Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: uZcFpbR3qU8njawoyRySf4VZdbJse8jBXVZRWkx32HU=
Subject key identifier: 1E:DF:49:62:75:84:EF:E1:0E:BC:3F:AE:07:28:86:3E:88:99:93:95
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 01A0C66A588583C678C1F72793DEE8A6173A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 00:00:53 +0000
Manifest this update: Tue 22 Sep 2026 00:00:53 +0000
Manifest next update: Wed 23 Sep 2026 00:00:53 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: xhzZPb7uclwyRyYspcR8eWA9urp2R0TpYVNar6KMnLo=)
2: CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa (hash: P8wfVUsJaZ53GQVWp0JenO6tbrEXgFSMeFb1uzEMGrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:58:85:83:c6:78:c1:f7:27:93:de:e8:a6:17:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Sep 22 00:00:53 2026 GMT
Not After : Sep 23 00:00:53 2026 GMT
Subject: CN=1edf49627584efe10ebc3fae0728863e88999395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:bf:f6:a2:49:d0:b3:9e:d6:7c:2d:5b:74:
94:05:df:71:d4:ae:ba:f2:93:3e:a0:10:c5:91:50:
89:68:e0:6d:36:2d:06:cb:c9:42:ce:3d:b2:63:d4:
0d:73:c1:6b:cd:75:74:8b:da:48:44:f8:ea:bb:b4:
bb:63:fc:32:d7:21:51:5b:94:62:f6:15:ca:a3:70:
62:4a:3f:e7:f2:fe:00:3c:9f:6e:c1:97:82:e3:8b:
1b:cb:bc:04:c8:8e:47:6a:f3:5f:8a:53:08:f1:ca:
26:1c:74:d3:ff:bb:73:2f:fd:6c:63:32:d3:53:e1:
6b:e4:5e:82:be:59:9c:0a:34:16:08:d7:c8:fb:12:
87:8b:6b:6e:d2:7b:8e:a2:b9:6e:d4:89:56:8c:20:
44:e9:10:bb:9c:7d:f7:34:11:e7:21:fc:b4:2c:cd:
6c:a6:e0:96:14:1e:52:87:1f:3b:b5:fc:1d:7a:f0:
75:51:37:8e:02:73:51:40:c9:5d:ee:40:98:ae:56:
df:19:7c:df:61:c0:ab:87:b4:d8:fe:bd:e7:64:f8:
90:c6:fb:46:76:62:14:94:3d:fc:62:5c:b5:2e:47:
32:e4:21:f0:7d:82:ac:36:31:2f:76:08:39:cd:7e:
a4:21:f7:33:cc:e0:75:d1:c5:df:f9:37:35:9c:ae:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DF:49:62:75:84:EF:E1:0E:BC:3F:AE:07:28:86:3E:88:99:93:95
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fc:28:42:e7:fa:b6:57:b5:ac:44:3c:0c:cb:3e:83:29:9b:
65:3f:ff:e9:f4:f5:f0:10:fd:8c:00:ad:71:b2:59:f4:b0:27:
b1:43:f5:2b:3f:cf:49:19:8b:f0:57:80:0d:a4:bd:8f:41:76:
76:9b:37:e5:df:30:08:9b:3f:ce:c3:44:03:6f:b0:a1:ac:47:
3d:4b:68:8e:bb:7a:63:17:a6:0a:d8:12:7a:5a:28:c1:67:fb:
56:de:ed:1e:f3:76:ba:39:6a:ad:98:80:46:7d:1d:3f:63:fb:
79:ba:48:05:49:a1:b5:39:f2:87:d5:71:e1:41:6b:77:13:65:
4e:82:74:fe:09:6f:a6:e5:2b:d8:dc:ce:0b:d2:74:83:64:26:
c5:56:c4:b8:02:30:0b:52:19:73:3a:3a:3d:1d:bc:ad:2e:54:
68:13:0e:e5:38:91:f7:ba:0e:f6:26:31:4f:3c:82:02:15:46:
44:63:e8:01:0d:07:d4:14:8c:11:ee:c7:91:4e:81:b3:08:0c:
d9:b1:75:8f:e8:a9:a5:bb:c4:42:16:e1:30:ae:4a:50:21:f3:
05:ce:2a:2b:be:d5:08:66:6d:61:34:22:51:09:1c:b1:af:d7:
5c:55:5d:bc:01:24:16:de:17:71:d3:30:99:71:7e:c0:66:27:
26:81:1d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:30:58 2026 by rpki-client