Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: gpHJwC1ujPk8TisP1uDXLjKABPT4nVUo4bY+GnNz2Ms=
Subject key identifier: BF:D2:93:4C:28:A2:90:DA:B8:1E:F2:34:56:0D:6E:5C:68:8E:70:73
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 019FA93DE4DC540A609EF2CFBADB49C191C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0EDC
Signing time: Tue 28 Jul 2026 15:00:33 +0000
Manifest this update: Tue 28 Jul 2026 15:00:33 +0000
Manifest next update: Wed 29 Jul 2026 15:00:33 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: jhG5plxddlZRBX92OuSjVZXiD557ondO2C/0lRENhW0=)
2: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (hash: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:e4:dc:54:0a:60:9e:f2:cf:ba:db:49:c1:91:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Jul 28 15:00:33 2026 GMT
Not After : Jul 29 15:00:33 2026 GMT
Subject: CN=bfd2934c28a290dab81ef234560d6e5c688e7073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:ed:0b:db:03:6d:e5:95:ab:93:89:f0:84:
fd:ff:97:63:4a:5d:dd:80:a0:79:e2:eb:19:e7:2d:
99:5b:cc:f2:1c:4e:20:35:bb:a1:aa:af:ec:23:ee:
78:7d:13:ac:6a:c0:01:9c:8c:b1:53:ef:9e:e4:35:
84:a1:02:3f:ba:74:43:3c:f7:fb:e3:b5:bf:47:f6:
ad:ee:91:56:16:c9:34:2d:f3:22:e7:2a:b8:ab:3b:
82:aa:f9:19:52:6b:fa:93:20:a9:2b:6c:e5:f7:c0:
57:3e:11:f7:be:6f:0e:46:27:59:93:bc:60:97:af:
ed:ac:7c:a3:1d:cb:40:09:e0:e0:dc:dc:1b:82:0a:
ea:97:88:67:e5:a7:d9:22:2a:65:89:6d:0f:49:e4:
d6:ea:f1:8b:2e:37:68:dc:fc:8a:8a:fb:97:95:7b:
52:67:b5:bd:fc:58:f2:ba:76:46:f6:5c:a3:5c:52:
ce:fd:65:a7:c1:21:12:ef:c6:80:c0:9e:a7:62:b1:
74:87:53:9d:8a:1a:3c:a5:d6:65:6d:31:9f:66:9b:
82:d8:21:b6:74:3a:8f:be:fc:a0:84:8f:bb:dd:7f:
8b:0d:b2:3e:90:0c:74:d5:fb:f2:2f:93:00:bd:79:
57:8a:3d:55:2e:d1:ca:aa:be:e3:d6:2f:68:6d:f5:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D2:93:4C:28:A2:90:DA:B8:1E:F2:34:56:0D:6E:5C:68:8E:70:73
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b8:96:2e:63:4e:a6:1b:3d:52:74:30:97:64:ee:00:94:83:
9c:11:5d:2c:e8:bf:01:78:de:fa:95:34:28:6f:a1:2e:dd:c1:
05:91:01:72:01:ff:ba:4f:88:97:98:1c:a7:d3:2e:d3:91:58:
ae:2e:7b:11:9f:6f:9f:c5:53:7b:69:6c:a1:25:46:ff:20:fd:
9e:d0:16:6d:b7:a3:1c:92:2c:ab:62:dd:b3:7f:95:39:87:d6:
87:1f:16:83:98:6e:4f:d4:4e:95:ed:8e:f0:30:72:6c:15:3b:
47:57:be:24:30:7d:89:57:26:7a:01:b8:e0:ba:96:e2:43:dd:
be:c4:8f:73:8f:f0:d3:63:07:32:ea:5b:e3:81:40:2d:5d:aa:
1d:7e:83:69:b8:17:ff:7b:55:29:4e:af:67:ee:d2:66:b8:f6:
47:2a:9c:a7:2e:62:47:ce:5d:8a:78:ae:5d:7b:df:ce:b5:e5:
9a:b1:b3:59:19:82:21:ce:16:46:14:b8:27:4b:38:2e:13:4e:
60:92:83:90:60:e7:e3:b6:ba:4a:8e:59:d0:d5:3d:73:e6:76:
d3:78:3c:c2:68:0d:7c:27:7f:9d:3f:64:bf:7b:81:d3:a4:a9:
5b:89:d2:12:c4:68:55:48:7f:cf:8b:75:c1:a5:ea:bd:d3:25:
92:ef:b9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:05:48 2026 by rpki-client