Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: mcqtAyuq3I/O8F1mcMRhFlWW9qsEAPXkVq4kO7RBZF0=
Subject key identifier: F8:CB:30:99:AE:2E:89:71:D9:D8:B1:B4:B6:79:53:6E:67:AA:11:84
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 01A1743932112C96D3297006E9CBFDF640E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 1AC7
Signing time: Sun 25 Oct 2026 18:01:07 +0000
Manifest this update: Sun 25 Oct 2026 18:01:07 +0000
Manifest next update: Mon 26 Oct 2026 18:01:07 +0000
Files and hashes: 1: 6-Ew-si9J0hf6ZarrCVeQjfqjE4.roa (hash: ljHxNRtveUXCickR/eyPdSx4OKRRH+YbhLZnTAcXkXg=)
2: I2tNxhGFF35MT6ATAQ34a1mldMA.roa (hash: aCwLuTKx+lT5TRi4XqsraXtHCM8YuZl8sxF9wyX0Vvo=)
3: JCTQgcUELCWna8Z80DBMEn0zGk0.roa (hash: aQm1A8aMpcGmR9Y0OhWPfstPmLBs4VFn6LiSckCGnCs=)
4: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: sXrQs5IFOi0wY2xiQvmsLzd/8FVSYG7GddJxtFK5OXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:39:32:11:2c:96:d3:29:70:06:e9:cb:fd:f6:40:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Oct 25 18:01:07 2026 GMT
Not After : Oct 26 18:01:07 2026 GMT
Subject: CN=f8cb3099ae2e8971d9d8b1b4b679536e67aa1184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:24:63:c3:e3:c6:81:7f:65:25:49:bc:44:
fc:a2:df:9d:d7:34:36:b7:71:7c:93:ca:86:67:cc:
78:fc:ad:26:ff:84:14:26:fb:21:59:a9:04:78:d6:
ab:f3:3e:19:08:0a:07:7d:60:73:3e:c7:4d:6a:c3:
24:0d:80:fd:48:b5:0a:f9:f4:d8:2f:41:2c:5d:52:
53:37:70:da:88:7e:1a:c3:3a:56:99:4e:21:81:97:
68:c9:49:de:1a:fe:a4:4c:eb:c0:54:0c:2e:34:43:
16:03:cd:54:83:53:7e:2a:6f:38:16:b1:70:b9:4d:
35:6f:ca:1c:97:65:47:dd:5b:7a:47:36:c4:6c:9c:
a9:43:94:b8:ff:bf:09:19:33:98:bd:1b:5d:71:ab:
91:34:fd:64:6a:34:8d:c6:90:78:42:eb:10:93:1e:
f7:3e:c1:b0:64:b2:5d:63:19:3f:ef:3c:87:1a:6f:
1b:f7:70:b6:37:36:18:18:ff:77:79:a0:dc:3b:f4:
52:36:28:85:04:48:fc:cf:a9:f3:70:d0:f4:e5:a7:
10:b9:5b:4a:be:5f:53:de:da:56:77:d4:75:5f:37:
95:c8:3f:ce:c2:f1:01:86:0f:52:63:84:04:ec:7e:
69:68:57:17:25:92:b6:dc:f7:cd:4e:83:c7:4b:70:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CB:30:99:AE:2E:89:71:D9:D8:B1:B4:B6:79:53:6E:67:AA:11:84
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ef:1c:b6:a2:7e:94:38:3e:66:35:40:dc:07:67:2a:c7:67:
3f:0f:72:51:9e:d9:e2:69:6c:5a:4d:a9:3c:13:00:29:aa:d7:
5e:47:08:df:0c:13:42:be:85:42:13:af:d6:43:36:aa:1b:55:
4a:c5:ad:cc:e9:7a:28:1d:d8:fd:80:b6:fa:8c:84:36:1f:b7:
a6:60:c4:65:ee:fa:da:9c:46:7c:00:c6:72:72:8a:a1:b9:4c:
99:35:66:83:64:9b:26:64:8b:04:eb:f6:e9:bc:b3:f4:db:8e:
09:ca:bb:36:af:6a:f9:a5:0a:72:f1:de:f5:69:fc:b7:c3:2c:
37:12:9e:18:d7:c2:ce:c2:4a:f0:7d:82:b8:be:a4:ed:4f:bd:
81:93:eb:0e:2a:92:01:f1:63:ff:1e:8f:ef:92:6e:1e:96:55:
7b:df:ca:b9:79:3e:14:80:6a:26:1e:72:42:d6:e4:85:79:2e:
02:09:6d:2a:fa:ee:b5:4a:2e:a3:d6:1f:0e:c9:91:66:30:f5:
67:09:eb:60:c8:14:01:ba:d0:f4:0f:f0:64:56:6e:ad:d0:cf:
e4:b0:7c:2c:5c:bb:cf:a4:4d:e2:ae:1c:29:67:f2:df:7a:ea:
fc:6a:ab:b5:fe:97:cb:4c:1f:35:6e:a5:91:04:e0:6b:af:57:
f3:99:44:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:57:10 2026 by rpki-client