Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: Qui4vF91BsGh9Q5VgCpUXX1YUIhEZcBasiDwzoHbdws=
Subject key identifier: 8A:BD:23:F3:E3:AC:30:D2:4C:74:1A:11:E7:66:9E:FB:6B:44:18:12
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 01A0DD9801D260A94D4BF5D4F4628C13D89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 12:02:01 +0000
Manifest this update: Sat 26 Sep 2026 12:02:01 +0000
Manifest next update: Sun 27 Sep 2026 12:02:01 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: KU46Du+22FX1Xd0UlDiymZo7+XwNxE+Ha66JYfyBGFs=)
2: E66SedHd_vPzIOdI_rSea-dozpY.roa (hash: esa1VAeAMDp/AD53evHUHJNFCVMH1Oxb2JFWktl2xMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:01:d2:60:a9:4d:4b:f5:d4:f4:62:8c:13:d8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Sep 26 12:02:01 2026 GMT
Not After : Sep 27 12:02:01 2026 GMT
Subject: CN=8abd23f3e3ac30d24c741a11e7669efb6b441812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:38:7c:c2:99:15:45:6a:cb:b5:7d:45:54:
4d:e6:76:ae:96:af:7e:ee:37:76:c1:65:c0:5d:f4:
bf:29:b1:09:cb:8f:af:d1:f3:2b:36:cb:61:fd:d9:
b4:a1:3a:59:b0:fc:11:7a:f1:75:31:e2:56:21:cc:
08:f4:24:38:6f:2e:1b:6f:d9:97:f1:e7:a4:ea:fa:
42:da:c3:ff:5d:46:a4:c0:72:94:df:f3:a8:44:0f:
8f:b8:9a:28:8b:d0:ef:1c:10:3c:86:b9:06:2a:76:
f0:be:ab:e6:64:1d:3a:d0:97:10:13:81:08:04:13:
41:0f:c3:8f:11:39:13:39:7e:f1:00:a4:17:db:3b:
d3:51:4b:36:52:ca:2f:ae:03:b0:c5:16:1c:15:b0:
70:65:13:07:0c:88:6a:10:7f:b3:8b:99:4b:af:ac:
e4:65:b6:2a:f5:73:69:9f:76:51:76:08:4e:5b:db:
3a:fc:3d:59:bb:e2:cf:79:30:3b:c2:10:89:5e:a3:
37:a3:a7:aa:79:17:dc:e6:94:47:e7:9a:35:ee:c0:
ce:8f:82:d1:b7:90:bf:f0:82:42:6f:77:3c:12:b4:
e5:d0:74:2d:04:72:fa:25:f8:ba:66:ae:dc:a2:ec:
a8:6d:85:90:86:21:62:b4:08:0b:d8:d6:28:7c:53:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BD:23:F3:E3:AC:30:D2:4C:74:1A:11:E7:66:9E:FB:6B:44:18:12
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:43:f6:90:3d:91:c8:56:5d:0c:6d:fd:65:8a:dd:82:c1:10:
ee:21:2a:10:11:5a:c6:76:46:11:ef:6d:d3:60:cd:59:cc:c2:
1b:45:61:af:c0:b0:88:53:72:b5:13:cf:d3:ef:07:7d:cb:92:
5e:1d:8a:24:69:cd:92:a2:39:dd:93:8f:79:9f:f4:47:01:cd:
69:01:62:11:38:d5:8d:49:b1:91:5a:29:41:e9:26:e5:69:0c:
45:d8:56:83:35:4f:a0:0b:7b:59:69:db:b3:50:d9:e2:41:bb:
7f:db:7f:73:2d:67:ea:9a:f9:af:61:85:8c:b3:6c:c3:fd:fb:
4d:2d:ed:66:65:03:d1:dd:73:44:7d:8e:1d:eb:0f:73:74:61:
6f:a7:8b:c8:77:0e:5f:db:23:2d:4c:5d:c6:8a:88:a1:95:0d:
b5:94:41:14:77:51:55:a7:81:53:38:e5:93:e8:69:a4:62:32:
59:15:95:59:c5:0b:8a:71:62:62:91:1c:58:cc:34:c9:90:10:
0e:e6:74:82:60:b6:35:67:0a:d1:2f:e9:0e:22:6f:0f:db:28:
2a:98:7b:43:ec:03:d9:58:77:e0:0c:11:32:99:c2:a2:7c:7c:
7e:d8:e0:09:2e:6e:52:7e:a9:8e:a4:43:0d:fb:2a:a7:ec:f3:
ee:9b:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:18:30 2026 by rpki-client