Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: KH+BIL+Hcfx+gmUBtfzZ4cvLtUVr45FuJe/8kr8kgAc=
Subject key identifier: AE:D1:05:6B:97:3D:C8:F7:CC:D1:92:BE:1F:19:93:18:03:DF:A9:55
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 01A069B8CE38A876F4675D9CD236DAAC0313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 1A3D
Signing time: Fri 04 Sep 2026 00:01:54 +0000
Manifest this update: Fri 04 Sep 2026 00:01:54 +0000
Manifest next update: Sat 05 Sep 2026 00:01:54 +0000
Files and hashes: 1: 6-Ew-si9J0hf6ZarrCVeQjfqjE4.roa (hash: ljHxNRtveUXCickR/eyPdSx4OKRRH+YbhLZnTAcXkXg=)
2: I2tNxhGFF35MT6ATAQ34a1mldMA.roa (hash: aCwLuTKx+lT5TRi4XqsraXtHCM8YuZl8sxF9wyX0Vvo=)
3: JCTQgcUELCWna8Z80DBMEn0zGk0.roa (hash: aQm1A8aMpcGmR9Y0OhWPfstPmLBs4VFn6LiSckCGnCs=)
4: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: a6h3lHz/EPaJEvZBmk4XUFtAriDJZOg+6ewY8gp/yfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:69:b8:ce:38:a8:76:f4:67:5d:9c:d2:36:da:ac:03:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Sep 4 00:01:54 2026 GMT
Not After : Sep 5 00:01:54 2026 GMT
Subject: CN=aed1056b973dc8f7ccd192be1f19931803dfa955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:95:7c:fb:d0:5b:40:9b:ef:04:4c:c9:c7:
59:ed:22:00:c8:e5:3c:aa:d0:89:87:4c:df:45:fb:
b8:9f:16:83:80:11:88:80:53:a4:e2:f5:77:44:54:
11:6b:78:de:d1:27:a0:87:60:be:ca:74:65:b7:7d:
46:dc:2f:83:d8:bf:e7:ea:90:85:7d:1a:5b:d1:83:
82:a3:a7:59:00:8b:54:57:1d:21:2e:db:bb:8f:4a:
56:e8:4d:e5:ce:e6:8c:ce:5c:e1:e4:87:ba:d8:ed:
d0:48:85:4e:a9:41:d9:27:c3:56:62:bf:c8:e2:53:
2d:4c:b6:e0:10:10:59:26:8b:43:3e:bd:63:68:c2:
44:49:32:e9:6e:49:92:e1:96:79:57:86:f9:3a:d2:
85:d4:dd:fc:e9:9e:b7:53:42:92:6e:88:a6:f6:ee:
be:f1:6e:b2:48:1b:04:81:35:c5:4a:db:9f:bc:19:
f4:3f:0d:04:6f:d0:0f:cb:53:af:11:78:ad:33:e5:
65:89:04:79:e2:a5:16:80:18:73:77:b5:7f:cd:a6:
4f:80:d1:2d:09:ec:9c:45:d7:74:91:fb:62:4f:ad:
a0:a9:1f:4e:1e:f0:56:1d:34:97:db:b6:f9:c6:a0:
3d:6e:d0:5c:8d:1d:70:e3:64:0a:08:31:db:76:d1:
1d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D1:05:6B:97:3D:C8:F7:CC:D1:92:BE:1F:19:93:18:03:DF:A9:55
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d6:35:77:f1:33:1b:b5:78:3c:35:3b:af:14:4d:43:26:0f:
87:f6:50:c2:aa:ca:4f:89:82:1a:30:7b:9d:07:88:7b:94:73:
2a:4c:f9:5b:aa:a4:fa:13:59:29:b8:34:e1:2c:4e:45:4c:ef:
f4:aa:5a:8e:9a:ec:e9:0b:bc:8f:49:c9:0c:5f:5d:d2:bd:c6:
57:b6:06:b7:cb:d0:56:45:bf:cb:b3:72:a2:6e:c0:32:a3:95:
93:79:31:1e:32:bc:2d:94:c5:4e:b3:50:ee:b6:da:42:54:cb:
b1:62:da:d2:9b:bd:d6:f4:74:b2:75:a1:a0:a0:df:34:8a:94:
87:b1:e7:19:63:ce:90:e8:fa:1e:6e:0a:98:78:9f:88:d5:d7:
ee:8a:39:b1:42:2d:ed:7a:0d:e6:b8:45:d6:02:ef:74:aa:9a:
8e:0e:86:67:89:ba:89:d4:12:96:c0:24:44:80:0f:ec:0c:1e:
53:95:e5:2e:81:66:51:3f:ef:e7:fe:19:31:8b:0c:4d:e1:50:
61:ea:7f:3e:2b:f3:2d:d9:71:9f:8b:14:2a:3f:b4:04:e1:89:
7f:26:b3:23:ba:83:81:22:cd:3b:a6:78:36:89:cd:71:43:ef:
57:cd:ae:44:6c:20:cb:ea:0c:29:c7:69:ed:92:08:35:f1:a3:
82:f4:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 03:41:46 2026 by rpki-client