Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: hnCLefbBLM5XQQyUOlARvpd5n9DdYpcIeEG4qFDpEUY=
Subject key identifier: ED:69:D9:07:C7:43:93:77:D9:62:E9:98:1C:D2:BF:33:A0:31:2F:B2
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 01A0CE5A77559F6057E1FA94700C57AFE876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 13:00:30 +0000
Manifest this update: Wed 23 Sep 2026 13:00:30 +0000
Manifest next update: Thu 24 Sep 2026 13:00:30 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: 7ncx3L0jK+8OTfpsjSGGfpAz6AZjMmz0OgWNZ7MQVoQ=)
2: OeILc9n1u8YEH2AOBIE0o0dgpEE.roa (hash: /7A8rLMm0YbWTOXfPXut3LLp0Fa9Ut9MxlMvs+Wsm1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:77:55:9f:60:57:e1:fa:94:70:0c:57:af:e8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Sep 23 13:00:30 2026 GMT
Not After : Sep 24 13:00:30 2026 GMT
Subject: CN=ed69d907c7439377d962e9981cd2bf33a0312fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:e5:ed:b2:05:7c:ce:75:eb:e8:78:20:cb:
61:95:19:75:f6:9a:10:c8:3b:18:27:e1:4c:3d:f6:
3e:1b:71:30:ab:02:e9:78:cf:6c:1c:a6:e6:cb:91:
59:3c:ca:98:be:c3:e3:3b:ba:66:74:17:80:b9:de:
33:77:36:8c:98:28:b3:e6:16:55:be:12:77:f2:aa:
af:8e:a1:b7:ca:4c:cd:d6:75:1c:29:e2:5d:54:2c:
bb:db:f5:c5:6e:a6:a4:0f:c6:de:92:60:2c:6e:0f:
95:d3:f5:10:20:79:d1:07:d1:16:a5:01:73:69:54:
27:11:4f:29:61:98:ae:34:7e:3e:c2:ce:3d:18:b1:
c5:b6:df:0a:e8:fc:4e:73:72:c8:c0:e6:0b:5c:f0:
ea:d8:38:75:c8:e7:4d:2a:06:18:ab:f0:90:65:47:
4e:2d:d1:41:1a:72:c4:26:6d:8d:2f:be:c9:12:00:
04:56:c2:11:9f:01:7d:0b:e0:16:55:c2:98:d6:08:
2e:1f:3e:9a:c0:12:fb:0b:7a:46:cf:72:c5:49:0d:
15:d7:a3:4a:c6:2c:f0:78:5d:d7:60:97:b7:2e:3f:
67:b3:d5:f6:3f:44:29:22:81:fc:94:7e:59:e8:2d:
62:44:bc:56:f2:cc:7f:eb:a2:66:eb:66:e0:09:6a:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:69:D9:07:C7:43:93:77:D9:62:E9:98:1C:D2:BF:33:A0:31:2F:B2
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d5:6c:f8:77:1a:2d:df:34:6c:28:38:9b:9e:98:29:51:d8:
7e:ec:a5:6b:f7:55:4e:be:40:40:c4:7e:6b:3f:b0:9b:e9:3c:
42:9f:53:78:cc:88:fa:16:e0:77:ef:54:89:44:95:fe:61:28:
d7:39:7b:bf:60:a9:30:35:4b:26:7a:40:f6:65:7b:e0:4f:6e:
ef:95:94:51:9c:f5:38:4c:ba:da:0d:68:fd:fd:71:9f:01:e0:
fe:49:74:6e:0c:7f:59:93:54:0b:51:b6:8a:69:69:1a:b6:af:
df:a5:91:e4:ce:3b:99:f9:e9:01:a7:19:f0:b4:46:9d:1d:fe:
e1:85:4c:53:7b:54:77:65:06:82:18:43:e5:65:91:fe:de:b3:
5a:21:08:92:c2:93:48:74:72:c5:3a:19:08:ea:f6:e8:41:1f:
fe:af:3d:28:96:24:9e:62:68:e6:60:35:dc:ae:e4:98:99:46:
32:bd:3a:79:10:f7:05:79:b1:e3:46:d7:4c:b9:fa:8f:90:4c:
4a:dd:98:97:a3:51:51:12:24:58:6d:dd:0f:e5:93:7c:64:f0:
5c:3d:b5:b6:5b:e2:3c:8b:0e:59:9d:c0:79:88:8c:e6:6a:06:
fa:55:76:d6:f6:6e:04:d3:b2:e2:39:cc:e2:d8:85:f8:b1:ac:
37:19:e1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:15:21 2026 by rpki-client