Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: oOBaqeEbGchY3hO/tTEmNO6J4zBua6WEiie5I+1i/eA=
Subject key identifier: 12:66:8A:60:4F:FD:12:59:9D:5C:36:F9:81:54:02:EF:C7:4C:A8:A6
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 01A1C21CE2C3B58274E9E0E5606E8E54C3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0FF2
Signing time: Mon 09 Nov 2026 21:00:35 +0000
Manifest this update: Mon 09 Nov 2026 21:00:35 +0000
Manifest next update: Tue 10 Nov 2026 21:00:35 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: oKpHPXFxJpoB1szUZ8b1ixnOSnD0EYrVX4SbWXMOZNs=)
2: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (hash: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:1c:e2:c3:b5:82:74:e9:e0:e5:60:6e:8e:54:c3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Nov 9 21:00:35 2026 GMT
Not After : Nov 10 21:00:35 2026 GMT
Subject: CN=12668a604ffd12599d5c36f9815402efc74ca8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:86:d2:79:5f:9f:3e:5a:96:42:f2:a5:23:
a7:d4:ef:85:24:f5:71:bf:ae:d1:d0:44:cc:d7:e8:
4c:32:65:0b:73:7c:ce:da:8c:c8:54:ae:e7:0a:c9:
6a:45:28:77:0e:17:f2:f1:3d:09:c1:8b:a1:27:fe:
c5:47:86:f6:02:87:22:06:10:1c:09:f5:ce:36:e6:
fe:8c:03:ec:8d:63:3d:1e:6b:26:46:f2:2c:26:96:
d4:61:c4:67:cd:c4:38:0b:a3:ce:dc:10:a9:06:31:
fd:12:b6:e5:e1:a0:5b:f6:3b:4a:2d:dc:b1:5a:ab:
62:d3:18:b9:9f:a9:22:fc:5c:aa:41:c8:0c:ee:d3:
8d:a8:d8:a1:01:03:37:42:2b:97:9a:0b:c7:33:47:
e7:4c:e5:7c:05:7a:63:54:0a:30:39:e6:17:db:b6:
34:0d:83:c3:bf:b7:ab:fc:4d:14:87:97:0f:3b:12:
a0:ee:8b:bf:71:5b:1f:e7:77:df:4e:ff:33:26:c7:
73:e2:19:4e:a7:15:89:08:f2:16:02:93:57:21:89:
e6:c9:ff:f1:e3:f3:e5:9c:04:cb:be:17:fd:59:7d:
c4:31:80:76:e9:57:57:6b:46:72:a3:9e:11:07:01:
91:80:c5:7b:2e:3f:97:d4:41:d1:19:d3:9e:4e:ea:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:66:8A:60:4F:FD:12:59:9D:5C:36:F9:81:54:02:EF:C7:4C:A8:A6
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:ef:26:0d:f3:65:5c:54:97:ca:5b:32:61:2e:c0:4d:50:47:
3a:b6:41:92:1d:40:c5:8a:c4:ab:3b:21:a6:ed:74:31:86:5c:
13:f8:c6:92:40:8c:a9:6b:d0:e2:31:7b:33:66:42:80:5d:76:
01:02:78:52:ba:12:db:07:0a:3a:01:99:51:fc:d6:9e:73:73:
85:ba:f8:50:2d:14:68:9b:e4:cd:c7:8a:c9:09:b7:65:0d:5b:
2a:55:4a:4f:5f:34:e8:cb:26:63:bc:e1:7c:34:0c:6f:34:c6:
02:42:76:9a:15:ca:b2:fe:5f:d9:37:d1:75:b3:78:2e:ed:e0:
5f:40:7e:d1:a2:27:bc:08:b1:27:37:d8:2c:fa:20:a3:f9:85:
98:ad:99:b5:5a:ba:c9:e2:19:22:fd:51:39:33:1d:45:3e:e9:
f5:24:a3:e2:17:60:cf:8f:4c:f3:99:4c:b3:57:10:1c:2d:9c:
03:01:d9:4e:d4:89:68:53:32:88:bc:8e:fb:df:b5:31:5f:d7:
ac:f4:c1:48:1d:76:c3:3c:53:05:80:a0:54:a9:a6:75:e3:d4:
21:a0:f8:80:95:82:5b:f2:07:00:c4:fb:c5:bd:0d:c3:05:f5:
8c:8f:75:86:8e:62:d7:8a:6d:6f:17:ef:86:fa:cb:0b:3e:13:
e2:0b:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 05:43:13 2026 by rpki-client