
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: e1gKuBGvaVG4kUjTN9zBSFC6gSvgFOzs95InpnqPxYY=
Subject key identifier: 06:C1:12:DA:4D:8F:00:B4:8F:47:92:B9:B3:4E:4E:D9:29:DB:3A:03
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 01A0CE24372DCC5F8A8AFAD25837140905CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 12:01:14 +0000
Manifest this update: Wed 23 Sep 2026 12:01:14 +0000
Manifest next update: Thu 24 Sep 2026 12:01:14 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: hWxRwsX/9mqxYXFI5RxODK4SyyKgTzTl5FJW/lOqVfs=)
2: McYjjC5KqcvB_nVezfbVebYSEGE.roa (hash: RfRO6ieaH0AVTevS9LKIVFeYDX2W75T2UkbyiNhzcEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:37:2d:cc:5f:8a:8a:fa:d2:58:37:14:09:05:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Sep 23 12:01:14 2026 GMT
Not After : Sep 24 12:01:14 2026 GMT
Subject: CN=06c112da4d8f00b48f4792b9b34e4ed929db3a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:58:98:b1:3a:10:a1:0c:ad:ed:94:05:08:
8f:c2:c3:4d:ad:0e:ad:93:21:bf:86:c3:94:d8:a6:
f4:76:ff:7e:e3:47:b5:97:e8:56:16:94:b9:63:a2:
47:f2:21:6e:42:47:87:56:04:2f:18:0d:82:ab:e1:
42:a8:97:4d:12:2e:6f:de:bb:52:45:89:71:62:92:
0b:33:0f:51:82:2c:e6:e8:18:e0:bf:d5:1b:4f:0d:
43:17:4c:49:eb:a6:b3:99:d9:2f:3a:25:b9:51:b8:
fc:88:c9:ee:46:18:9a:77:40:29:63:67:43:7b:e5:
fc:3c:48:c7:91:66:50:1b:4e:f7:a1:77:1b:b4:07:
51:06:bf:fe:2b:d2:e9:d8:cb:81:32:30:5b:e0:83:
63:98:a3:19:72:96:23:cc:1d:24:af:ce:57:bf:3c:
67:77:bb:17:fd:8e:6e:75:67:ba:bc:cd:08:c4:ca:
2d:ec:4a:22:5a:53:08:55:08:c2:cd:10:c3:2d:f7:
10:c7:33:9d:a6:d5:13:3b:f4:a6:5e:45:59:80:07:
48:ee:8c:f8:bc:d0:ae:ab:8f:e6:57:52:2d:63:60:
9c:b1:9f:00:57:2f:ca:3e:00:b0:51:0b:af:33:d1:
16:8f:44:16:69:56:22:0a:ff:cb:a0:4d:cd:72:2d:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C1:12:DA:4D:8F:00:B4:8F:47:92:B9:B3:4E:4E:D9:29:DB:3A:03
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:77:aa:c1:9f:ab:16:93:eb:ab:e6:97:ef:8e:0d:8f:31:15:
f8:56:2c:f3:2a:d0:2e:d5:e6:eb:84:a4:b2:c8:e3:ec:d6:1d:
f5:44:2e:c0:4c:d6:3a:a6:d8:b6:63:1f:d0:49:2e:ca:eb:c2:
df:d7:5a:ac:5e:5e:92:88:b3:9d:a8:ad:9b:23:74:5c:b4:43:
77:ee:2d:9c:d9:a7:61:32:30:2b:99:68:c9:5a:b4:e2:7e:ea:
6b:4a:34:9a:8b:a5:46:57:36:be:ba:05:a6:76:34:78:93:97:
25:03:fe:9d:a0:32:dc:b1:14:a4:00:48:e1:59:86:d5:12:e7:
ce:b4:08:3a:29:25:cc:07:65:64:1b:b8:de:3d:73:95:a3:f9:
ba:a5:7d:84:94:1d:fe:0e:ff:d9:1e:b0:91:be:b0:91:12:9d:
9e:d9:83:0f:32:33:00:fa:de:76:fd:83:d7:01:11:31:80:60:
ee:dc:17:67:02:69:8d:84:e7:79:ca:0a:5f:ea:a1:56:b8:d9:
1f:89:a8:21:35:a2:68:e6:ea:1a:b0:89:fd:26:de:6a:01:92:
bd:7b:6d:1f:27:2f:05:38:4a:e0:d3:e0:50:88:77:dc:9b:96:
26:14:30:52:62:47:14:2c:1f:ee:12:58:90:d9:5b:58:da:f4:
44:68:ac:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:45 2026 by rpki-client