Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File: C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier: HtAzS7u7hFoxzUHWeS15h9CXLzuX1M32/AHqx+K4w/I=
Subject key identifier: F2:DD:24:EE:7C:8A:26:D5:12:5E:62:CD:68:0D:B5:11:F3:99:42:EF
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer: /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial: 01A147CE42E35B3803D08B8953745275DB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number: 1AA6
Signing time: Sat 17 Oct 2026 03:01:02 +0000
Manifest this update: Sat 17 Oct 2026 03:01:02 +0000
Manifest next update: Sun 18 Oct 2026 03:01:02 +0000
Files and hashes: 1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: EK1+gQTlG06Ozv4gn094YC5u8UdU/3E/cIKPyR7NchA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:ce:42:e3:5b:38:03:d0:8b:89:53:74:52:75:db:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Validity
Not Before: Oct 17 03:01:02 2026 GMT
Not After : Oct 18 03:01:02 2026 GMT
Subject: CN=f2dd24ee7c8a26d5125e62cd680db511f39942ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:0b:a4:e3:c7:98:1f:63:b5:cc:5b:d6:52:
9e:35:e8:d8:7b:57:e8:3a:8d:4c:1d:3d:1f:66:7d:
9c:d1:b4:28:73:0d:7a:ea:6c:1c:fd:48:83:71:33:
f6:df:9b:e3:37:75:66:f2:dd:cf:13:cf:a9:8b:f1:
74:c7:2e:f5:c9:68:f9:28:77:dc:d3:31:42:b0:78:
8b:29:48:88:1c:a0:bf:46:23:a3:8b:fb:70:e9:04:
b8:f7:c9:ef:c3:29:65:3e:04:cb:2f:ea:50:7e:da:
b3:6a:be:02:95:15:da:24:58:0c:34:a3:94:eb:23:
44:fc:d7:87:c5:19:f0:28:bf:f3:58:97:da:a3:ca:
e5:4b:d4:81:38:c8:80:49:ff:89:e1:dd:0b:9b:28:
f5:8b:87:16:37:89:e6:6f:d9:87:bc:84:ca:15:05:
26:0c:49:39:e5:58:41:1e:22:f9:65:ce:81:b1:72:
82:35:d6:e6:28:cb:30:f9:d0:00:1d:a0:f5:34:f1:
7c:c3:9a:05:74:c5:c4:61:cb:e3:7b:1f:83:65:40:
f6:2c:6d:f0:d8:2d:cb:e7:5b:81:df:f7:a5:b6:65:
ec:f8:b4:5a:0e:7e:32:d8:3e:36:ae:b8:3e:1f:59:
99:9a:0e:cd:25:57:59:6e:2e:d0:f1:fb:42:49:f4:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DD:24:EE:7C:8A:26:D5:12:5E:62:CD:68:0D:B5:11:F3:99:42:EF
X509v3 Authority Key Identifier:
keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:59:04:86:0e:4c:ae:c6:55:e3:6d:32:61:d5:7a:74:a8:b1:
1d:f2:71:95:ce:51:76:76:ad:50:f8:c5:d8:8a:b9:39:d4:13:
e4:6c:d9:31:b8:29:e6:dd:55:36:b1:dd:53:79:f2:a6:46:1d:
10:da:95:33:7a:c3:d1:80:f2:34:da:1b:36:44:69:00:55:ec:
8f:88:2d:a3:5c:eb:1b:75:5f:a3:4d:4d:be:b3:a5:99:23:c7:
7f:f0:c8:e8:87:02:db:13:a4:c3:ce:67:ea:a4:b1:16:26:67:
8a:3f:2b:dd:16:9a:8b:7a:30:b5:29:ec:f4:95:ce:b1:85:bd:
54:6e:cd:05:41:df:dd:5b:09:e2:b7:44:dc:dd:79:bf:51:6e:
12:1f:f6:5f:eb:ad:c2:2c:51:f5:f4:98:ac:7c:f1:26:4c:39:
52:12:26:42:18:52:5d:ec:e5:67:cf:f5:20:2c:9e:34:cc:cb:
0f:7f:24:b6:d6:8e:60:2d:8e:55:1e:48:10:87:79:1a:dc:8c:
d9:56:ae:cd:20:9f:d7:bd:27:dc:a1:f9:94:ff:d7:f0:81:b5:
5b:cf:71:3e:a1:42:e1:7b:cd:c9:c3:84:8d:e6:d7:32:ce:55:
2f:c1:bd:c0:98:11:dd:b1:81:1c:70:b7:2a:99:bb:5d:6f:0a:
c9:e8:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:20:53 2026 by rpki-client