Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: HsNffEkMqg2DQLIl/NhNUccuDTY03+GJdvF7TrPaPtE=
Subject key identifier: 7D:32:71:B8:83:3E:99:6F:B0:2F:B9:E8:B0:63:ED:32:9D:93:6F:9A
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 01A10BF06002576D6097AFF6AD99906190D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 1A91
Signing time: Mon 05 Oct 2026 12:01:04 +0000
Manifest this update: Mon 05 Oct 2026 12:01:04 +0000
Manifest next update: Tue 06 Oct 2026 12:01:04 +0000
Files and hashes: 1: 6-Ew-si9J0hf6ZarrCVeQjfqjE4.roa (hash: ljHxNRtveUXCickR/eyPdSx4OKRRH+YbhLZnTAcXkXg=)
2: I2tNxhGFF35MT6ATAQ34a1mldMA.roa (hash: aCwLuTKx+lT5TRi4XqsraXtHCM8YuZl8sxF9wyX0Vvo=)
3: JCTQgcUELCWna8Z80DBMEn0zGk0.roa (hash: aQm1A8aMpcGmR9Y0OhWPfstPmLBs4VFn6LiSckCGnCs=)
4: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: 3Q/Hw6k5KkMa0hbdJwgb/YuiiI/CatlTgVTrTByC1/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f0:60:02:57:6d:60:97:af:f6:ad:99:90:61:90:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Oct 5 12:01:04 2026 GMT
Not After : Oct 6 12:01:04 2026 GMT
Subject: CN=7d3271b8833e996fb02fb9e8b063ed329d936f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:53:01:05:48:b9:03:21:12:9f:8a:09:94:
57:f7:fe:8a:e5:51:fb:de:59:24:fb:8c:ed:9f:6b:
92:2d:58:0e:07:58:93:a6:07:b7:fa:b3:ef:24:c3:
7e:03:43:38:36:4b:58:a5:bf:f0:74:5a:4d:a6:b6:
5b:24:5a:bd:9c:06:c8:12:9c:e5:c0:78:2f:f6:4b:
5b:16:a2:dc:af:ea:7e:6e:03:30:03:a7:f3:aa:e2:
f0:84:9c:89:5f:34:8a:6b:cd:ae:52:bb:f9:00:59:
11:15:88:17:c8:1c:1c:67:e8:53:0c:fa:44:ec:7f:
a6:94:5b:9d:2e:b3:de:a3:aa:66:c7:a5:e1:68:70:
99:d6:02:f4:4a:3d:6f:f1:36:0e:3c:d7:c4:4f:1d:
9e:06:19:81:79:83:d4:6d:8d:dc:55:eb:56:06:39:
6d:11:c5:75:3e:35:12:69:04:c4:bd:f5:93:67:30:
e7:37:6f:e9:72:d8:a7:65:b2:66:3a:60:d7:17:1e:
c1:79:c7:bf:3d:10:66:1a:d7:5d:cc:37:82:94:3e:
b1:4a:bd:6d:b9:df:a6:78:9e:a5:f7:33:4b:bc:9e:
c7:32:19:68:29:bc:75:e2:3e:ee:96:ee:da:6d:c2:
07:5e:61:d0:15:13:87:5c:cc:3b:0f:7b:f6:a5:0a:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:32:71:B8:83:3E:99:6F:B0:2F:B9:E8:B0:63:ED:32:9D:93:6F:9A
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f7:e3:93:48:02:9f:6c:8b:7d:3f:0c:25:0f:ae:93:8f:d7:
62:7a:25:52:e0:51:95:69:5b:37:13:ec:8c:5c:9a:ea:1c:c6:
04:5f:2a:0f:ce:4d:66:38:53:f5:b7:6c:9d:50:b5:82:a8:57:
14:e5:99:29:b5:16:8e:77:a5:21:4c:13:fd:58:c5:cc:9f:24:
60:69:64:6d:5f:9a:1d:f9:9c:e8:08:e6:4b:7e:1f:cc:88:8e:
c9:10:46:0a:92:a4:5e:e7:3f:61:c6:d5:b7:38:38:91:eb:48:
0a:82:1d:a4:96:55:a8:6d:0e:84:06:1b:ad:e8:7b:11:83:15:
d0:7d:a3:89:c2:7a:5f:4a:29:ee:3f:50:3e:ed:dc:2e:47:ed:
71:05:c0:b9:93:74:02:d8:6f:b1:b5:66:a1:c8:1b:a8:1b:f5:
0d:d1:58:4c:3e:ab:6a:1d:00:91:49:12:52:99:d9:dc:e3:d6:
24:cb:b8:97:38:a1:d1:e0:49:dc:14:8f:0a:84:97:7f:4e:0d:
45:54:d8:e2:5a:14:a3:b4:72:6f:4e:0d:91:6d:ef:d8:dd:33:
c2:19:0c:6b:fa:94:86:a4:f1:5e:f1:12:20:21:30:45:45:71:
16:b0:12:01:ce:bf:d4:c8:98:83:d2:da:6b:c1:47:c7:41:e4:
24:f1:40:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:59:56 2026 by rpki-client