Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
File: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft (raw, json)
Hash identifier: 80qS0mV2e9e6/cQaKErRrA+csEzARx16J8wx51r5K6E=
Subject key identifier: 6F:88:DA:22:4D:F7:D8:F9:DD:11:76:9F:80:6B:7E:78:32:E8:7C:AF
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 019CAB6B33A8D42134AD7C78227C9CE59A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
Manifest number: 1675
Signing time: Sun 01 Mar 2026 22:00:55 +0000
Manifest this update: Sun 01 Mar 2026 22:00:55 +0000
Manifest next update: Mon 02 Mar 2026 22:00:55 +0000
Files and hashes: 1: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl (hash: 7OlFf286CmugXRXWRaHuXRTAGj6FZ+M9JE2IzTnN8+8=)
2: 9O4dKfnZgTgqWB_iiNETLsmvwXY.roa (hash: B3+44Wl16VVGNQlYDiIt0cK5DguWkC82Gzjl2M8qljQ=)
3: 9wP7mpH_B0PGwWv5_AlRe4xldiA.roa (hash: zYLWTc75j+s7gKIa+ebYI+LbuI7qKTL5YSAgcKHFymE=)
4: HUC0yUJUDgqy27kx_QVtwVTYAPk.roa (hash: CyeQ43VG6tD5RMnxhr0UsmCBVHZpmO9VtiFMAauD0/c=)
5: OuUlmrN0axWfSqeYSWZ3VFyR9gQ.roa (hash: QKGtXpsKu8AS09muhwUu1IIbo7MS1z9kgfO0GKSJA9I=)
6: UgGCU0bNSuQOEElr01rlVK8sU_Q.roa (hash: AacHgDrHZ+OvhSoYCRcjSoSerNRKqDKHnF8VQ9u1BE8=)
7: Wp-glj4jLDxWifTRA7ilsUKXI0w.roa (hash: vAjHOys3Ggc83LnsEZEpKy5P5ZSFbz3QKqyxgLEsEXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:33:a8:d4:21:34:ad:7c:78:22:7c:9c:e5:9a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Mar 1 22:00:55 2026 GMT
Not After : Mar 2 22:00:55 2026 GMT
Subject: CN=6f88da224df7d8f9dd11769f806b7e7832e87caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:38:cf:5b:80:7a:af:5e:1b:2d:d9:0c:db:
3c:2a:8c:69:d9:a7:86:9f:34:05:77:4a:0d:4b:ea:
de:c9:5d:c2:61:28:c6:12:c5:ea:d1:51:33:c5:c4:
40:92:70:1c:d5:da:28:39:a1:86:36:e8:d7:75:4c:
44:55:bc:1e:d7:65:8d:bf:1b:e7:4f:03:40:60:22:
3f:ab:33:50:94:63:6f:0e:ce:8d:53:de:d5:f4:f2:
43:7c:0e:41:9c:d3:2b:46:25:ff:0c:47:66:3f:05:
da:fd:82:1d:4d:6f:4d:3e:ef:01:d1:54:be:1a:b1:
1b:01:fe:66:8a:9d:fe:c6:0f:e5:65:50:4e:de:48:
e9:87:2a:21:f1:32:f1:96:e2:86:79:a4:b5:3f:f7:
53:f0:ff:c8:ec:0b:ea:d8:f1:69:fe:44:46:a3:e7:
7f:a5:97:c3:06:15:6a:7f:31:83:a9:6a:9d:8a:83:
df:de:34:0b:27:5e:d0:aa:c7:1a:68:b3:73:b1:da:
26:8d:1a:c4:ee:89:47:1e:70:51:2d:70:24:55:eb:
02:ad:3c:a0:de:18:55:3c:c5:c2:3e:d2:69:81:ae:
b6:b8:af:04:ef:cb:a5:83:d8:9a:d7:f3:66:a1:30:
ec:1b:07:a9:6b:90:51:f0:7d:2e:1d:cc:ec:48:14:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:88:DA:22:4D:F7:D8:F9:DD:11:76:9F:80:6B:7E:78:32:E8:7C:AF
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1d:a3:85:d3:17:cb:67:c6:79:aa:ed:54:2b:93:8b:21:15:
bb:ea:c2:ca:78:3c:08:44:78:b7:bf:d2:c2:c3:9e:e9:54:16:
e7:c3:2a:d8:e8:6d:e6:4e:8c:87:db:46:71:e3:e3:b2:4a:83:
62:10:37:d5:de:ac:0b:92:cb:81:bd:25:93:9b:04:5a:4a:4d:
1e:7a:d7:57:8a:4c:da:26:aa:64:5e:21:ab:2e:75:c7:3e:db:
e9:cd:f7:7c:bf:a4:c7:63:e6:8c:08:19:c2:f3:0d:12:e3:39:
a8:d7:c9:98:cb:57:35:c1:6c:3a:63:2b:6d:19:7a:5f:5f:bd:
17:18:d8:31:27:fe:31:c6:d1:85:5d:2e:96:62:20:4c:b3:01:
5a:12:4a:21:ee:55:58:82:ca:5d:c4:d1:76:16:20:7c:64:32:
f7:27:ef:2f:4c:0b:42:a0:b6:4a:bc:54:c1:5c:95:35:48:be:
94:4a:bb:15:ec:4d:fe:f6:01:f7:9e:f5:0c:1a:0d:72:ef:aa:
06:0f:00:11:92:6d:e3:ab:b6:5e:2c:d2:a2:4a:83:52:cd:b0:
43:f8:8a:a6:6e:f3:47:30:05:81:a5:bb:ad:e9:b5:ad:ec:e5:
a5:40:06:ac:5d:37:95:cf:d6:55:12:4e:03:9b:15:ea:a2:be:
6d:4e:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:08 2026 by rpki-client