Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: 8GYOU71yoFnJJ6iJ/xUT6VOCeh7Ri7r8vT7giVYR3tQ=
Subject key identifier: F8:9E:16:36:75:B8:6F:25:01:0B:A3:02:A7:61:31:DB:41:3E:C1:DA
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 01A13D4A9514454835281476276F48BD0B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 1A63
Signing time: Thu 15 Oct 2026 02:01:00 +0000
Manifest this update: Thu 15 Oct 2026 02:01:00 +0000
Manifest next update: Fri 16 Oct 2026 02:01:00 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: jK/3j7EVcf6S13HP1mVE+YaR4ol7c3pAEtaGgs67VnY=)
2: suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa (hash: 5F65oe93bt7PTgDTFumLJnCP6tdXA4+0OqZl24dm2bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:95:14:45:48:35:28:14:76:27:6f:48:bd:0b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Oct 15 02:01:00 2026 GMT
Not After : Oct 16 02:01:00 2026 GMT
Subject: CN=f89e163675b86f25010ba302a76131db413ec1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:69:24:5c:0b:bd:77:c7:f3:da:4a:14:d7:
d3:ae:ad:f2:53:ba:86:0a:c8:e8:58:51:9f:e2:01:
be:6c:82:ab:f0:1f:75:79:be:c5:51:11:33:10:61:
82:3b:ee:9f:e2:13:43:98:e0:8a:53:63:10:89:69:
d9:4d:db:60:2a:9a:b9:60:57:0a:80:f1:75:3f:c9:
1d:d4:ef:06:3c:02:39:2a:9d:03:ef:0e:0f:fe:fa:
5d:3b:f1:60:b1:12:77:28:1d:ae:0e:db:85:cf:e3:
20:12:e2:27:bb:a9:c8:ab:6f:f4:1f:74:76:e3:d2:
ef:97:21:cc:b0:c9:98:56:b5:ba:e8:69:f7:9c:f7:
9a:6b:d2:2f:31:1e:aa:08:2e:30:9a:d9:72:ca:0b:
14:83:7c:7c:f9:ee:37:fd:06:95:bb:1c:a5:71:4f:
e7:71:d3:fa:61:64:ea:a9:df:c5:32:90:91:4f:b2:
7c:bf:a6:8d:f3:95:bc:83:6d:c7:06:45:42:83:3c:
4b:66:57:a2:67:d1:67:f3:4a:7d:5f:81:83:21:6e:
08:5b:e1:30:d6:9d:46:64:73:ab:35:8c:cf:0e:5b:
d2:ae:ec:68:2e:46:7f:f8:4f:70:b8:3e:e0:81:e4:
a4:69:78:79:aa:ea:cb:08:f3:01:28:de:bf:54:e5:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9E:16:36:75:B8:6F:25:01:0B:A3:02:A7:61:31:DB:41:3E:C1:DA
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7f:db:7c:a8:39:08:2e:c2:08:cb:78:17:f1:93:44:eb:ee:
ad:fe:c3:93:da:ce:92:dc:54:80:e5:0b:57:2c:bb:86:ee:9e:
c4:75:f5:69:36:19:64:45:b9:87:cf:0c:43:10:c2:47:19:fa:
18:f5:e3:6c:a6:ef:09:8f:ec:fc:11:17:f1:2c:35:a1:db:53:
8d:1b:24:16:84:ed:40:6e:74:fc:00:94:c1:8a:7c:1a:97:f0:
5e:a5:cf:7d:f2:17:be:d0:81:4a:34:27:21:8b:ff:d4:ba:72:
c3:20:58:6d:2d:16:8d:da:ba:7c:bc:39:87:d7:f0:1a:11:00:
c8:a5:43:3e:df:85:c0:da:c9:35:85:06:e8:85:d5:15:10:54:
af:a7:31:9a:98:2d:00:dc:50:bd:e6:6e:fb:38:b8:72:7e:8c:
74:76:a5:68:a7:d7:2a:87:4c:54:97:74:37:26:53:b2:60:06:
0a:5a:7d:a3:a7:47:69:f2:83:fd:78:bf:64:2f:94:83:8f:7a:
2d:60:84:ab:e7:f6:2d:d0:5d:c9:5b:bb:aa:9e:b6:34:6c:92:
2e:14:12:6f:6c:de:32:3b:60:6b:bf:82:73:09:e2:67:d0:ae:
43:4b:0c:6a:7f:bc:78:89:41:4c:c9:0c:55:68:ca:34:7f:b5:
62:2b:e9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:21:04 2026 by rpki-client