Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: wWl7q4BbLIxXI5r7/wXoJbJ7xiujpcYjWphvPqxOHaY=
Subject key identifier: C2:4A:63:59:FE:E2:7E:C6:79:34:F2:6E:96:8E:6A:A5:4C:8F:A5:BE
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 01A139DBC07481DB8AA1110B74E73A49687C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 1AC1
Signing time: Wed 14 Oct 2026 10:01:05 +0000
Manifest this update: Wed 14 Oct 2026 10:01:05 +0000
Manifest next update: Thu 15 Oct 2026 10:01:05 +0000
Files and hashes: 1: 1szsUB0VoXuxvDb6acgrvBLYEZY.roa (hash: CAu6oABCOITiB7RP9yG7K6+swFKVut89RRzUhC0wUAY=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: 5+AVPEWwpsPa3JIZx7/BSgSZM6RFOiwojeHEhI3uLbc=)
3: Yz6zMQTWF_oPlBis3JkHJwwBpxQ.roa (hash: fw38Poz9RGtWDLhkzBj9EkYC4z3B0EbYl1M6n6QZV4c=)
4: ucieseCn4X1qSKWwEPn_oNVbz1k.roa (hash: LmFDFIu8DGDRUsQfXjI1zzyrnPH0LF4bgVgWF7ntgHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:db:c0:74:81:db:8a:a1:11:0b:74:e7:3a:49:68:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Oct 14 10:01:05 2026 GMT
Not After : Oct 15 10:01:05 2026 GMT
Subject: CN=c24a6359fee27ec67934f26e968e6aa54c8fa5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:d1:ce:74:e0:30:8f:65:84:18:76:57:32:
54:09:cd:cc:a7:53:bd:ba:5c:68:27:bb:d9:a1:9c:
9b:1f:1c:5b:e8:c1:05:73:44:76:f5:85:68:29:3c:
52:72:19:d5:b8:f0:30:5f:31:93:76:6c:bb:d4:61:
92:6a:1a:ee:1b:6f:e3:64:e7:6c:e4:88:8e:79:4d:
6b:79:6e:55:ac:cc:24:27:29:3f:88:a1:5c:00:d6:
2f:ee:f3:21:39:7b:10:06:49:6f:d3:a6:17:68:f0:
97:89:8f:17:4b:bf:83:57:40:d0:e7:d3:0d:bb:9d:
49:8b:c6:d9:97:04:41:25:39:39:5c:47:8f:b1:9c:
98:47:77:7d:17:eb:2f:6b:59:61:e4:8d:25:ba:91:
5e:dc:04:c2:ac:5f:88:33:6c:2e:c4:52:5a:bf:e0:
eb:83:36:91:12:cb:ad:8b:e9:2b:a4:0f:53:90:36:
6e:cb:e5:36:d4:fa:91:aa:61:2d:5f:a1:ca:e1:62:
2a:2a:ad:8e:49:c9:31:e9:ca:39:ec:91:50:58:73:
b1:99:88:d0:54:69:ad:2b:7c:bc:c5:df:ba:29:73:
d5:80:b3:b0:20:bf:4f:f2:8f:ff:f2:34:79:e1:ba:
b4:37:be:8d:94:86:97:fe:a0:e9:86:f0:b8:4a:af:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4A:63:59:FE:E2:7E:C6:79:34:F2:6E:96:8E:6A:A5:4C:8F:A5:BE
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:16:a2:32:82:72:6d:b5:8e:14:6f:52:6b:9a:8f:9a:01:ba:
3e:41:37:0e:c1:53:98:36:82:00:88:d5:a1:98:d4:6c:e7:a8:
dd:42:7c:a1:11:be:b4:31:2e:5a:99:76:8b:98:bd:fe:41:d9:
c6:e7:a3:e5:65:fe:72:0c:c2:45:11:2f:f5:53:5b:a5:67:1b:
ec:e1:1e:ad:8d:00:50:03:01:cc:0c:75:72:dc:f5:90:e9:07:
8d:bc:2e:09:e0:6e:8e:b5:b3:ad:ff:22:8e:d2:a3:d6:39:a4:
d4:9f:87:eb:80:13:6d:58:6e:3d:58:f3:d4:96:59:c5:7c:82:
dc:be:59:58:6c:72:43:94:7d:c5:4c:c5:f2:82:11:7c:16:e2:
2a:05:44:b7:20:a3:39:5a:08:09:68:ac:a4:6f:54:97:3b:53:
51:88:c9:8e:24:38:66:0a:71:75:7f:29:b9:2d:ea:77:84:30:
de:e0:5f:a4:1f:17:b3:71:bd:28:d3:f0:63:54:10:9b:01:c0:
0f:f3:fe:55:43:b2:11:98:1b:f1:46:55:bc:5e:b4:d9:de:b3:
91:bd:78:bf:38:ae:78:dd:4b:2b:47:6f:6b:d8:d2:a6:4a:14:
46:94:cf:a3:42:30:cb:23:e5:a4:ea:1c:90:b3:c9:c9:3d:bf:
e0:14:25:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:31:48 2026 by rpki-client