Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: K7KC2cViG65/dV34pWxcDAGt29j+Wi5EHSSFtkZ95kE=
Subject key identifier: F2:90:3C:25:83:59:C0:54:70:5F:5A:E7:7E:FC:AB:AC:52:18:9A:21
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 01A0C70E72F75F66D3825296A943E714F600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0F70
Signing time: Tue 22 Sep 2026 03:00:07 +0000
Manifest this update: Tue 22 Sep 2026 03:00:07 +0000
Manifest next update: Wed 23 Sep 2026 03:00:07 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: FqKK4q3kayMxH0jqnqtfnGwd/zDqCcbk9r0yr/05ysw=)
2: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (hash: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:72:f7:5f:66:d3:82:52:96:a9:43:e7:14:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Sep 22 03:00:07 2026 GMT
Not After : Sep 23 03:00:07 2026 GMT
Subject: CN=f2903c258359c054705f5ae77efcabac52189a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:48:33:db:b1:6a:53:66:0a:33:c9:38:19:
d5:d8:72:7a:86:31:7b:e4:0d:05:bf:51:9d:98:5c:
24:9b:29:50:9f:74:07:c0:af:e9:f6:15:32:e1:21:
b0:5f:a9:90:12:af:94:cb:16:bd:ee:bf:3d:7c:d5:
b1:7e:2d:aa:ce:7d:5a:64:92:bf:37:ce:c8:b1:d4:
aa:d8:2c:d9:16:30:3f:55:59:9e:d6:7a:52:da:44:
bf:e1:e4:8e:0f:7b:82:f4:93:1d:47:c7:5c:28:71:
42:5b:a1:f3:8c:16:9b:6b:1e:4f:7f:1a:ca:cd:b4:
80:1e:21:dc:54:d0:57:46:7e:08:84:55:0f:13:22:
da:7c:da:18:c5:68:6f:b9:00:37:fe:a0:d6:50:75:
03:91:3c:13:26:ca:d4:97:ff:b9:90:db:04:ec:da:
50:60:b1:be:6d:05:fb:79:19:a1:c5:8e:f7:92:4a:
5f:4a:e1:27:1c:64:7b:a4:a7:85:76:77:dd:af:08:
1b:08:9a:58:7a:ba:bc:05:5f:97:67:fa:ca:78:4c:
2d:48:54:08:35:9f:94:f4:95:a4:db:87:01:11:18:
30:59:ca:7b:7c:12:7a:98:c4:30:b1:4d:53:51:f4:
61:c3:fa:7f:77:67:6c:ce:0f:9a:32:c2:57:d8:f8:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:90:3C:25:83:59:C0:54:70:5F:5A:E7:7E:FC:AB:AC:52:18:9A:21
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7b:cc:26:de:8d:18:2d:72:d7:25:ac:79:b3:fe:26:3c:f6:
7f:12:9b:9e:41:17:e4:8c:a7:6c:ba:3c:8e:a7:48:d0:1e:b9:
1e:7a:24:70:9c:cc:b8:c8:0d:65:e9:4e:85:86:21:61:b4:4c:
c5:c8:f3:93:be:1a:4e:fb:df:e5:9a:4e:21:30:a7:56:51:1f:
40:f4:8c:2e:eb:24:cb:ef:b6:3a:16:77:08:6d:98:c8:c7:27:
f5:ab:65:90:e4:39:f5:a1:79:6d:2a:c5:e0:b6:49:e5:23:08:
16:de:0e:48:ce:fc:58:08:d4:f4:71:05:0d:3e:54:cf:8d:3f:
47:f4:02:83:8d:c9:24:9a:e4:52:8a:6d:0a:2f:6e:67:da:75:
b5:4c:8b:82:ea:48:fa:21:65:bd:e9:cd:1f:ef:dd:80:d2:ac:
81:9c:63:38:a9:55:c1:7b:34:c0:f6:02:bd:42:0a:63:19:e3:
7d:70:a1:97:0f:ce:8e:82:5a:18:27:49:11:da:3c:0b:4e:57:
a5:2c:5a:66:6d:25:38:e1:33:11:df:d6:5c:79:04:f1:bb:d4:
34:5a:9d:0d:93:b5:f4:10:65:98:2b:4a:f4:06:72:3e:7f:65:
6c:6c:e6:c3:6a:66:a9:d6:cf:e8:3c:26:1f:c3:35:23:57:ee:
e1:64:20:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:43:31 2026 by rpki-client