Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: F0WS2422noCfu2ly7w6+OveNunbp5RHEDAtAuuVufec=
Subject key identifier: 6C:E6:31:C1:D7:68:C2:5B:78:68:C5:ED:4F:69:55:5F:8F:9E:4F:26
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 01A0C39FD78A3B45BF3BA5B060F1CAFD5EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 1A24
Signing time: Mon 21 Sep 2026 11:00:27 +0000
Manifest this update: Mon 21 Sep 2026 11:00:27 +0000
Manifest next update: Tue 22 Sep 2026 11:00:27 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: k/TJkyy3L+3kQv4AMixl3I1u15rpIE7mpmwfipFtIIg=)
2: suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa (hash: 5F65oe93bt7PTgDTFumLJnCP6tdXA4+0OqZl24dm2bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:d7:8a:3b:45:bf:3b:a5:b0:60:f1:ca:fd:5e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Sep 21 11:00:27 2026 GMT
Not After : Sep 22 11:00:27 2026 GMT
Subject: CN=6ce631c1d768c25b7868c5ed4f69555f8f9e4f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:02:38:80:4b:ca:18:80:6c:7f:b8:ad:5a:98:
5b:3a:e0:7a:1a:2e:83:18:6a:5c:fa:f0:9e:31:d1:
13:16:db:89:4a:c0:5b:1c:b6:a4:4c:77:b8:72:db:
86:e2:5a:68:b2:27:3e:36:5b:aa:dd:5d:c5:e7:ec:
7b:44:c9:3e:0c:f0:32:b5:c0:c3:9f:18:e0:88:f6:
9d:54:c1:a9:6b:ec:ce:b0:d1:f8:98:32:bb:78:00:
78:86:1f:72:44:60:b6:97:2f:d8:4b:70:06:2a:5d:
3e:00:16:f0:a9:d7:ee:c4:e4:7f:94:34:cf:dc:2e:
24:0b:06:d7:9a:91:d9:fb:83:48:48:59:e0:43:e7:
2c:d5:9b:e9:19:af:0e:98:fd:2a:9c:b4:0d:0e:78:
98:be:a8:3b:09:e0:8b:47:d6:0e:8d:94:38:85:22:
34:b3:94:ff:f5:21:08:8c:af:d3:f0:a6:36:1e:83:
c1:57:46:7d:a2:79:67:19:a0:56:90:dc:d0:41:d5:
54:f1:33:5d:e4:de:7d:e8:11:c9:8c:cd:51:c1:35:
5a:11:b5:96:a5:7d:be:0e:80:a7:67:70:2f:39:7d:
cf:74:04:9a:8b:9d:50:ce:cf:1f:67:87:58:95:e5:
7d:20:36:14:ce:ef:9c:58:ac:90:c3:51:b4:a8:4e:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E6:31:C1:D7:68:C2:5B:78:68:C5:ED:4F:69:55:5F:8F:9E:4F:26
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:de:d7:e4:e9:23:e7:7d:7f:f5:f1:dc:a7:fc:df:ec:8a:55:
dc:be:57:75:0c:fd:d0:b9:ed:f8:ec:ef:57:95:f0:47:8b:c2:
c0:33:c8:9d:8c:37:5a:b4:19:e3:6a:a8:f7:37:28:98:e6:6d:
65:1c:28:60:49:e2:f6:af:d5:04:a7:bf:8f:61:f3:ef:6f:74:
a1:61:ae:a1:00:50:f1:03:09:60:f7:21:7d:f2:ee:e4:b7:ec:
a0:67:ba:7f:cc:a7:57:ff:cf:a3:ce:29:3a:b0:63:e1:9a:e5:
ac:07:c3:60:ae:2f:49:d4:93:6d:1b:51:64:28:a5:a5:92:99:
c5:d6:6e:fa:48:1b:17:ba:aa:9b:22:45:ce:b9:77:6c:42:f6:
97:98:f2:68:18:17:6f:9d:0c:cb:b6:2d:71:9d:51:0f:df:0d:
40:ca:60:d4:c3:6a:f1:7b:57:41:67:22:42:d9:96:a5:98:dd:
c4:ad:91:0a:19:29:fe:74:75:d2:3b:01:fb:7d:0f:dc:92:b7:
0a:f9:bb:5f:7c:24:12:85:1c:11:8f:26:20:82:d9:70:82:02:
d8:e4:16:a5:ee:d4:52:87:d9:7f:c3:80:a7:83:85:74:ce:14:
9d:bd:7c:c7:e4:5d:84:53:d4:9a:a9:43:19:1e:00:0a:f0:c6:
a5:ad:71:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:53:01 2026 by rpki-client