Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
File: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft (raw, json)
Hash identifier: z+QBYot1R3104emsEpojCyoL9+wTuFbo1emJYYKmoek=
Subject key identifier: F9:14:0D:06:AD:DD:02:B4:90:59:98:6D:AA:72:CF:81:6C:E0:B4:D0
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 019D98F47987017B63394F608BED9BADF0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
Manifest number: 16F0
Signing time: Fri 17 Apr 2026 01:00:51 +0000
Manifest this update: Fri 17 Apr 2026 01:00:51 +0000
Manifest next update: Sat 18 Apr 2026 01:00:51 +0000
Files and hashes: 1: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl (hash: VWXB8cG2QK84/aJCgjXnkDYTyMLpoSuC79m9VKnNWwk=)
2: 9O4dKfnZgTgqWB_iiNETLsmvwXY.roa (hash: B3+44Wl16VVGNQlYDiIt0cK5DguWkC82Gzjl2M8qljQ=)
3: 9wP7mpH_B0PGwWv5_AlRe4xldiA.roa (hash: zYLWTc75j+s7gKIa+ebYI+LbuI7qKTL5YSAgcKHFymE=)
4: HUC0yUJUDgqy27kx_QVtwVTYAPk.roa (hash: CyeQ43VG6tD5RMnxhr0UsmCBVHZpmO9VtiFMAauD0/c=)
5: OuUlmrN0axWfSqeYSWZ3VFyR9gQ.roa (hash: QKGtXpsKu8AS09muhwUu1IIbo7MS1z9kgfO0GKSJA9I=)
6: UgGCU0bNSuQOEElr01rlVK8sU_Q.roa (hash: AacHgDrHZ+OvhSoYCRcjSoSerNRKqDKHnF8VQ9u1BE8=)
7: Wp-glj4jLDxWifTRA7ilsUKXI0w.roa (hash: vAjHOys3Ggc83LnsEZEpKy5P5ZSFbz3QKqyxgLEsEXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:79:87:01:7b:63:39:4f:60:8b:ed:9b:ad:f0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Apr 17 01:00:51 2026 GMT
Not After : Apr 18 01:00:51 2026 GMT
Subject: CN=f9140d06addd02b49059986daa72cf816ce0b4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:bb:55:4c:3e:ad:fe:7e:0c:af:7b:f0:94:
a1:5f:33:66:30:03:7f:0d:19:fc:ed:cc:c5:5b:e6:
49:05:1c:08:12:ec:fc:ac:dc:03:d7:0d:52:0c:cb:
6c:00:2b:da:24:85:57:ae:ef:1e:2a:30:50:e8:01:
d3:a9:de:71:9d:c8:ee:39:03:1b:1e:dc:e7:89:31:
51:e3:0e:9e:ca:de:74:d4:f7:7c:0b:05:71:10:66:
e3:ab:42:59:94:12:f0:c5:c8:5a:7f:60:5b:65:6c:
0b:36:15:34:72:3b:2d:7e:e2:3d:3e:95:ba:00:70:
c3:d6:c3:93:45:7c:51:3f:da:10:aa:67:89:25:ac:
d4:5e:9a:22:17:56:c1:96:ff:91:d6:44:b6:af:eb:
be:f3:2d:71:64:63:00:f5:b8:1e:c2:5f:52:6a:32:
4a:89:e9:03:41:bb:1a:b6:ed:db:46:c7:cd:b9:06:
21:5e:9c:09:e8:8d:1f:81:d6:bc:f7:34:61:ed:e4:
80:5a:56:1a:70:a2:95:6b:98:d8:e3:3f:0d:c4:57:
2d:3f:13:9c:62:b6:b0:87:6f:99:95:70:19:06:8a:
98:c2:d0:86:6c:17:a6:93:4a:51:8b:e7:2f:53:ae:
7a:b1:8d:f9:40:8c:5c:4a:cb:ff:1d:9b:f3:fe:8a:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:14:0D:06:AD:DD:02:B4:90:59:98:6D:AA:72:CF:81:6C:E0:B4:D0
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4a:a7:ca:6f:6d:fb:96:89:cf:1c:5d:16:86:8a:78:bf:e6:
de:e5:52:4c:cd:cb:69:18:01:bf:08:c6:d1:c6:10:ad:4e:54:
22:9d:00:ec:ba:7f:08:26:37:84:dc:1a:54:5a:69:13:a0:fb:
e2:44:0a:12:a5:0e:d0:f7:fd:fb:36:3f:60:2a:66:8a:4d:48:
e3:8f:90:cd:5e:da:12:17:b9:48:71:40:69:3c:ca:2d:92:a0:
15:98:74:0b:b8:ed:24:34:86:fd:fc:9e:1a:b9:7a:9e:96:af:
53:28:89:d2:2e:58:1e:d1:57:30:58:8f:11:f6:78:df:fe:4b:
9e:13:20:ad:fd:fc:1b:75:4f:df:ba:4c:88:51:cd:44:43:86:
2e:0a:10:98:42:3d:88:9e:45:c0:ee:4c:5f:fd:76:fb:2a:9f:
56:1d:e4:7d:98:b0:93:c0:63:f5:6a:de:f2:87:b3:08:c3:41:
b6:34:11:a6:75:44:93:89:82:0c:b9:95:c4:25:9d:76:4f:09:
5e:b8:b8:f3:10:d5:37:9d:3c:5e:71:0e:7b:79:bc:b5:5f:42:
78:0a:22:d7:fc:3e:42:c3:51:22:ad:36:1d:29:0f:1c:33:1b:
ef:e2:b7:f8:36:96:61:06:06:38:fe:4f:cf:2f:59:26:a2:68:
12:9c:a8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:45 2026 by rpki-client