Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File: _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier: jPeCaLfgqtEYQMWp8He7cWeEXr8/PvQW3T95BjFJoDs=
Subject key identifier: E1:D8:3F:26:60:4D:FF:76:0E:57:82:A9:38:B1:51:11:64:DD:08:C6
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial: 01A0E13D3185B7A4B3696ABDAC3E2A74B74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 05:01:19 +0000
Manifest this update: Sun 27 Sep 2026 05:01:19 +0000
Manifest next update: Mon 28 Sep 2026 05:01:19 +0000
Files and hashes: 1: 4H3kqbZKgvCRJ41TW2E8J1NDC88.roa (hash: ah0Wo037A9MM/sUCKBiJ/BqofxWUcKYL1Cq5STwAUy8=)
2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: hGwiTd0WRi9ql2rXgcEst9rDuDuITli00A4ZG9LbaDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:31:85:b7:a4:b3:69:6a:bd:ac:3e:2a:74:b7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
Validity
Not Before: Sep 27 05:01:19 2026 GMT
Not After : Sep 28 05:01:19 2026 GMT
Subject: CN=e1d83f26604dff760e5782a938b1511164dd08c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:24:b3:11:6b:21:0a:8d:97:ef:e4:a8:d9:
97:6f:d4:4a:21:9a:68:3f:19:ad:1d:be:dd:94:ad:
b5:d9:65:94:d9:97:ca:58:33:dd:17:5a:aa:7b:12:
16:e7:4e:52:1c:f4:5e:8a:c9:fe:a8:c4:2e:3e:3f:
d9:14:34:66:e4:ba:79:b1:fe:5b:db:79:ec:b5:56:
54:66:6b:c3:fa:41:7c:43:28:5f:38:9e:d8:db:3e:
41:8e:ff:9f:9a:03:da:ac:1d:63:d7:ab:e8:44:c2:
44:6b:8c:92:00:59:dd:c3:98:c7:b1:5e:7c:3e:bd:
d1:9a:a8:9e:a2:60:b5:83:8e:9b:b4:da:d4:3c:5f:
83:26:74:d3:36:b2:83:20:51:10:a3:27:54:b4:cd:
cf:c4:ef:36:2b:64:f4:c6:c6:84:c9:04:26:40:c2:
f9:c3:4b:6d:af:8d:be:fb:7f:33:b3:94:fc:49:36:
5b:1b:49:f1:ce:aa:91:08:38:e8:ef:ce:72:2e:45:
f3:7f:b1:1c:7d:d5:98:4d:68:48:67:53:99:60:ff:
f6:77:f9:bd:fe:62:44:78:e2:b4:3e:68:63:65:68:
b3:00:b1:0d:97:2e:b0:3e:49:6d:ef:29:2e:09:6f:
4c:92:60:54:db:3f:55:94:91:7e:57:c5:c3:11:82:
e9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D8:3F:26:60:4D:FF:76:0E:57:82:A9:38:B1:51:11:64:DD:08:C6
X509v3 Authority Key Identifier:
keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:1e:53:98:f8:e8:9a:b3:62:75:e4:b0:d2:ce:cf:ea:74:26:
d9:42:35:b0:96:ee:e6:b7:86:1e:ad:a0:27:f2:65:8b:d5:cc:
96:78:12:07:57:5d:49:c8:f4:3a:c9:95:5b:93:11:d5:46:f1:
37:8a:06:1d:0e:04:92:06:dc:7c:93:23:62:51:2f:e7:41:8b:
2e:77:00:ec:2d:0f:4a:21:81:f7:89:76:ee:5c:02:6c:da:3a:
bf:04:d6:5c:7b:42:fa:82:02:7c:f2:24:da:a1:fd:ea:a9:c7:
6f:ff:8f:12:66:70:63:05:c5:c0:3c:e2:13:79:64:40:2d:ea:
e8:49:89:46:58:99:26:cb:df:66:94:ac:7a:fc:11:c9:fe:54:
37:bc:f6:35:7f:75:95:7e:fa:4b:1d:6d:c1:0f:70:45:96:b3:
96:53:2d:80:16:e5:34:b4:cd:e0:71:8c:8e:cb:d4:5d:b4:d9:
18:67:53:2d:ba:80:04:6f:58:6e:36:35:df:92:7f:6b:e0:43:
69:5e:42:c0:3a:92:46:f4:70:38:9b:1b:45:4d:b8:9b:13:61:
ed:64:8e:e7:00:4b:40:f7:69:3f:26:62:e4:70:11:16:8e:3b:
1e:f3:f2:8f:8b:c3:07:94:6c:25:33:a4:f5:83:c8:d5:e2:4a:
db:5d:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:31 2026 by rpki-client