Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: MuXmygozIv43znTlPyFxUQ5c6MO3LNCk/Ar1MoxPNTQ=
Subject key identifier: 05:4A:DE:07:E9:AD:E4:0B:63:53:EF:5F:04:D1:D8:18:11:83:D4:82
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 01A0DB71F10267A73C2D84F388E012F585F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 1840
Signing time: Sat 26 Sep 2026 02:01:12 +0000
Manifest this update: Sat 26 Sep 2026 02:01:12 +0000
Manifest next update: Sun 27 Sep 2026 02:01:12 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: l/4ATg2DZbtVuIGCaxwWo20DgwWI3AisFEfPkqXIbHg=)
2: I9OU46hLv3YAsUVV8jYm-K3ogQc.roa (hash: PTrVMEbjSSvbOH15AKpjuFbu9tPLz/RRTf10Mbtb4p4=)
3: rbBoW2EoIYr4WTvaRxP1eRxLC9A.roa (hash: J3nkU/5cOyHNdOGxEte3et6IIXxfoCGaTYZOSkdKSjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:f1:02:67:a7:3c:2d:84:f3:88:e0:12:f5:85:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Sep 26 02:01:12 2026 GMT
Not After : Sep 27 02:01:12 2026 GMT
Subject: CN=054ade07e9ade40b6353ef5f04d1d8181183d482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:65:6b:06:b1:81:b9:d7:7b:ba:13:b3:f9:
f7:03:ee:35:a4:02:c1:f4:eb:06:96:11:81:59:5c:
c1:dd:2d:ec:6c:6f:e7:8d:bb:e6:9b:86:d8:67:98:
2d:fb:fe:00:52:fb:29:88:61:d0:94:62:55:85:8f:
f8:cc:fd:75:33:5d:31:26:47:0f:dc:1b:ae:05:e8:
7c:69:bc:b3:32:4c:d1:c8:e5:21:d8:7b:bf:68:c0:
c9:49:ce:f5:09:01:2f:7f:ca:e3:6c:c2:7a:7e:63:
7c:f4:55:d9:46:22:39:a9:2d:e9:eb:00:03:44:b4:
ad:f3:7e:ba:9e:04:11:e9:c3:53:72:67:aa:6a:94:
ac:e8:97:89:3b:8e:01:7c:2e:a5:6a:db:ef:1f:bf:
06:8d:37:3d:9f:3f:c8:63:b7:b6:08:49:aa:aa:32:
ea:9a:22:bb:ba:32:b6:fe:7e:10:96:c2:7a:37:93:
8d:0f:f5:74:df:ae:47:41:e3:0f:4c:7d:eb:49:37:
06:17:5b:7c:73:1a:6b:32:21:cf:f6:8f:34:be:af:
bf:45:7d:42:68:10:a4:27:fd:17:a2:c6:2b:a6:ab:
e6:8d:4b:70:09:88:29:f1:4d:2b:fd:c9:20:c0:10:
55:19:05:60:67:14:24:a3:8d:5d:7e:ed:39:e7:85:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4A:DE:07:E9:AD:E4:0B:63:53:EF:5F:04:D1:D8:18:11:83:D4:82
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cb:73:b3:a4:f7:01:cc:47:2b:07:7a:29:05:97:28:5b:82:
8a:4e:1a:ec:55:f7:69:44:07:da:1c:fe:ef:85:c3:6f:a1:db:
c9:30:f2:c0:57:e6:44:6b:05:38:3c:c4:59:ef:7e:32:ef:04:
4b:3c:a7:99:15:ea:4c:d0:f4:e2:18:3a:7d:93:4e:1e:d2:a7:
ac:83:b6:8f:b7:f2:a9:21:a7:2e:be:8c:0c:6f:93:17:f6:2a:
52:b7:ae:4d:7f:d2:97:5a:c2:a3:b9:d4:22:1e:f6:93:40:a8:
6b:bb:07:c7:5e:ec:34:c4:48:3e:d0:56:3e:b2:35:e9:53:7a:
9b:b8:4d:27:c8:14:b5:19:4b:dc:62:5e:46:9b:52:f6:51:38:
89:84:8b:0e:e7:3a:5f:57:3b:68:db:c8:14:95:00:c5:3d:c4:
19:7e:2d:3b:3b:4b:37:e7:ba:fa:0b:60:48:53:84:74:02:cd:
0d:e0:05:2a:e5:e5:6e:8a:42:c2:31:3b:5a:95:8a:84:69:98:
8e:b4:03:31:0a:76:3c:77:d7:cc:c7:3c:43:f5:51:25:2e:3e:
df:ba:a5:0b:58:39:bb:5e:7e:8a:ec:82:bc:d1:dd:1d:cb:9f:
d5:75:7a:59:64:66:0d:2b:7e:25:03:87:e5:00:94:de:6b:70:
07:3a:70:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:27:30 2026 by rpki-client