Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: FxoRgJD1N20QgJAtBvu/XzTC7aCq45wm01wmK/dTvSM=
Subject key identifier: 29:0B:A4:C1:9B:18:A6:80:A9:FE:DE:C8:E7:6F:59:38:BF:18:B7:3F
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 01A1DE713043BE1DDCB0620272A6EC32D5FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 09:02:02 +0000
Manifest this update: Sun 15 Nov 2026 09:02:02 +0000
Manifest next update: Mon 16 Nov 2026 09:02:02 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: wvrDFSBG9QHxxD2+7VkSPjUfLUZnHbkgoktayAn8uEg=)
2: McYjjC5KqcvB_nVezfbVebYSEGE.roa (hash: RfRO6ieaH0AVTevS9LKIVFeYDX2W75T2UkbyiNhzcEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:30:43:be:1d:dc:b0:62:02:72:a6:ec:32:d5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Nov 15 09:02:02 2026 GMT
Not After : Nov 16 09:02:02 2026 GMT
Subject: CN=290ba4c19b18a680a9fedec8e76f5938bf18b73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:65:8e:8e:25:09:14:75:66:86:47:6c:1f:
c2:82:69:9f:21:3b:25:41:9e:d5:c6:a1:dc:85:e3:
66:a9:0c:00:ff:a2:f1:2c:92:4b:53:ed:6d:de:3c:
f0:24:7e:1e:bf:e3:89:74:55:00:05:72:14:bc:14:
60:2a:10:40:6d:87:0e:2b:78:46:87:e4:3d:2a:6e:
36:97:d0:7a:2c:63:e6:d0:4e:30:e5:bb:bc:cb:9a:
ce:80:87:b5:18:12:03:c6:7f:a1:5b:11:a0:4a:ba:
11:b9:32:51:33:5c:81:c2:f8:26:7c:4a:9f:d8:f7:
d1:f6:b5:6a:ac:34:b0:58:db:be:57:3d:a5:4b:58:
ea:d0:53:f3:16:9a:17:1d:ed:51:ed:ad:31:4a:ea:
61:41:0d:86:17:c7:28:77:46:60:46:41:7d:23:7e:
b3:b4:03:44:13:ee:86:74:7d:59:7d:d4:0f:2d:a1:
d6:c2:fe:33:0d:0d:00:d5:5e:a8:2f:2b:24:2a:61:
b1:a0:1c:24:33:1f:82:0b:ba:05:c5:9f:e7:ad:27:
f1:8b:9d:d5:e1:56:5e:14:fd:7a:aa:0a:6e:fc:cf:
5d:e7:d2:fc:ad:32:fe:61:42:50:15:51:4a:ec:ca:
d8:ce:81:29:8d:4e:5e:77:f2:07:e8:1f:8b:3c:8c:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0B:A4:C1:9B:18:A6:80:A9:FE:DE:C8:E7:6F:59:38:BF:18:B7:3F
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c9:d3:37:33:ce:0e:5c:8b:70:09:70:4f:d3:1d:1b:89:b5:
c8:34:05:aa:59:8a:f3:48:35:fe:a9:1c:16:6e:ad:f2:9b:26:
ae:f4:c5:55:4b:23:a3:35:d4:52:ba:3e:5a:b6:78:8a:8b:f8:
5a:22:fa:6b:00:83:87:8a:ff:0b:78:1f:d8:33:78:50:ec:fd:
08:84:84:da:4c:9c:a3:17:39:36:cd:dd:8e:34:3d:3c:68:e7:
57:e2:d5:b5:80:2a:ad:7f:49:a5:68:d8:df:c9:4a:ed:b0:fb:
87:ee:e0:d6:be:95:22:32:86:df:7d:4f:d9:aa:8c:57:5f:08:
a3:8a:22:cf:df:2a:5a:51:65:f6:46:1b:a9:d2:84:ee:6c:dd:
46:34:78:62:03:52:7c:88:b8:b9:0e:4a:e9:f2:9e:3e:0c:a0:
21:0d:fc:13:49:38:e3:c0:e6:8b:d8:11:4b:11:e3:e6:7d:72:
e6:33:2c:0f:92:49:e7:ed:51:68:ad:b4:9c:81:8c:19:ed:6a:
ae:6e:48:2c:e8:41:69:74:95:08:bb:0e:f4:c9:ef:c7:70:0d:
55:f8:58:ef:25:7e:a5:56:4e:e1:5d:87:e7:4e:15:c6:6e:6f:
d8:4f:f1:a0:87:a6:c6:ce:29:06:60:89:22:cc:17:04:1a:6b:
ac:c5:67:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:38:55 2026 by rpki-client