Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: a+5A0j63uq3kN524X4i34BIO+LQ1RHFvWT6JqGbCPAo=
Subject key identifier: E0:EF:2B:C2:67:62:E1:12:A5:C4:3A:28:91:E9:18:99:36:34:71:F5
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 019D299765B4DFC2F374FF03B875AAAB4512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:01:21 +0000
Manifest this update: Thu 26 Mar 2026 10:01:21 +0000
Manifest next update: Fri 27 Mar 2026 10:01:21 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: a174DwzRgjKj1aN1PRz3BHnOlD6jwrL+dH7UfFe8GmY=)
2: OeILc9n1u8YEH2AOBIE0o0dgpEE.roa (hash: /7A8rLMm0YbWTOXfPXut3LLp0Fa9Ut9MxlMvs+Wsm1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:65:b4:df:c2:f3:74:ff:03:b8:75:aa:ab:45:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Mar 26 10:01:21 2026 GMT
Not After : Mar 27 10:01:21 2026 GMT
Subject: CN=e0ef2bc26762e112a5c43a2891e91899363471f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:95:d8:1e:9b:18:a4:3c:29:9f:28:ba:8d:
58:77:cf:35:e5:02:7d:4b:f3:57:a4:1d:41:39:46:
aa:6f:89:b7:b9:90:0f:9e:4c:4c:27:06:1e:03:42:
29:19:5a:06:74:34:8e:82:a7:f7:3c:b3:e6:68:5c:
a5:8d:22:15:67:7a:59:7f:61:21:98:43:45:93:89:
00:44:5c:f1:31:b6:7f:a7:a8:f4:16:7d:d5:27:31:
c2:ae:f0:b6:35:58:1c:77:7f:d1:51:a4:df:ed:e2:
c6:ce:00:69:c9:2f:ba:78:ff:5e:52:1c:49:4c:5b:
74:35:58:71:a7:27:c8:25:10:34:93:2f:4d:ba:55:
62:39:8e:b7:90:e5:ab:18:54:71:45:68:3c:0d:5f:
c7:f9:9f:4c:ad:f1:54:f6:42:5a:da:d6:9c:6e:07:
06:5e:14:5d:11:fb:67:57:69:88:7a:43:f3:f3:c3:
46:fe:10:8b:15:ba:f6:1e:52:8f:8b:07:fc:8f:44:
a2:67:09:d0:87:7a:0e:52:c7:69:6b:56:52:fd:32:
48:d7:41:49:37:f3:49:d0:1a:95:98:24:53:e7:9f:
2e:32:39:96:af:38:34:04:d5:8e:9d:74:08:e6:49:
8f:a3:33:25:f1:a3:62:2e:1e:6c:06:8e:40:84:f6:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EF:2B:C2:67:62:E1:12:A5:C4:3A:28:91:E9:18:99:36:34:71:F5
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:90:48:96:7f:ca:bd:05:6d:3e:21:8e:bd:25:35:a9:cf:a9:
cc:cd:bb:83:40:c4:ce:8f:06:94:88:04:01:55:7a:0b:80:0a:
c0:c0:ca:8d:62:75:ce:03:52:c5:c8:63:cd:f0:28:8b:ec:be:
48:d6:00:6d:92:7b:6e:b6:43:8d:ff:46:74:6b:71:d5:68:9c:
59:ef:87:a0:83:c0:4c:fb:14:7f:ee:89:f2:91:f3:eb:08:a1:
bd:31:fc:0a:33:de:71:57:bb:28:05:d4:ea:7c:8c:54:18:9f:
d5:72:0b:4a:9d:fd:f3:1f:b8:90:58:25:b8:0c:e9:07:c9:68:
68:ef:9d:d1:e9:73:ae:e5:dc:e8:d4:67:53:23:27:45:1c:f2:
4d:45:50:6c:f2:ce:7d:59:e6:c0:8a:78:59:ed:25:e5:16:54:
39:3d:1f:4d:e7:ff:fa:17:b6:43:ff:89:88:60:b7:e5:45:c3:
9d:53:4d:d5:95:42:c5:b5:f1:0b:8e:5b:be:92:16:b7:75:f3:
93:ae:4e:a2:73:6d:23:0b:dc:04:45:bd:e4:b4:6b:7c:4c:d9:
b6:3e:19:95:4d:d1:f0:f0:a4:68:79:65:49:69:25:47:ea:0a:
76:b1:2a:07:5d:5a:ce:7c:fd:13:2e:8d:29:3c:c4:cd:0d:ab:
6f:28:b4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:15 2026 by rpki-client