Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
File: 1XEqnWm0rsl4nBTLBStxObBuddo.mft (raw, json)
Hash identifier: RsEJsPEvz+U67HwQ64AfL6OSb5ZTsfWosghy26+39aY=
Subject key identifier: F1:A9:10:CA:FA:D9:A0:D9:5D:02:50:2B:EE:70:D8:0D:97:2C:DA:73
Authority key identifier: D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
Certificate issuer: /CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Certificate serial: 019FADF6562987BB90F6336D08BFC0FA6F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
Manifest number: 4D
Signing time: Wed 29 Jul 2026 13:00:30 +0000
Manifest this update: Wed 29 Jul 2026 13:00:30 +0000
Manifest next update: Thu 30 Jul 2026 13:00:30 +0000
Files and hashes: 1: 1XEqnWm0rsl4nBTLBStxObBuddo.crl (hash: v6SPCAFWEOeWEIG+sJ3nlWsT85xMB3whfqP59jQSbVM=)
2: xZ59-pNTc7ezOemP3gmY_8tZ3KA.roa (hash: +8eOBSGGw03CBaqRTg+4T+O7Q/El7GL/vSuip22cJd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f6:56:29:87:bb:90:f6:33:6d:08:bf:c0:fa:6f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Validity
Not Before: Jul 29 13:00:30 2026 GMT
Not After : Jul 30 13:00:30 2026 GMT
Subject: CN=f1a910cafad9a0d95d02502bee70d80d972cda73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:6e:28:84:c8:44:81:3c:30:f5:0a:a9:43:
8e:fb:d1:78:d6:9b:9c:b3:08:40:54:1d:76:71:9e:
51:b6:1d:0b:db:73:af:88:af:a0:00:8e:0a:d6:7e:
a4:53:1f:b9:80:c1:ee:34:7e:80:3b:4e:ff:5b:33:
70:b9:8f:e7:17:a2:43:a4:0e:69:3d:1e:03:6a:3e:
10:a5:e5:fd:f6:b1:28:1a:e3:04:3a:23:c7:b3:d0:
75:bf:fa:9c:ee:3f:2f:87:56:95:a2:83:04:63:6b:
33:5e:79:ac:04:39:09:54:17:e1:70:70:03:b9:de:
a8:86:c7:42:1c:66:4f:d3:8c:84:60:7e:65:ba:b4:
7e:dd:0d:24:fe:83:6d:71:62:fd:04:00:38:c1:df:
ee:e9:dd:35:d2:bb:27:84:6e:33:6a:b7:c0:83:e7:
23:3f:05:9b:0b:77:9e:a9:3b:fd:5f:22:32:06:84:
be:a2:3a:02:d4:dc:84:95:da:77:db:c7:a0:09:20:
a8:05:20:8f:f5:11:03:e0:d4:50:10:da:b4:cf:d8:
66:74:71:36:a9:7d:f9:1d:89:53:18:ed:a2:46:02:
54:04:94:ec:2d:9c:d6:47:00:ae:2c:30:ea:2b:89:
6d:1d:40:ca:b3:6e:61:f0:f3:da:95:33:d7:ed:ae:
0b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A9:10:CA:FA:D9:A0:D9:5D:02:50:2B:EE:70:D8:0D:97:2C:DA:73
X509v3 Authority Key Identifier:
keyid:D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:73:f6:3d:ff:dc:db:60:d2:cf:b1:2a:5d:ad:bb:e1:00:0b:
54:b7:0b:c3:f5:9d:b7:a7:04:86:67:06:c5:87:ac:bb:40:4f:
48:ff:70:23:a3:d0:a9:82:11:cf:c9:7d:f1:82:cb:62:f1:90:
86:74:4c:a3:66:f1:ce:29:2a:3f:2b:93:ce:11:73:17:d8:46:
ef:79:56:54:04:9b:25:34:f4:e2:28:9c:30:84:67:99:a9:ff:
d2:d1:f6:32:bd:f8:bf:f7:cb:2e:bc:df:4a:27:24:95:e6:e7:
f6:19:fe:5b:4c:e5:62:38:66:40:37:01:08:58:3c:86:88:76:
52:e0:6a:96:be:9a:53:3c:89:7c:da:66:4e:fc:ae:e6:16:da:
c5:26:ab:59:aa:f6:17:b3:e1:5b:68:1b:86:c5:49:bb:94:64:
6d:42:99:62:47:f9:27:29:29:11:78:3a:4a:a6:fb:47:e1:16:
1a:6e:8c:ac:96:eb:60:8c:c8:8c:3f:e8:7d:65:85:25:04:a3:
4b:d4:e8:5b:3d:89:d3:f6:1a:78:eb:9e:7c:b2:79:68:29:14:
f5:68:49:10:58:7b:d4:a0:f4:68:8f:12:8e:41:7f:3e:29:ac:
a7:db:cf:89:20:24:a5:3d:0e:8b:86:bc:b4:17:53:f9:94:f3:
84:35:07:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:50:44 2026 by rpki-client