Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: kQPwL6aZhNLLhnSFGA+S49T8J53gKYLPJqc917opqYQ=
Subject key identifier: 0D:01:50:F2:D5:14:B8:87:1B:00:57:90:91:83:9C:55:CE:EC:DD:5A
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 01A0CF35DD58DDD86176FAFF92FB8F035B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 1A2A
Signing time: Wed 23 Sep 2026 17:00:08 +0000
Manifest this update: Wed 23 Sep 2026 17:00:08 +0000
Manifest next update: Thu 24 Sep 2026 17:00:08 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: oCfdrI9E3ho4Oc/7cZvgFAqroL3ylcx8TOb3LDb6Yzw=)
2: suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa (hash: 5F65oe93bt7PTgDTFumLJnCP6tdXA4+0OqZl24dm2bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:dd:58:dd:d8:61:76:fa:ff:92:fb:8f:03:5b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Sep 23 17:00:08 2026 GMT
Not After : Sep 24 17:00:08 2026 GMT
Subject: CN=0d0150f2d514b8871b00579091839c55ceecdd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:b7:97:79:1c:e4:15:e9:6f:71:96:fd:c0:
c1:ee:cb:c9:1a:0f:0b:f7:9c:69:12:f0:ec:0a:37:
b3:c7:ae:43:8a:4d:99:ce:12:dc:97:3f:1d:23:02:
79:83:e4:e4:8b:fc:af:2b:3d:ea:9a:19:7f:da:d6:
f4:72:21:22:1b:5f:c1:c9:ea:46:ba:d6:05:5f:07:
82:8c:1d:8f:a3:5f:2f:10:ed:ee:05:9e:30:8d:ec:
2d:3c:22:2e:8e:66:f3:0e:b8:31:4c:c7:07:6f:53:
e6:11:a2:87:55:50:7e:94:93:e4:33:2a:0f:92:6d:
16:d3:dd:e9:fd:f6:09:a9:1a:d6:c0:e6:44:92:de:
fd:49:bc:d8:45:3e:af:db:d1:b0:bf:00:5d:8a:48:
1b:73:d8:ce:ce:14:27:ee:60:4f:bd:af:a5:9a:f6:
d2:13:05:4c:a6:3a:d0:86:d9:6b:7f:5d:0d:b4:fa:
cf:73:44:08:85:ed:c1:67:3c:3f:08:0f:b7:35:0a:
90:ca:c7:38:99:da:8b:a6:27:7d:85:75:7a:ed:da:
29:af:0c:77:65:98:53:02:cf:e7:44:e3:db:43:03:
6f:ac:f3:e9:29:ef:65:76:da:0e:fd:06:fb:3e:86:
df:d6:4d:64:da:fb:40:54:c7:ea:17:34:6a:ec:06:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:50:F2:D5:14:B8:87:1B:00:57:90:91:83:9C:55:CE:EC:DD:5A
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b6:9e:2c:11:14:15:3e:94:9e:2f:22:a0:59:13:e2:9b:b0:
de:2c:1b:5f:7b:54:92:c3:87:cc:cf:8b:14:56:a4:a2:7c:89:
e5:69:a5:f2:ee:1b:83:78:1f:bf:95:43:10:f5:8c:b2:b5:ff:
60:d4:2b:53:f5:87:f4:05:98:57:38:53:01:c7:28:ba:5e:82:
cf:1a:45:c2:87:b8:a0:df:8b:71:8c:66:09:c3:b7:04:ea:38:
bd:38:ed:c5:e2:41:f8:ff:e1:f6:7a:66:aa:ae:93:ab:91:d3:
d1:40:d9:c6:0f:4b:ff:d7:33:ee:ee:45:ad:25:b4:03:7b:5e:
69:4d:95:e9:00:84:b3:b4:03:81:f3:8c:d9:51:3b:27:3b:97:
ed:a4:40:87:c0:47:ca:e3:9d:52:c6:29:66:09:cb:b8:81:f6:
02:6a:58:45:cf:97:72:d8:86:b0:d0:ab:1d:61:1d:ac:83:b9:
f8:21:21:8e:70:1c:69:ff:0b:46:d9:c0:99:7c:9a:ca:c2:1e:
a4:96:39:f3:2c:08:43:82:57:2e:e5:c6:92:92:2c:34:7f:ed:
34:b6:16:48:d5:20:1c:1e:34:50:4d:da:2c:bc:b9:81:00:73:
0b:f2:52:b7:82:ec:4e:59:e3:ca:bc:5e:52:26:04:56:ba:30:
64:27:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:52:33 2026 by rpki-client