Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: DwhRq2CnHucwENgcU/DS/pNzmeLCBIyhnKcxjzazJW4=
Subject key identifier: 51:9D:ED:BC:5A:20:1B:B2:BD:F3:0B:AC:10:B1:35:6B:0E:F0:BB:8D
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 01A0D3F0720FD4C568196AF029EE0B50B5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 15:02:25 +0000
Manifest this update: Thu 24 Sep 2026 15:02:25 +0000
Manifest next update: Fri 25 Sep 2026 15:02:25 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: 6eF2IdTro3TcFF52OdpXCGmddI5Fl+5ym+ByjmpHxZc=)
2: CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa (hash: P8wfVUsJaZ53GQVWp0JenO6tbrEXgFSMeFb1uzEMGrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:72:0f:d4:c5:68:19:6a:f0:29:ee:0b:50:b5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Sep 24 15:02:25 2026 GMT
Not After : Sep 25 15:02:25 2026 GMT
Subject: CN=519dedbc5a201bb2bdf30bac10b1356b0ef0bb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:8e:ea:16:c3:ed:49:db:61:6d:3f:05:02:
3c:57:99:07:59:05:be:06:2b:d3:dd:97:a3:3d:8c:
4e:2e:12:e8:78:45:74:0d:b2:93:57:1c:17:96:85:
aa:17:8a:db:2f:e3:e7:2d:bd:c3:bc:29:96:c4:2f:
ec:b6:9c:01:19:b7:e1:8e:d2:e5:b7:9e:a9:7a:c2:
f9:aa:a7:37:1d:a8:50:f0:58:b9:25:a8:9c:09:cc:
42:d0:a5:f9:3d:c4:e1:06:1e:fd:90:30:36:cd:c3:
6d:95:57:c0:8e:05:79:af:08:07:1f:35:a1:33:1b:
d2:89:f6:d9:44:84:5b:da:87:3a:df:ed:c0:29:45:
76:69:a2:a7:05:a6:b8:aa:38:9a:46:10:40:b9:53:
73:40:d5:23:8c:35:96:e3:d7:1c:bc:0d:81:ed:56:
da:dc:32:b1:20:5f:19:aa:fc:c1:2f:e7:07:7c:e0:
6f:2e:69:aa:a9:49:93:ea:0a:02:a4:c7:d6:a9:4c:
c0:29:00:ea:30:d2:bd:ca:fb:06:02:07:bb:26:91:
11:cc:bf:c2:cd:5d:7b:1f:0a:4d:a5:ef:bc:52:3e:
ff:71:95:c7:63:f8:63:13:e6:b5:5d:7e:b4:6c:b7:
f0:4a:86:71:f5:12:43:1c:72:c7:dd:e9:84:93:88:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9D:ED:BC:5A:20:1B:B2:BD:F3:0B:AC:10:B1:35:6B:0E:F0:BB:8D
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5f:2b:af:00:15:20:01:56:2a:c6:ab:4a:c1:ff:1e:2b:15:
44:99:a6:bb:84:34:0b:e3:24:b9:d9:8c:d1:26:c9:b4:1f:f0:
56:a5:69:3b:18:c0:ce:57:91:0d:a1:17:2c:0f:30:69:bc:31:
03:2d:40:69:7e:3f:a1:64:78:4c:0f:e1:df:4d:51:b0:30:98:
e6:93:aa:6b:38:e6:b7:2d:c8:68:2a:cb:0f:d8:b1:bb:68:c2:
52:3e:b9:b7:be:19:76:29:bd:79:af:94:2c:7f:38:ab:b0:f9:
61:9a:b6:94:e3:3f:ca:15:66:90:86:92:64:ae:2e:85:f4:92:
0e:9e:57:4b:50:5d:24:0a:23:9f:13:ef:08:76:52:6d:00:1a:
bf:56:61:48:e3:a0:03:d8:3a:af:b8:87:b9:ec:db:23:61:6b:
53:54:9a:82:7e:9e:4a:35:fa:4d:d3:3c:5b:2d:54:67:0b:58:
c8:84:51:d8:25:ef:13:34:3d:2f:fe:fc:6c:a5:9e:1a:ba:32:
ac:98:33:46:78:97:4c:b3:33:a8:e9:a2:d2:bf:77:a0:b9:b3:
11:d5:b9:5b:a3:40:55:a1:5b:6e:d1:d7:2e:67:5d:0d:21:f5:
e1:df:93:fb:fe:fe:55:99:57:27:ce:47:2b:ab:49:fd:91:38:
c2:64:63:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:48:36 2026 by rpki-client