Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: PPhRHxGNjJfIocZFgBHQ2TVqbqEZA4nJGvvj0zyKbtQ=
Subject key identifier: 6A:B2:A3:C8:B3:DE:7D:0D:9B:8E:2E:CE:22:2B:40:A6:84:20:44:C1
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 01A11ABE445D66A9154395B233E3641B205A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 1A15
Signing time: Thu 08 Oct 2026 09:00:39 +0000
Manifest this update: Thu 08 Oct 2026 09:00:39 +0000
Manifest next update: Fri 09 Oct 2026 09:00:39 +0000
Files and hashes: 1: 7wQkjJzOFmhj4SlVLo-x26w_WTc.roa (hash: uBOYkM28EcQ5gB0Rh8GkUGQb+Ga2UZ8JgAHYGzfSXXI=)
2: uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa (hash: j629zk7F2qIP3WUGuPA4LCpVgjs/1/AZWtVe090YvCY=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: Uqro3pQ4QUTyAWWHDu8CQRmzIBBNbhbo8rT18VXChes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:be:44:5d:66:a9:15:43:95:b2:33:e3:64:1b:20:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Oct 8 09:00:39 2026 GMT
Not After : Oct 9 09:00:39 2026 GMT
Subject: CN=6ab2a3c8b3de7d0d9b8e2ece222b40a6842044c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:99:48:c5:3a:b0:b2:7a:94:a3:69:42:0d:
3e:a9:79:6d:86:16:48:07:99:fe:ab:f9:00:57:27:
4e:b7:0b:c5:56:ef:26:53:a1:9d:08:58:f7:d4:5f:
a7:15:c6:9a:5a:d3:59:f5:47:d6:7c:c9:94:bf:00:
8c:34:7a:4b:f1:f7:71:91:1d:10:cf:c5:48:97:7d:
ab:a8:9d:f5:2f:55:7b:92:bb:93:24:a6:0f:81:0d:
25:33:d7:4b:a9:30:dd:f8:7c:1e:78:0e:e7:9e:b8:
cd:d0:be:6d:f4:e9:90:2d:3e:df:5f:27:ca:03:30:
64:c1:9b:fa:89:e6:56:0d:cc:26:56:54:dc:23:b4:
34:29:75:1c:01:3d:45:93:7f:2e:6b:c5:81:7d:13:
50:15:1f:d7:d1:ee:e4:29:ba:d3:59:b6:44:25:df:
4b:8f:93:de:f2:da:e6:8e:c0:cb:be:d2:80:95:7d:
49:2d:a1:78:8c:ac:f7:8d:23:58:d0:b1:2e:46:d7:
f0:0b:c8:a1:0d:9f:36:64:12:6d:c4:c3:3b:42:44:
8d:50:68:8e:36:6f:d8:7c:a5:b0:8b:d7:6a:62:d7:
61:8b:0b:92:51:93:8b:1b:34:e9:3a:7d:06:2e:3d:
64:2a:53:54:d1:35:16:e4:46:1e:5c:c1:bf:9f:7a:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B2:A3:C8:B3:DE:7D:0D:9B:8E:2E:CE:22:2B:40:A6:84:20:44:C1
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f6:c0:1a:63:93:4b:47:4a:15:4a:38:14:5e:64:a1:27:56:
97:b0:58:ae:03:76:5f:c4:8c:7c:b6:97:df:81:1f:87:37:50:
98:5f:bd:50:72:9f:5f:62:71:2d:27:0c:92:a6:a2:a4:55:49:
2e:9a:bc:3b:33:3b:54:8f:fc:73:97:94:49:2b:d2:c6:d2:20:
1e:2f:1e:d0:5d:29:4f:95:61:19:34:90:27:a3:69:61:b6:09:
5b:39:8f:06:30:84:f8:a4:e3:89:95:c5:02:1c:10:bd:9c:f3:
75:fa:7d:be:ed:91:38:23:80:16:77:9a:5a:32:d3:1f:67:70:
b1:a6:91:8a:ef:32:8f:49:f1:0d:86:8b:49:27:95:3b:54:26:
e4:a9:37:1e:97:9f:87:6a:ba:12:a6:c3:e1:3b:15:37:de:61:
d6:89:6c:21:3d:fd:6f:30:c4:b6:fa:e5:30:d7:32:a7:60:27:
46:31:08:f5:fb:a9:03:7b:6f:e6:50:79:45:ff:27:aa:76:3e:
c4:e7:80:88:96:55:8f:6a:73:bb:a8:42:75:07:c3:cc:dc:2d:
5d:91:94:0e:aa:0c:87:bd:16:0d:db:bc:03:d4:9a:f2:fa:07:
48:af:c2:f3:a1:45:9c:16:f3:29:71:3d:d8:70:18:e3:f2:bc:
fe:b2:b9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:25:53 2026 by rpki-client