Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: sEZTkJZRcNo10OBJGfkqNofmdhcxDDyZB5HNmgiWJz0=
Subject key identifier: A8:E2:AF:92:C9:79:66:AE:DB:0A:84:4A:CA:60:3A:C0:BB:00:94:AA
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 019D9818D0C2C6A4AEAD84A1D2899137711F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0DCA
Signing time: Thu 16 Apr 2026 21:00:56 +0000
Manifest this update: Thu 16 Apr 2026 21:00:56 +0000
Manifest next update: Fri 17 Apr 2026 21:00:56 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: 2W7y9a+KKI/t7gnRue0SBTCCsTujfuBGPQv8wQyJq3s=)
2: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (hash: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:d0:c2:c6:a4:ae:ad:84:a1:d2:89:91:37:71:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Apr 16 21:00:56 2026 GMT
Not After : Apr 17 21:00:56 2026 GMT
Subject: CN=a8e2af92c97966aedb0a844aca603ac0bb0094aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:8a:39:ea:7d:e3:9e:9a:d9:ac:ac:d5:c0:
39:e8:99:0f:e9:59:45:c9:4c:c0:10:81:10:ca:e0:
3b:79:e6:6e:84:72:a5:36:4d:37:c6:22:f2:22:a7:
c0:5e:6b:f5:9c:56:65:7c:57:38:18:c7:70:04:99:
4e:34:f9:46:be:30:3f:f2:c0:c6:00:77:80:de:d4:
34:35:66:52:c1:ce:a7:f7:43:c3:97:c1:99:83:5a:
9a:39:ea:ca:11:6c:f1:c2:5e:b3:f2:10:ca:74:b9:
15:6d:90:0e:f6:0b:c3:30:28:6f:97:8e:6e:93:90:
40:22:c0:87:de:94:79:3c:c5:9d:94:c5:c5:3b:b4:
60:4e:49:1d:b3:31:1c:56:54:b2:b2:7b:98:d7:66:
ff:bf:53:3e:79:7f:54:58:5a:7c:3d:06:4e:95:23:
0b:54:69:0d:f3:aa:ec:7c:a0:c1:81:c1:59:ef:bb:
88:41:fd:66:31:24:89:35:c5:92:c6:8f:80:cc:47:
03:84:50:b8:4a:3b:2d:f8:55:6d:8c:20:e0:64:be:
de:6c:64:ec:97:86:30:6d:05:fb:21:cf:a2:d2:7e:
7e:cd:98:21:ae:40:ee:7d:6c:fc:2d:19:cb:99:fc:
96:4d:96:76:75:b2:df:50:79:44:69:04:6c:2e:34:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E2:AF:92:C9:79:66:AE:DB:0A:84:4A:CA:60:3A:C0:BB:00:94:AA
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3a:04:57:56:31:ce:04:97:24:20:d1:cb:c8:08:20:bc:50:
cf:37:7e:0d:8e:e2:2d:a3:30:a6:df:79:62:70:31:5c:41:08:
b5:b1:94:aa:df:ee:8f:07:29:4c:86:4f:5a:9d:9d:f2:b2:49:
da:38:b5:0c:84:c4:b9:88:f4:64:aa:f7:70:fc:bc:23:6f:a9:
db:83:01:a9:45:44:2c:8a:bf:9f:17:75:64:4d:75:d8:12:81:
fb:14:ab:71:0f:b6:e3:65:43:24:5f:70:d3:21:6d:21:69:f1:
62:f1:66:9f:b6:2c:50:2d:67:8b:1c:66:3a:91:f9:2c:92:4a:
32:9d:a5:ce:94:be:1e:57:c2:4c:db:98:85:eb:6a:e3:73:47:
78:ba:60:fc:21:ca:b4:a4:7b:c3:3f:ae:1a:b2:73:6c:26:33:
c4:5b:5f:60:49:57:5f:1f:94:be:70:c1:05:63:6a:4f:92:57:
2e:cc:60:ad:33:68:67:13:e0:c7:aa:23:4b:a4:36:45:8c:6c:
86:94:f7:4d:e3:03:06:3e:de:6b:bf:aa:26:9c:eb:24:42:f4:
f4:ce:7b:9c:14:0f:8e:a9:5a:e3:33:2d:0e:36:7c:c1:4d:ad:
c1:8f:ad:7e:d8:4e:3f:d4:f9:f8:0e:ae:39:e6:db:45:1b:89:
a3:cd:17:a9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2YGNDCxqSurYSh0omRN3EfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzA4Nzc5ODViMGM1Y2Y2OTE2N2M5MWU4Mzc0MjRjNDdk
OWE0MjUwHhcNMjYwNDE2MjEwMDU2WhcNMjYwNDE3MjEwMDU2WjAzMTEwLwYDVQQD
EyhhOGUyYWY5MmM5Nzk2NmFlZGIwYTg0NGFjYTYwM2FjMGJiMDA5NGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9WKOep9456a2ays1cA56JkP6VlF
yUzAEIEQyuA7eeZuhHKlNk03xiLyIqfAXmv1nFZlfFc4GMdwBJlONPlGvjA/8sDG
AHeA3tQ0NWZSwc6n90PDl8GZg1qaOerKEWzxwl6z8hDKdLkVbZAO9gvDMChvl45u
k5BAIsCH3pR5PMWdlMXFO7RgTkkdszEcVlSysnuY12b/v1M+eX9UWFp8PQZOlSML
VGkN86rsfKDBgcFZ77uIQf1mMSSJNcWSxo+AzEcDhFC4Sjst+FVtjCDgZL7ebGTs
l4YwbQX7Ic+i0n5+zZghrkDufWz8LRnLmfyWTZZ2dbLfUHlEaQRsLjS8cQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKjir5LJeWau2wqESspgOsC7AJSqMB8GA1UdIwQY
MBaAFPlwh3mFsMXPaRZ8keg3QkxH2aQlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YQ0hlWVd3eGM5cEZueVI2RGRDVEVmWnBDVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvZDlkYjk4LTQwMTAtNDMyOC04NDQ1
LWVlY2ZlN2ZjZjFjMC8xLzEtWENIZVlXd3hjOXBGbnlSNkRkQ1RFZlpwQ1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y0L2Q5ZGI5OC00MDEwLTQzMjgtODQ0NS1lZWNmZTdmY2Yx
YzAvMS8xLVhDSGVZV3d4YzlwRm55UjZEZENURWZacENVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDoE
V1YxzgSXJCDRy8gIILxQzzd+DY7iLaMwpt95YnAxXEEItbGUqt/ujwcpTIZPWp2d
8rJJ2ji1DITEuYj0ZKr3cPy8I2+p24MBqUVELIq/nxd1ZE112BKB+xSrcQ+242VD
JF9w0yFtIWnxYvFmn7YsUC1nixxmOpH5LJJKMp2lzpS+HlfCTNuYhetq43NHeLpg
/CHKtKR7wz+uGrJzbCYzxFtfYElXXx+UvnDBBWNqT5JXLsxgrTNoZxPgx6ojS6Q2
RYxshpT3TeMDBj7ea7+qJpzrJEL09M57nBQPjqla4zMtDjZ8wU2twY+tfthOP9T5
+A6uOebbRRuJo80XqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:20:58 2026 by rpki-client