Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File: C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier: vH8TTp8vaaxPp6r5D4sIrWZ9taQRw4ctRN/kiXmNg0Q=
Subject key identifier: E8:71:10:64:89:53:83:31:21:CD:CC:78:E0:46:19:7D:05:5A:73:97
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer: /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial: 01A0F2D69221D2CF85D2E212C33B9D89A9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number: 1A7A
Signing time: Wed 30 Sep 2026 15:02:23 +0000
Manifest this update: Wed 30 Sep 2026 15:02:23 +0000
Manifest next update: Thu 01 Oct 2026 15:02:23 +0000
Files and hashes: 1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: z8n7357kxs/CAaHmDUFobj9gHM9VEYIFBSENOewIKls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d6:92:21:d2:cf:85:d2:e2:12:c3:3b:9d:89:a9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Validity
Not Before: Sep 30 15:02:23 2026 GMT
Not After : Oct 1 15:02:23 2026 GMT
Subject: CN=e87110648953833121cdcc78e046197d055a7397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:cb:06:50:60:a1:ad:a4:b3:09:66:1f:23:
b3:7f:a0:a9:bb:eb:80:12:9a:c4:5c:f0:33:f0:42:
80:aa:a5:9f:7d:df:af:30:ef:b7:47:c2:ac:c5:85:
3c:91:9e:1a:d4:4e:95:e6:8d:2b:54:3c:d8:9b:63:
d2:37:03:3e:e7:a9:c8:ae:57:09:4f:4f:b5:12:24:
09:0b:a4:2e:5f:5b:47:24:5d:c5:e4:79:7c:9d:5c:
2d:17:95:37:91:66:d3:84:10:6c:34:e1:64:c3:28:
0e:4d:af:3a:0f:c7:7a:39:0a:c6:90:7f:6b:0c:36:
b8:35:a6:ac:c7:17:86:5d:35:55:39:f0:9a:10:44:
85:e7:7f:5e:ee:34:dc:c1:51:eb:93:24:31:dd:d7:
4d:4d:dd:b2:38:ff:55:00:0e:4c:e7:8a:c2:35:bf:
0d:c9:7b:8c:69:bc:a4:62:2b:d8:cd:a9:bf:4c:ca:
d8:ee:af:12:04:af:c8:db:ee:dc:5a:29:a9:21:cf:
df:69:c3:b9:c2:2c:67:56:74:e0:a0:4a:4a:c4:35:
4e:1d:2c:c0:68:b6:ad:a8:da:3c:0c:2b:59:fb:4e:
8e:ce:4d:46:f3:e8:d1:b1:10:c1:27:77:fc:cd:dc:
f4:ff:ad:56:32:0e:17:52:ed:22:57:66:d7:da:68:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:71:10:64:89:53:83:31:21:CD:CC:78:E0:46:19:7D:05:5A:73:97
X509v3 Authority Key Identifier:
keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0a:df:2c:e9:db:f5:ef:0e:6c:99:ab:8c:98:10:90:60:cc:
c4:26:42:79:43:52:ed:16:ff:42:14:40:d1:e7:a3:f6:ba:65:
0d:85:84:7f:5b:36:f7:bb:96:dd:92:c2:1f:2f:94:d0:25:7a:
37:cc:75:da:4d:3a:15:8f:07:bb:51:d3:cf:b3:c7:e3:26:05:
f4:3b:44:6a:a1:5f:87:5a:77:64:83:23:f6:52:8b:20:4b:2f:
42:3e:16:e0:c0:5f:18:b0:f3:7f:78:39:36:d6:1c:66:f5:b7:
8e:b9:9a:3f:63:af:bf:e8:e7:09:9f:7d:15:a4:ce:ce:28:16:
1e:0e:c2:1c:a2:a6:1d:e9:42:06:c3:5a:43:31:5b:4f:b0:a7:
4b:2e:49:cc:67:4e:f1:9c:f4:c7:21:fe:3e:f0:d5:3c:a0:ff:
18:7a:43:a2:0c:b3:f0:a5:c1:1b:46:a7:e0:f4:7f:b4:bb:28:
30:85:63:40:66:c8:26:fa:29:91:df:7b:16:b8:21:1e:89:36:
fd:0a:5d:ea:6b:e8:50:75:92:06:a7:2a:66:8b:fc:42:5d:b2:
16:ba:8c:42:d6:dd:c8:63:d4:e7:75:e7:98:6d:34:3b:5d:ad:
7a:0c:4a:67:57:bf:ae:b1:97:b5:8d:a9:38:e2:6f:25:8c:c8:
ae:c5:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:55:07 2026 by rpki-client