Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: WWfWBnNUBc5gGT1myuNKNMUs7sjYn/uaQf92fPp794Q=
Subject key identifier: 3F:8F:61:AA:7C:99:87:29:E0:EE:40:CE:A2:B4:C6:15:B0:D0:41:B0
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 019E1CEBC40902EE12CA5FAECC11C1C30D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 16:01:13 +0000
Manifest this update: Tue 12 May 2026 16:01:13 +0000
Manifest next update: Wed 13 May 2026 16:01:13 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: cz1nqN18uJ8XEmhHInfwHOlcT1pGWYfG1vOGaASj2n4=)
2: OeILc9n1u8YEH2AOBIE0o0dgpEE.roa (hash: /7A8rLMm0YbWTOXfPXut3LLp0Fa9Ut9MxlMvs+Wsm1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:c4:09:02:ee:12:ca:5f:ae:cc:11:c1:c3:0d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: May 12 16:01:13 2026 GMT
Not After : May 13 16:01:13 2026 GMT
Subject: CN=3f8f61aa7c998729e0ee40cea2b4c615b0d041b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:b3:3a:32:d2:2f:a5:ed:94:d1:c0:fe:cf:
d6:7f:f6:70:ed:f6:b7:e4:94:21:44:81:20:0e:e2:
c9:00:72:a8:df:66:3f:0e:bd:62:07:c4:d8:eb:a4:
0c:57:c2:95:d6:29:60:bd:d8:eb:6f:b1:af:08:46:
e1:ac:73:41:98:24:f9:72:2a:3a:56:b3:13:c2:1e:
61:ee:95:37:c3:6e:2d:17:14:63:bc:e0:ef:43:fa:
49:e2:a9:cc:de:d8:39:76:4f:e9:e4:d7:63:f5:ff:
24:14:40:aa:de:1f:69:73:cd:91:20:36:d2:a0:19:
a9:68:39:b0:86:6c:9c:12:b7:0e:49:80:07:71:f9:
e4:60:61:71:ec:ac:0b:2f:63:91:62:a9:08:63:45:
a8:71:c0:e6:65:af:8d:85:c6:1a:31:6f:57:53:19:
72:35:57:71:c8:8e:f5:f5:86:51:40:4b:20:a4:ac:
6d:42:fc:d8:21:51:01:89:4a:c0:42:f9:ed:2d:69:
0c:e3:b6:8d:a1:1a:f8:e3:bd:8f:a5:41:1b:1d:a1:
3b:2c:4e:08:84:99:34:d2:90:80:ae:bc:de:ca:58:
6f:af:3c:27:9b:ae:74:7c:c2:2e:3d:2b:30:04:1c:
71:ba:4a:11:d1:f8:76:16:f0:81:fe:36:dd:76:a9:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8F:61:AA:7C:99:87:29:E0:EE:40:CE:A2:B4:C6:15:B0:D0:41:B0
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:20:09:b1:1d:44:a0:c9:6c:28:ae:5a:65:8e:49:f6:cd:5a:
67:2a:c6:69:49:e5:a7:8e:7f:d0:17:88:a1:04:92:3b:33:d3:
ac:9e:5c:1a:b1:2f:4c:04:22:6d:54:24:bb:2e:42:75:7c:4c:
db:f2:b8:fa:9f:50:15:ff:89:94:59:21:72:e8:b2:bb:0b:4b:
ca:2d:44:6c:8d:f6:b7:b2:bc:9b:6c:2a:b2:ea:33:40:88:b0:
0e:33:38:ce:97:50:4a:df:eb:23:c6:11:1b:a7:9d:c0:f2:93:
e0:c1:30:12:e3:00:9f:68:23:e6:98:d4:87:c4:d5:10:e8:c0:
2d:3b:f8:e4:fa:f8:bf:bf:b2:51:d7:3a:b0:2f:96:87:fa:47:
cf:d4:38:93:80:23:c6:a8:94:1e:e6:4c:35:98:97:50:89:b1:
06:ee:06:8a:78:df:f3:65:82:12:9a:78:d7:62:9e:12:e6:f0:
13:e0:98:1f:6b:bf:9e:97:87:26:d1:46:c8:e7:a9:c4:e0:7c:
f1:90:41:d4:29:be:78:1b:83:de:03:89:26:d7:0b:63:0e:20:
bd:36:15:08:98:fe:e7:62:07:4d:fa:74:b8:f5:21:39:b9:24:
2b:f1:14:5f:4e:25:e7:d3:ad:50:ea:57:7f:1c:9f:05:5f:2f:
25:2b:80:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:17 2026 by rpki-client