Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: 5mfL8ow/ThIPBdPW2Yea1Qc5jYdfiZIM8a0MUxGmmRc=
Subject key identifier: C0:3C:1F:4F:99:49:2F:73:FF:14:CA:C2:63:A1:50:7A:03:49:3A:FC
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 01A0CAEB3A56E9D2ADB70A64596A812D56C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0F72
Signing time: Tue 22 Sep 2026 21:00:08 +0000
Manifest this update: Tue 22 Sep 2026 21:00:08 +0000
Manifest next update: Wed 23 Sep 2026 21:00:08 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: yQSyrpv77fWtawDzXv/DyYpMOBWtn0g2MmReSe0j1Vk=)
2: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (hash: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:3a:56:e9:d2:ad:b7:0a:64:59:6a:81:2d:56:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Sep 22 21:00:08 2026 GMT
Not After : Sep 23 21:00:08 2026 GMT
Subject: CN=c03c1f4f99492f73ff14cac263a1507a03493afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:89:c4:52:e6:5b:49:aa:5a:2f:98:b8:44:
80:20:4d:89:cc:48:40:db:55:d3:de:0e:b4:53:35:
a1:1a:74:4e:cc:32:87:4c:7e:63:40:c1:c9:40:9a:
0b:3f:f5:b5:b7:ee:b3:98:dc:ea:13:66:11:c0:4b:
40:32:f0:b7:4a:7d:a5:cb:3a:7e:12:2c:68:44:43:
e3:d7:8f:46:0b:30:9a:69:cd:fd:d5:ec:02:ff:ca:
97:8d:40:c8:f8:18:69:27:67:3f:91:c9:ac:06:bf:
1c:4b:fc:e7:7f:67:89:a1:f8:f5:19:5c:db:a3:8f:
5a:52:fc:11:bc:19:7f:a2:34:77:64:40:2d:97:a7:
49:5a:54:ff:57:64:c3:d7:4b:98:09:7f:ca:29:fc:
c2:c1:76:3e:da:e2:96:5e:c6:ff:c8:84:c3:50:78:
c1:28:b7:ac:7e:77:1e:7f:e6:47:42:fb:9f:53:79:
52:2d:69:64:6c:ab:55:92:75:36:b6:74:f1:5e:1f:
8b:17:e0:df:08:09:d0:ac:ca:de:05:1f:2f:87:b1:
42:32:d7:0f:10:41:33:95:07:a5:4a:65:78:b9:98:
e1:6d:2e:7d:fe:5b:bd:08:9f:47:99:b1:64:49:c5:
bc:71:9f:cd:27:b6:30:9d:74:c5:f2:24:f1:bc:31:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3C:1F:4F:99:49:2F:73:FF:14:CA:C2:63:A1:50:7A:03:49:3A:FC
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a2:80:02:51:16:2e:26:a0:59:a0:ac:81:cd:95:a1:96:8c:
a7:b8:97:37:45:0b:e7:b4:a9:3f:ac:a0:46:92:a0:63:17:ce:
e1:e3:62:00:bc:09:24:72:7f:a3:fe:f8:67:50:1f:d2:2d:53:
a4:c2:c4:8f:8a:6b:2a:1f:46:a6:97:6c:4f:0f:db:e8:6f:1a:
6d:d5:1a:c6:32:96:69:e3:97:90:52:81:0e:da:70:f3:c7:ed:
60:10:e0:03:d4:a3:73:e4:95:ec:b5:5a:cf:41:8b:8e:be:60:
02:4b:12:20:da:2a:b1:b9:7e:38:45:37:79:19:51:7c:24:e5:
ba:c4:86:bf:cc:55:9d:f7:f7:6e:81:24:31:ae:bd:d9:8f:c5:
0c:d8:41:36:a8:e7:55:44:ab:3b:06:e6:47:b5:45:65:93:4c:
5d:58:17:75:2f:c4:f6:4d:a5:7e:28:18:d0:f0:6b:92:a7:da:
8c:3d:bb:7e:1b:69:02:ad:15:a3:71:f7:6f:9b:fd:8f:8d:54:
32:19:c6:ea:6d:de:55:7b:8c:ac:2b:d7:11:1b:82:9e:b6:01:
34:27:86:79:cd:ce:9c:53:de:58:3f:79:5e:6e:0f:6e:25:73:
db:a7:d0:04:86:e2:5d:73:1b:9b:b3:cd:32:c2:07:67:e4:a1:
e9:05:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:42:25 2026 by rpki-client