
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: AQKx7EhkYZnLzsDa7I+bCFliltBnvKEJPuSTHqBXkOg=
Subject key identifier: BA:BD:AA:3A:45:84:DF:1A:6F:A8:7B:0D:1C:67:CE:F3:31:9F:D6:FB
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 01A08E6982683369B1E0920F49569CAD66EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 1A49
Signing time: Fri 11 Sep 2026 03:01:14 +0000
Manifest this update: Fri 11 Sep 2026 03:01:14 +0000
Manifest next update: Sat 12 Sep 2026 03:01:14 +0000
Files and hashes: 1: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: eVQyyjBZoowG3WTeR8SjTD5pbKACPuB8FSP2YW2h63k=)
2: YboTsZW5E_LquEoNeH4f-DKai2A.roa (hash: rVnU6oaQsX3x5ymp+Ryvp8mswyZTbG+O1Im+gcRa5NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:69:82:68:33:69:b1:e0:92:0f:49:56:9c:ad:66:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Sep 11 03:01:14 2026 GMT
Not After : Sep 12 03:01:14 2026 GMT
Subject: CN=babdaa3a4584df1a6fa87b0d1c67cef3319fd6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5d:bc:dc:52:2f:83:ea:fd:61:67:fb:d3:fc:
b6:66:b4:cf:a2:86:56:b8:94:37:e6:d8:f9:c8:ba:
d2:5a:4f:f2:49:44:f2:d6:77:60:c6:bb:e9:3b:fe:
54:ef:79:5f:f5:13:09:a0:0e:41:9f:f2:ee:78:4f:
69:7e:7b:63:c1:39:d7:3f:f3:a2:d1:22:75:e4:71:
51:28:92:b4:51:03:b6:1b:91:3e:f7:3d:fc:38:33:
65:8f:26:e0:ea:30:68:60:b1:ee:a0:fc:c9:4c:77:
98:4b:a4:0f:af:08:76:d9:13:89:1b:c4:27:c2:fe:
7e:b5:2e:fd:6f:ff:50:66:85:86:cf:13:1b:88:58:
2c:5f:47:33:b8:df:5b:0b:c0:07:41:c7:04:e0:3e:
03:7c:38:f9:1a:af:c1:ed:81:b6:0c:9c:93:29:59:
02:ea:f8:b8:ba:9a:53:6a:86:e8:00:f1:aa:ce:97:
d8:d6:c9:d9:34:0d:6f:bb:06:71:1a:42:ba:02:19:
a3:f7:d9:45:05:00:3d:32:f9:66:ab:ea:5f:ac:ed:
96:c1:dc:7d:cc:dc:a5:ae:8d:33:04:0d:57:b8:ac:
89:84:cc:60:2b:a0:5f:28:d5:6b:73:4f:5a:32:36:
f9:a4:51:79:53:2d:c6:81:7d:b5:d9:06:0b:e3:24:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BD:AA:3A:45:84:DF:1A:6F:A8:7B:0D:1C:67:CE:F3:31:9F:D6:FB
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ed:3c:b0:aa:02:ec:eb:57:6f:bf:52:ff:03:91:98:9b:f0:
6f:24:42:7c:fd:01:e5:be:ea:c5:8a:5e:e2:09:3e:1a:79:31:
ed:c3:3c:bb:0c:be:35:86:ba:3c:0f:90:51:eb:22:b5:ca:35:
b6:84:08:3b:b7:5d:81:ac:83:b9:50:a6:ba:0b:ad:f3:56:d3:
fd:e7:f7:07:ab:a2:74:3a:92:3d:4b:01:4a:b8:68:eb:00:9e:
e3:99:dc:69:e4:60:15:c4:75:e4:33:f5:88:ce:e6:dc:df:b9:
69:e3:08:07:7b:00:16:c8:1a:da:e0:a3:89:56:5b:4e:0d:80:
d7:a7:cf:d0:95:28:2c:f4:f9:0f:4a:1e:c8:1b:65:82:47:d1:
bc:bc:3b:c4:1f:bf:f2:39:16:60:61:b1:96:c2:50:75:ff:38:
4f:21:37:e2:2a:48:cd:6f:c8:8a:c3:57:b6:4f:36:1f:4f:8e:
0f:0e:4d:9f:1a:4e:3c:00:de:6c:f5:c0:d3:4e:19:af:8e:47:
55:38:20:a9:35:98:cd:32:a3:db:15:a9:e4:54:df:77:c4:8a:
a9:ad:2b:c0:c2:04:be:81:5a:5f:63:be:29:c2:3e:ed:66:43:
f5:38:91:0d:de:9a:28:61:8b:f6:56:f2:6b:33:77:57:83:8b:
73:f6:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:04 2026 by rpki-client