Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: o3VrBGGdJ8zpAWvpTcSXFBOe6lwlpehnqyE3Bw3yBXM=
Subject key identifier: 7A:F1:B9:C9:C2:64:0B:72:7C:93:B4:79:10:21:9B:C2:93:56:88:18
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 019CAA8F98650F8F286C6D5ECAD22B3F42AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0D4F
Signing time: Sun 01 Mar 2026 18:01:03 +0000
Manifest this update: Sun 01 Mar 2026 18:01:03 +0000
Manifest next update: Mon 02 Mar 2026 18:01:03 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: 8IBwvKKvb4teMlhpDkPYwCDm4BoSX9SFR30u0/r9IQY=)
2: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (hash: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:98:65:0f:8f:28:6c:6d:5e:ca:d2:2b:3f:42:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Mar 1 18:01:03 2026 GMT
Not After : Mar 2 18:01:03 2026 GMT
Subject: CN=7af1b9c9c2640b727c93b47910219bc293568818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8e:77:b4:d4:29:5b:5a:be:6a:1f:ad:0c:8f:
cf:aa:a2:63:38:4d:6d:c9:c3:16:a0:95:7c:36:d8:
3c:2d:bb:1e:e8:32:32:be:02:cc:2b:8d:3c:63:ac:
3e:39:f6:a0:09:2c:51:eb:ae:72:f6:8c:62:db:6e:
a3:4a:c0:d4:e8:61:d7:7c:3e:dc:dc:fd:22:ea:cb:
46:dd:22:60:5a:0b:f6:c2:50:7c:cf:7f:15:cf:3d:
ab:06:46:dc:c1:f2:77:aa:29:55:fe:c1:e1:95:bd:
a1:af:73:2f:fc:3f:66:08:8b:ee:bc:8a:72:df:16:
03:dd:3f:75:07:a2:38:6c:13:1f:60:ef:55:49:e2:
c7:86:50:09:e7:0d:50:4a:36:34:26:a1:88:5b:d6:
3c:9a:01:b9:46:b4:fd:27:0f:18:6b:2a:cd:e0:6f:
b2:b8:f6:eb:d5:1f:e2:a5:09:ab:f9:b0:3c:c5:e7:
35:e3:b9:e4:2b:ef:f6:61:95:22:43:e5:e8:d2:af:
92:51:81:c4:f0:dd:85:e3:5b:74:99:b1:3d:66:5b:
49:13:50:79:5d:f7:8a:c7:a9:c9:b5:e6:e3:56:89:
ee:d4:a2:5b:72:04:38:cc:2b:ed:f3:68:df:f0:10:
f4:55:e7:3b:1e:c8:48:dc:8e:43:85:74:84:1f:90:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F1:B9:C9:C2:64:0B:72:7C:93:B4:79:10:21:9B:C2:93:56:88:18
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:68:da:9d:97:09:27:f9:c4:c8:d1:cf:34:4f:83:7b:55:db:
7a:1a:42:6e:26:a0:22:f0:76:66:e5:db:c5:cd:00:9f:d8:16:
50:f9:04:ef:af:08:1e:61:06:59:b1:8a:90:75:35:16:ce:e5:
ca:17:71:70:cd:68:44:dd:3d:7c:a5:8d:ed:10:de:90:4d:ce:
dc:f6:49:cc:49:32:00:05:eb:0b:8d:4d:d5:a9:67:5c:b1:d6:
95:d8:ae:33:b4:2d:81:2e:b1:fc:eb:0b:0b:34:a7:0f:18:dc:
be:15:35:93:a9:89:d4:5c:08:53:98:73:e0:32:fd:98:24:c5:
8f:fb:f3:ac:53:1a:dc:5d:05:06:cc:dc:88:97:76:ed:61:20:
5a:fd:75:5e:53:b7:8a:ae:8c:10:12:65:30:f7:0e:9e:95:c0:
a0:b2:c9:ee:c9:d5:2e:03:17:c2:4b:d4:ee:26:d7:0f:b7:f0:
49:04:c3:6a:9d:40:4d:83:16:3c:de:71:a3:d6:e7:99:bd:fd:
46:b2:4b:c5:27:92:04:0d:36:5e:6d:45:bc:7b:d3:6c:ff:c8:
bc:2c:6d:0f:1e:17:8a:4c:91:c6:24:80:e6:8b:fd:a6:fa:b8:
f6:03:12:c1:cb:11:63:9a:b0:36:5a:7d:cb:63:20:23:51:5f:
b9:73:40:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:54 2026 by rpki-client