Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: 5bqKIhTQT2HKFaVvUNbSWBScUSn+0/35xGePpdPoAEc=
Subject key identifier: D1:D8:C9:CC:39:7E:AA:4C:DA:4F:F4:67:7D:EE:E5:45:E8:17:4C:9A
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 019D26286C25824C365C07E6649E0315B9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0D8F
Signing time: Wed 25 Mar 2026 18:01:16 +0000
Manifest this update: Wed 25 Mar 2026 18:01:16 +0000
Manifest next update: Thu 26 Mar 2026 18:01:16 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: JzflYdHUdjAc2chWmcpD5FSfaQkWUvGk48Ihe3fpJNc=)
2: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (hash: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:6c:25:82:4c:36:5c:07:e6:64:9e:03:15:b9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Mar 25 18:01:16 2026 GMT
Not After : Mar 26 18:01:16 2026 GMT
Subject: CN=d1d8c9cc397eaa4cda4ff4677deee545e8174c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:fe:c9:65:2e:e0:e4:b3:b1:d1:e3:7e:a1:
9c:d1:7d:f6:f9:a0:29:c5:b6:0c:07:13:46:4a:43:
e4:e4:5e:40:b4:27:46:4f:0b:37:d1:8b:31:17:5b:
56:47:ff:93:5c:72:ae:37:f5:b4:4f:a3:cb:77:f5:
82:58:56:b7:01:ef:58:46:09:93:8d:d9:a8:c6:d9:
7d:24:1e:8f:57:85:cd:21:af:20:03:03:5e:b5:49:
c5:df:c6:f7:fd:dc:e8:ae:d7:ed:7d:14:a3:1b:2a:
5c:73:0b:bf:ed:3e:c0:f6:d3:86:7d:0d:ce:29:60:
ff:69:b5:46:ec:63:6c:fe:a1:4c:87:9c:8a:69:19:
40:c2:f3:1f:c2:1a:b2:3d:48:3b:54:dd:3b:48:c8:
36:94:20:6d:4c:8a:7a:09:24:cb:ba:64:35:ef:41:
55:8e:f8:af:6d:67:a1:04:de:bf:64:15:34:1c:9a:
24:49:e4:74:95:b5:7d:8d:27:0e:fe:6e:38:7d:42:
52:c8:36:7f:45:de:99:80:1f:3f:c8:a1:f3:28:f7:
f1:81:91:14:09:92:4f:05:24:7c:31:69:05:f8:29:
7c:a6:34:33:68:c2:6c:84:db:3c:11:6e:19:b1:a3:
73:8e:56:64:07:9c:c4:e6:56:80:6a:2f:2c:99:e9:
88:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D8:C9:CC:39:7E:AA:4C:DA:4F:F4:67:7D:EE:E5:45:E8:17:4C:9A
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:61:16:30:9d:4f:c3:94:86:8b:e8:9b:ea:e9:f3:7a:0b:8c:
cc:a5:e5:54:ae:99:2c:0b:c5:c1:c6:2f:03:12:86:51:64:06:
d3:9e:8a:66:d3:af:25:8a:3e:03:dc:78:8b:49:c0:3d:ba:1b:
77:6e:15:5f:df:ec:51:06:02:20:e3:b4:3c:25:e9:74:47:c7:
d0:0f:44:fa:80:82:2c:a0:72:5e:40:07:c2:f8:47:9a:f6:99:
ea:61:09:d4:26:8e:94:da:32:01:f5:5c:9c:1f:3e:a0:ba:2f:
56:7d:b9:62:e3:53:ee:42:21:31:56:ad:d4:a4:ac:5b:e2:ff:
81:31:4f:0d:c0:a3:e5:2b:c8:26:25:3c:2e:a9:8e:3f:1c:19:
67:7f:c6:dc:bb:42:4e:9f:8b:c6:65:3b:47:c2:f0:55:f9:57:
2e:b4:93:d9:de:ad:a2:55:81:76:f4:d2:8f:a1:b6:3a:00:f8:
3c:db:6f:4e:30:a3:84:74:fc:90:4b:ce:93:c8:c8:41:75:7b:
de:d4:23:7c:7e:95:2e:c6:4a:f6:2e:58:cb:0b:da:6f:4b:42:
6f:bc:10:b4:0f:52:85:8e:a5:e3:17:c3:b6:f3:45:da:75:ab:
2f:1f:04:61:ba:04:47:e7:df:28:08:dd:0b:1b:a3:a2:9e:dd:
7a:90:4b:57
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0mKGwlgkw2XAfmZJ4DFbn2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzA4Nzc5ODViMGM1Y2Y2OTE2N2M5MWU4Mzc0MjRjNDdk
OWE0MjUwHhcNMjYwMzI1MTgwMTE2WhcNMjYwMzI2MTgwMTE2WjAzMTEwLwYDVQQD
EyhkMWQ4YzljYzM5N2VhYTRjZGE0ZmY0Njc3ZGVlZTU0NWU4MTc0YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4L+yWUu4OSzsdHjfqGc0X32+aAp
xbYMBxNGSkPk5F5AtCdGTws30YsxF1tWR/+TXHKuN/W0T6PLd/WCWFa3Ae9YRgmT
jdmoxtl9JB6PV4XNIa8gAwNetUnF38b3/dzortftfRSjGypccwu/7T7A9tOGfQ3O
KWD/abVG7GNs/qFMh5yKaRlAwvMfwhqyPUg7VN07SMg2lCBtTIp6CSTLumQ170FV
jvivbWehBN6/ZBU0HJokSeR0lbV9jScO/m44fUJSyDZ/Rd6ZgB8/yKHzKPfxgZEU
CZJPBSR8MWkF+Cl8pjQzaMJshNs8EW4ZsaNzjlZkB5zE5laAai8smemIswIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNHYycw5fqpM2k/0Z33u5UXoF0yaMB8GA1UdIwQY
MBaAFPlwh3mFsMXPaRZ8keg3QkxH2aQlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YQ0hlWVd3eGM5cEZueVI2RGRDVEVmWnBDVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvZDlkYjk4LTQwMTAtNDMyOC04NDQ1
LWVlY2ZlN2ZjZjFjMC8xLzEtWENIZVlXd3hjOXBGbnlSNkRkQ1RFZlpwQ1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y0L2Q5ZGI5OC00MDEwLTQzMjgtODQ0NS1lZWNmZTdmY2Yx
YzAvMS8xLVhDSGVZV3d4YzlwRm55UjZEZENURWZacENVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmEW
MJ1Pw5SGi+ib6unzeguMzKXlVK6ZLAvFwcYvAxKGUWQG056KZtOvJYo+A9x4i0nA
Pbobd24VX9/sUQYCIOO0PCXpdEfH0A9E+oCCLKByXkAHwvhHmvaZ6mEJ1CaOlNoy
AfVcnB8+oLovVn25YuNT7kIhMVat1KSsW+L/gTFPDcCj5SvIJiU8LqmOPxwZZ3/G
3LtCTp+LxmU7R8LwVflXLrST2d6tolWBdvTSj6G2OgD4PNtvTjCjhHT8kEvOk8jI
QXV73tQjfH6VLsZK9i5Yywvab0tCb7wQtA9ShY6l4xfDtvNF2nWrLx8EYboER+ff
KAjdCxujop7depBLVw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:23 2026 by rpki-client