Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: W6BQGAuWDPnB/hTtoQLHoMQybSvTfx830juOV2TaEcw=
Subject key identifier: 37:14:65:74:A4:89:9C:7F:52:CA:62:C7:98:30:21:D8:D9:FB:F6:29
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 01A0E3631EBCA53C470FB72A516818D212CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 1A7C
Signing time: Sun 27 Sep 2026 15:01:58 +0000
Manifest this update: Sun 27 Sep 2026 15:01:58 +0000
Manifest next update: Mon 28 Sep 2026 15:01:58 +0000
Files and hashes: 1: 6-Ew-si9J0hf6ZarrCVeQjfqjE4.roa (hash: ljHxNRtveUXCickR/eyPdSx4OKRRH+YbhLZnTAcXkXg=)
2: I2tNxhGFF35MT6ATAQ34a1mldMA.roa (hash: aCwLuTKx+lT5TRi4XqsraXtHCM8YuZl8sxF9wyX0Vvo=)
3: JCTQgcUELCWna8Z80DBMEn0zGk0.roa (hash: aQm1A8aMpcGmR9Y0OhWPfstPmLBs4VFn6LiSckCGnCs=)
4: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: Dpn8aTwPieApmFflio4x1geMQR6l4UAqPLv3ztPSQBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:1e:bc:a5:3c:47:0f:b7:2a:51:68:18:d2:12:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Sep 27 15:01:58 2026 GMT
Not After : Sep 28 15:01:58 2026 GMT
Subject: CN=37146574a4899c7f52ca62c7983021d8d9fbf629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:e9:17:ee:a9:2a:2d:42:6d:f8:38:ff:e2:
8f:04:e1:9b:79:cd:07:ea:0c:05:93:21:de:b1:b6:
2e:c4:44:0f:40:54:68:47:11:61:74:ca:82:46:f1:
f4:ec:c2:e4:07:bd:92:cf:3d:b5:49:8b:69:26:6c:
11:b1:48:6a:18:28:85:0e:24:95:88:16:fe:5f:c7:
f6:9d:98:72:35:de:b0:5c:3f:1a:22:a2:68:31:bc:
1b:b2:a8:fc:ff:7e:56:52:68:4e:63:08:3c:e2:62:
ce:22:cc:e1:d6:91:99:61:da:58:cc:7d:ee:2c:fa:
49:b1:b2:ab:03:04:f7:2f:75:a1:36:58:e6:ca:7b:
e0:f4:ff:bb:b8:23:b2:9d:33:66:55:09:64:1b:83:
06:35:fa:86:23:64:79:d2:1f:9c:da:30:a3:de:59:
0e:61:f2:64:06:aa:d4:6e:01:a7:a2:81:3c:9d:86:
b0:18:c0:f2:90:66:63:19:a6:e7:54:bc:d7:65:08:
31:ac:16:ea:e3:fc:9f:e0:27:70:61:07:84:7f:a9:
25:e8:e1:94:4f:86:b5:2f:b1:ca:51:ed:46:83:b0:
0e:61:0b:8d:d8:e2:c8:a7:92:12:c9:f8:fc:84:6f:
7b:d0:e6:86:e0:98:76:6e:3f:2e:aa:16:0c:ef:d5:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:14:65:74:A4:89:9C:7F:52:CA:62:C7:98:30:21:D8:D9:FB:F6:29
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:29:d9:f6:0c:d5:69:4a:a2:74:01:0d:32:ac:76:7a:c9:d0:
31:84:3a:66:af:70:b0:c4:8a:f2:5e:51:84:5b:e0:a6:84:67:
87:d2:7b:43:99:38:07:85:81:92:19:0f:0e:9b:96:38:82:9e:
0e:99:ad:1d:55:13:81:36:3d:30:b8:98:c5:97:d0:e1:45:b3:
fe:d1:2e:52:61:1a:82:04:bd:6b:af:d2:06:51:d4:a4:9d:16:
93:3a:4d:d5:ab:90:4c:11:0f:1d:83:ab:a3:97:ff:ee:39:43:
73:81:64:d6:32:bb:dd:40:71:c9:1b:ab:3f:31:fc:9a:27:36:
a3:49:a7:9e:fc:a8:63:73:6c:05:29:9b:3c:02:39:04:41:b3:
29:fd:a9:1e:fd:2c:56:07:a7:b3:39:3e:4a:16:c0:26:58:fc:
50:c3:cc:84:8d:fa:67:87:6c:53:c2:bc:45:9c:4a:a6:8d:e9:
e3:70:69:6a:5d:dd:12:24:85:f9:7e:47:3f:16:26:e5:f1:48:
f7:46:13:c9:08:b8:d0:26:c5:53:d7:b9:cc:9c:a0:74:11:ff:
2e:83:31:ce:cf:ce:a7:03:d0:9c:cf:de:2f:09:1d:24:ad:a4:
de:55:2f:11:7a:77:c1:da:41:fd:b4:82:c0:dd:f3:f3:e3:14:
76:ff:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:44:12 2026 by rpki-client