Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: e6ES8orlqCbVe3e9yB5txkyQY6R8B1leldgNO3vkyWw=
Subject key identifier: E1:48:9F:BE:6F:23:02:54:D2:EA:38:83:7A:09:B8:34:EC:7A:A9:93
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 01A0E777FE90ADB96AE73EBE8CE0A0477A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1A82
Signing time: Mon 28 Sep 2026 10:03:15 +0000
Manifest this update: Mon 28 Sep 2026 10:03:15 +0000
Manifest next update: Tue 29 Sep 2026 10:03:15 +0000
Files and hashes: 1: dFI_1xVkrKIA2eVFQ67WJg6pPW4.roa (hash: 1GDsLoNQgKVVMmHWMkg7eDdC4aDMTFzDQuH8RxzRAzI=)
2: fvgdNczr4M_4pWxmtSLFtHnleNY.roa (hash: vDg1sEfgl1xvGf7K1sN7xF9KHQzjqDQJi3bxKY/Dycc=)
3: jJpFWGMCm4EtolT2V_sgSPvdGy0.roa (hash: gfw9A3lWtCEl62csOhatgPWSLBSIBf5LaMxwHjU6nrE=)
4: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: jTmexfACMDYbEg6bqQjNSBwQnaiAroRAQoYizq1c/Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:77:fe:90:ad:b9:6a:e7:3e:be:8c:e0:a0:47:7a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Sep 28 10:03:15 2026 GMT
Not After : Sep 29 10:03:15 2026 GMT
Subject: CN=e1489fbe6f230254d2ea38837a09b834ec7aa993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:83:f8:62:87:30:4e:2c:4a:a7:1c:30:44:
2b:06:a9:98:5d:5d:f8:6e:58:ab:d6:27:f3:ad:a8:
30:06:bd:59:1a:bc:e1:f7:32:a2:7a:b7:67:4b:16:
49:c0:fd:12:fb:29:2c:2a:ef:b8:4a:68:3c:35:d1:
a1:5b:b6:ed:e0:5a:fa:b6:0a:98:10:b5:d3:e3:81:
d9:ea:b1:03:f2:34:bf:99:2d:e7:d4:c8:82:cf:61:
c9:35:af:f6:ce:ac:06:d2:7b:24:21:af:28:b1:eb:
f4:04:07:aa:c1:76:64:c3:9f:48:6c:ef:06:31:9e:
ec:df:8c:da:0c:51:13:56:47:be:96:95:98:e9:9a:
bc:c5:e1:a1:a8:5a:14:b1:a5:1c:05:37:99:64:2e:
d1:d2:0c:72:e9:86:51:ee:c5:20:ad:52:9b:a4:c3:
d9:90:df:35:4c:41:2c:36:3d:98:26:20:b8:af:b5:
e8:1d:d0:67:2e:cb:79:6b:a3:dd:e3:7d:29:a5:09:
ee:3c:0f:ce:31:67:f8:cc:32:dc:c4:17:9d:37:8c:
01:b8:4e:16:9d:6f:44:80:99:76:de:8a:22:1c:64:
12:24:ad:34:9d:3a:c1:48:6a:62:52:94:e7:a4:ec:
83:46:7c:64:42:e6:a0:81:b1:ef:5b:62:96:22:5f:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:48:9F:BE:6F:23:02:54:D2:EA:38:83:7A:09:B8:34:EC:7A:A9:93
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1e:b5:45:c1:51:58:f6:37:14:0a:63:bf:9f:74:86:03:eb:
8c:d9:52:6c:87:c9:8d:38:47:a6:f8:7f:30:12:44:f6:9d:9f:
47:8a:06:ca:f9:51:5b:b8:e8:55:71:9b:3b:df:9f:d0:5e:8c:
72:15:55:e2:89:77:e4:10:80:83:f1:dd:e9:2a:4f:2e:a9:42:
03:21:89:5d:e2:1b:d7:cd:33:69:20:bb:e7:b3:64:b8:97:e4:
9c:f7:6c:cf:e5:70:fd:a4:4b:51:08:ab:61:ae:16:f6:b5:8d:
e8:8e:9f:ce:50:db:2d:da:1e:96:38:22:8f:1d:c0:bd:bf:cd:
0e:74:e8:e8:c4:a4:bd:df:2c:72:d1:84:92:29:a5:b7:a8:a5:
88:cc:76:c7:b6:7f:af:5c:7f:95:62:f5:77:5e:c8:ee:b7:41:
26:2c:ba:63:4e:02:a7:b7:35:ec:10:be:aa:1c:12:9d:ce:49:
5d:25:1f:ae:30:36:b2:b7:e4:b5:84:69:f4:bd:26:8a:1a:bb:
8c:6d:1b:73:17:5b:e0:2a:a7:46:8b:ee:20:0b:a5:3e:c2:27:
aa:05:c2:fd:4d:4c:34:1e:8e:ec:36:cd:e2:69:8f:8f:7b:3b:
36:e7:8f:00:61:36:67:0b:ff:b1:f6:f8:0e:09:f2:c1:cd:73:
f1:8a:03:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:42:18 2026 by rpki-client