Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
File: 1XEqnWm0rsl4nBTLBStxObBuddo.mft (raw, json)
Hash identifier: Z30O1IBSCFwPwlkpPA69P48Uavs+DnjG4CfBEmDCRh0=
Subject key identifier: 41:DF:7F:A2:5D:A6:EF:DB:F2:B8:A7:54:4A:CE:C3:18:FC:12:68:58
Authority key identifier: D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
Certificate issuer: /CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Certificate serial: 01A0E43E9CF6EC50B31FC2D1F8A40F6173ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
Manifest number: F1
Signing time: Sun 27 Sep 2026 19:01:43 +0000
Manifest this update: Sun 27 Sep 2026 19:01:43 +0000
Manifest next update: Mon 28 Sep 2026 19:01:43 +0000
Files and hashes: 1: 1-weOiU_pH6PrjNpa-GE0KnH7irc.asa (hash: JI42zOYreA+n37JUoTRA2ZhWTsJcuughghX2Yz9FgMA=)
2: 1XEqnWm0rsl4nBTLBStxObBuddo.crl (hash: rxcNXTAnEjzoyMCLKdLCJuqKbyE6bnj4BFrAs0hHOGw=)
3: Pkhf5Rsqg9MDsKoyFnMod3fegHw.roa (hash: mmZzQ1x2yJBflnqmtqOAcQzFxESG5N3+yHsJR4Mb+g0=)
4: p3oDOHgOBUquyHxeOzPNLZDbBV8.roa (hash: SIpRRKiTJavAEPnglZMtAVfyMKpObUjWtFsTsETWsUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:9c:f6:ec:50:b3:1f:c2:d1:f8:a4:0f:61:73:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Validity
Not Before: Sep 27 19:01:43 2026 GMT
Not After : Sep 28 19:01:43 2026 GMT
Subject: CN=41df7fa25da6efdbf2b8a7544acec318fc126858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:03:33:a9:2b:cb:f1:f9:0a:ea:14:cb:f1:
e6:31:d6:bf:ae:4d:06:0a:31:f8:e8:ab:88:ca:e8:
f5:19:da:87:72:a1:0c:62:94:93:6e:a9:40:66:91:
a2:6b:1a:a3:9a:d2:67:d3:e3:d5:71:e7:4d:1e:5c:
7c:92:57:93:b2:42:83:d3:5d:95:77:e0:c5:b6:07:
5a:ed:bd:12:ba:99:b6:17:4d:f2:fa:42:42:15:d0:
14:f0:ec:47:56:ca:37:08:5c:6d:41:a5:93:7f:08:
96:aa:3e:e0:44:7f:9e:8d:d7:17:6d:38:d0:82:8b:
b4:53:eb:ea:75:d4:44:09:b8:7a:af:35:e1:1c:83:
d0:56:d4:0a:c3:e3:52:fb:8f:88:b9:1f:c9:71:b6:
45:a2:3f:ff:57:87:16:34:50:65:a2:46:de:f4:cf:
9d:70:ac:a6:c0:1e:b6:ef:d9:aa:30:98:c5:9e:1a:
a4:bd:4c:33:a5:44:18:f7:04:fb:d5:46:b1:42:0f:
4a:b0:88:d2:59:c8:27:90:29:00:d6:a6:1d:d6:3e:
d5:a2:9c:ce:0a:33:6e:0e:83:a8:4b:93:89:e2:38:
d5:56:7d:bd:e3:d0:23:b4:07:a1:e7:f0:eb:47:94:
12:ab:ca:cb:3a:04:5c:bf:04:1f:27:95:f7:3a:07:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DF:7F:A2:5D:A6:EF:DB:F2:B8:A7:54:4A:CE:C3:18:FC:12:68:58
X509v3 Authority Key Identifier:
keyid:D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e0:aa:2f:11:c5:35:f1:f7:c3:af:3e:ef:e4:62:6b:5e:5b:
aa:a9:8d:d6:bc:b4:93:31:db:62:df:1e:63:e5:fb:97:d1:fc:
66:fb:1b:27:50:4b:0b:68:22:01:8f:2a:2b:ae:80:a6:cb:1d:
17:d9:a0:af:2f:06:32:98:3a:27:ed:d4:5c:f9:a6:80:f8:e6:
5c:f3:d2:d2:3e:e2:d2:bc:12:49:f3:7c:49:87:48:67:2a:a8:
90:45:9d:8b:da:e6:d2:23:06:e0:8b:61:e2:fe:cf:eb:82:76:
c3:74:a7:02:0a:32:05:af:ca:72:83:db:5e:44:f6:2b:24:9d:
1c:c2:7c:b1:61:7d:15:12:15:36:3f:d3:c0:b7:ef:cd:e4:35:
d0:ca:fb:d3:8c:24:81:51:f5:0f:ca:2e:41:80:65:99:e5:9f:
af:e4:bf:1d:c3:6a:81:b9:2b:c7:69:35:9c:5e:08:c6:c9:50:
67:90:d4:53:ce:d4:82:de:87:ff:4c:1d:1d:60:47:cb:ac:8f:
f1:38:81:b1:51:63:96:80:71:15:43:6c:3a:23:fc:91:0d:11:
ea:ec:f3:ae:05:7a:ad:98:87:e6:50:2d:47:ee:ee:70:37:c4:
0b:50:c3:f5:be:35:ae:9e:40:c4:b9:ed:f5:96:34:f4:83:c9:
44:86:39:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:47:27 2026 by rpki-client