Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: aCcyoATPYEFETi43kcLx3SnbqoLYtFplMuaRVHtnx6c=
Subject key identifier: 46:88:64:04:82:DF:21:CE:0A:67:CA:F2:08:CD:53:A5:CF:C4:B1:4B
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 019EBD3591C1ED17C391944B59DE26639772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 195A
Signing time: Fri 12 Jun 2026 19:01:05 +0000
Manifest this update: Fri 12 Jun 2026 19:01:05 +0000
Manifest next update: Sat 13 Jun 2026 19:01:05 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: XGKBM6knOMl++MIUIZ395SEBV9Rnx8+giie5IrFwKoQ=)
2: OeILc9n1u8YEH2AOBIE0o0dgpEE.roa (hash: /7A8rLMm0YbWTOXfPXut3LLp0Fa9Ut9MxlMvs+Wsm1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:35:91:c1:ed:17:c3:91:94:4b:59:de:26:63:97:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Jun 12 19:01:05 2026 GMT
Not After : Jun 13 19:01:05 2026 GMT
Subject: CN=4688640482df21ce0a67caf208cd53a5cfc4b14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:b4:5e:1e:0a:c5:7a:f4:4f:f0:2d:65:fd:
ca:4e:5e:15:cb:c3:ea:bd:31:38:c6:fd:4d:ba:fe:
2b:57:e5:f5:e7:f4:4a:4d:8e:58:22:a8:b4:9c:21:
b8:d7:aa:f0:93:95:9a:44:f2:1d:08:74:ad:e0:bf:
a8:bb:1c:78:7a:c7:96:82:36:bc:cb:ce:97:6f:d1:
db:ff:51:c9:dd:21:c3:f5:19:25:dc:eb:f9:4e:0f:
6e:e0:32:56:75:7c:e2:47:41:70:c2:6b:32:a4:f4:
89:f1:d7:8e:33:6b:69:73:b1:ba:3d:0d:99:88:c3:
14:4f:4b:49:61:25:64:1a:17:61:4c:66:10:a7:61:
e2:f9:91:9f:5a:1d:8e:ed:49:e3:25:7c:51:6f:b7:
81:21:51:ce:46:a0:c7:15:15:f3:9e:f7:84:0f:87:
55:86:b9:40:10:66:79:f1:38:77:ca:2b:18:c8:f2:
bf:09:13:a9:0f:ca:0a:d5:51:70:14:f8:17:45:d4:
1d:6e:6d:54:1f:c6:9e:cf:95:b7:9e:4e:1e:67:b1:
90:fd:d2:59:ed:83:03:45:2c:b7:19:a5:1c:03:32:
76:7a:50:57:01:cf:21:35:97:1b:d2:99:3c:08:dd:
70:8b:61:45:47:bd:d4:2f:39:2c:bd:d4:ab:f0:79:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:88:64:04:82:DF:21:CE:0A:67:CA:F2:08:CD:53:A5:CF:C4:B1:4B
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:98:75:03:ff:6a:40:a3:bf:69:3a:62:01:13:4d:db:c3:7a:
a3:a5:d4:7a:96:d5:af:d5:f7:fa:b3:e5:23:1c:f7:1e:6a:d9:
1d:2d:d9:07:b1:c5:76:03:61:94:16:0e:cc:7c:2b:f7:9a:a3:
a5:ef:07:10:73:76:c0:b1:1f:87:21:59:b7:24:4a:d3:d0:b3:
1e:29:2a:ea:a1:3c:6e:a6:22:3e:54:3f:2b:c8:61:3b:52:ed:
2f:af:2c:88:82:fc:fa:3e:fa:99:e5:03:08:ce:34:b3:e9:f0:
e7:9e:6b:ce:ad:c6:0b:77:57:c5:4a:f5:7d:85:f5:95:64:ab:
3c:ae:b6:c9:c9:f3:d3:66:c1:1b:ed:ab:1b:7b:b1:84:af:9a:
65:ac:c8:0b:2b:9a:95:31:53:1b:cc:51:a4:f5:b6:e2:1e:8a:
1b:fd:81:4d:23:92:06:fc:b8:8b:2d:9e:2a:e9:f1:49:a5:5d:
71:e0:99:97:b9:9c:aa:cf:9f:38:aa:12:b2:7a:f1:c1:96:7d:
a2:47:17:0d:61:7b:73:09:da:db:a2:66:1a:2b:ec:76:46:c6:
15:4a:aa:4a:3f:ad:d5:38:db:31:a8:b8:19:c8:ee:cd:46:22:
6f:cf:96:9b:36:54:4d:8a:fe:80:9c:44:59:a8:f9:60:cc:2f:
fb:96:c8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:53 2026 by rpki-client