:c9:db:61:1d:42:
c3:07:2e:09:bf:0a:5a:f8:8c:f2:b9:66:3b:71:8b:
02:dd:dc:80:44:b5:06:ad:f0:3c:a0:6b:d1:25:64:
23:9d:42:26:69:5a:7d:f4:2a:02:1c:2d:d5:d9:54:
aa:eb:55:a1:d2:f8:69:21:a4:f7:1e:cb:3f:71:e0:
87:05:85:e6:d7:1f:4c:20:78:f1:63:c8:f7:e8:46:
34:a7:e6:3a:c0:2b:bc:24:c0:88:42:8d:a5:57:e0:
1d:8e:7f:92:44:5f:2a:ab:9c:fd:c0:a2:c2:51:4e:
c1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:C4:F2:9C:40:39:DE:09:BA:DA:88:28:58:C9:6E:4D:48:3F:57
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ff:d6:37:82:da:ef:39:b9:c9:46:02:63:6e:08:be:7b:58:
0e:d6:31:85:4f:51:9a:4b:2e:49:18:03:03:55:73:ff:ba:f2:
d3:c8:ac:da:17:4d:46:c4:5b:0c:8e:31:9a:84:5e:16:08:f6:
e6:74:61:7a:4d:28:e6:92:1b:74:c9:d2:5d:e5:d8:9a:98:cf:
a2:8c:47:d6:36:34:b3:48:8f:06:62:01:6e:2c:f3:84:f5:e7:
50:fb:53:07:ff:ef:db:00:fe:a6:41:f6:4f:1b:11:f0:a1:7f:
e5:fe:6d:d6:fd:c9:1f:75:4f:78:02:5b:00:74:da:87:fe:cf:
51:e4:0f:c7:c2:a0:cf:2d:bb:ad:90:36:b1:f1:3c:7e:84:8f:
15:58:18:f2:7b:81:93:b2:54:56:bf:18:ea:66:02:63:b4:6a:
14:a6:97:5e:40:f4:07:c4:a3:6c:a7:a9:05:e5:ea:12:b6:54:
03:d2:1e:fb:8a:69:7c:73:57:1e:48:a8:54:94:78:49:33:0d:
f5:49:47:37:0a:1d:31:6e:93:82:f8:9b:d3:34:55:c7:03:a5:
a6:58:0f:01:98:d3:a1:19:f7:3b:f5:4e:7b:1c:2f:66:5d:af:
5d:88:6c:79:6c:6e:63:76:b5:f6:e3:1f:c1:8d:b0:50:f2:7b:
37:75:96:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:31 2026 by rpki-client