Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: 4cBW3bGuCm/ew4sQoED+Qpr6atiPqHepqvf2bMNrkL4=
Subject key identifier: CA:74:24:27:43:11:5F:C2:38:F6:02:92:D5:34:96:77:AD:33:14:D4
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 01A0D5DEE128167BDD9C09608A0E9E22FC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 00:02:28 +0000
Manifest this update: Fri 25 Sep 2026 00:02:28 +0000
Manifest next update: Sat 26 Sep 2026 00:02:28 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: OqVEQ4v1cpuG3m9qZC27K2q29F8u8LnJsB2Fgvh2jZ4=)
2: E66SedHd_vPzIOdI_rSea-dozpY.roa (hash: esa1VAeAMDp/AD53evHUHJNFCVMH1Oxb2JFWktl2xMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:e1:28:16:7b:dd:9c:09:60:8a:0e:9e:22:fc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Sep 25 00:02:28 2026 GMT
Not After : Sep 26 00:02:28 2026 GMT
Subject: CN=ca74242743115fc238f60292d5349677ad3314d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:2e:27:7c:e7:02:a1:1b:65:19:57:77:1e:
de:39:11:aa:5f:c8:41:19:2a:b9:56:c2:c8:15:53:
f9:d1:06:64:66:a3:e9:70:c0:18:2f:4d:3e:b0:e6:
9a:25:ef:63:b8:46:f6:31:52:68:de:30:66:cf:c1:
fe:68:b0:df:c7:5f:86:81:84:2f:a5:27:5a:bb:d9:
bc:e7:48:4c:69:4b:cd:04:45:ac:2e:dd:fe:4a:44:
6a:f7:f5:5f:72:17:d5:ff:8a:18:95:20:a6:0b:0d:
e9:3e:d8:33:08:e0:eb:e4:b5:3f:16:70:c2:a3:91:
91:fe:68:6b:81:12:38:ae:60:6f:c0:00:7e:3a:cc:
3b:10:b1:35:2f:e1:73:54:3e:c2:d4:ca:e0:89:86:
08:ca:ef:bc:3b:f1:1a:4e:10:ae:4a:55:6b:cd:bb:
ba:e5:90:9f:31:d0:27:14:f5:90:54:e2:12:01:de:
0b:fe:1b:62:0c:7d:36:db:04:dd:34:83:de:b8:b7:
34:02:5f:47:0c:d2:d9:09:42:2f:f1:ef:4f:d6:80:
b5:2b:b4:21:6a:2f:bd:11:56:bc:f2:0f:e0:33:3d:
a1:ce:da:d6:4b:56:4b:35:ca:5a:66:d1:a6:49:d4:
ec:63:44:c3:7d:31:c3:62:7b:95:09:aa:65:fb:97:
c7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:74:24:27:43:11:5F:C2:38:F6:02:92:D5:34:96:77:AD:33:14:D4
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a3:28:d2:9c:0e:66:f3:3b:5f:69:19:a4:e6:2d:ea:00:3f:
60:56:00:a3:b7:53:03:de:47:87:8b:5e:4a:d6:4d:85:4f:0a:
0d:96:58:10:a0:66:19:3a:19:dd:19:4f:66:92:5d:19:19:b6:
83:0b:01:f0:41:22:28:11:2a:1a:3e:ea:29:bb:53:d3:0f:04:
92:d7:9f:a0:d2:ce:26:ec:a2:c3:87:1e:b4:4b:46:2d:f4:d5:
22:4b:d3:20:f5:15:fa:ce:c9:da:0e:5a:2f:89:1c:0c:a1:9a:
d3:64:df:e5:d5:24:d2:00:3a:08:71:9d:b2:c2:34:d2:63:94:
6b:a7:23:ab:ee:b5:ab:09:cf:3c:4d:90:b8:36:7b:d1:be:25:
42:e7:4e:cb:66:c3:87:68:9c:22:b8:d4:26:ad:75:37:ed:15:
fc:b6:ba:a3:4b:9c:63:21:e1:d2:03:2f:e4:d1:34:48:5d:b5:
42:ca:9c:ee:bc:af:7d:25:29:ec:a1:25:54:10:a1:b1:b5:f7:
99:9f:5b:59:9b:07:7d:3c:b8:d8:ea:71:10:fe:83:b1:e6:f8:
94:4a:73:87:60:c3:94:d3:84:6e:42:5f:b7:78:f4:e9:6f:bd:
7a:e4:c3:a9:df:10:2b:5f:b5:db:43:a8:6b:91:15:fb:6b:bc:
6b:14:11:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:15:24 2026 by rpki-client