Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: Y0jHf6qRbo7HbfDZGI3KNrCvoWIVp+A98OA5IUmfy2c=
Subject key identifier: 87:17:8F:97:F5:9B:02:D7:6F:21:45:F8:DD:5D:C4:0B:0A:8A:0F:6A
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 019D97AB252E18AD5629B29442BC3D28E4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 19:01:08 +0000
Manifest this update: Thu 16 Apr 2026 19:01:08 +0000
Manifest next update: Fri 17 Apr 2026 19:01:08 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: wkDwiib1xQU2E1pFMuN1Pi8B+VUM/HwNquiSwB8hUNM=)
2: OeILc9n1u8YEH2AOBIE0o0dgpEE.roa (hash: /7A8rLMm0YbWTOXfPXut3LLp0Fa9Ut9MxlMvs+Wsm1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:25:2e:18:ad:56:29:b2:94:42:bc:3d:28:e4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Apr 16 19:01:08 2026 GMT
Not After : Apr 17 19:01:08 2026 GMT
Subject: CN=87178f97f59b02d76f2145f8dd5dc40b0a8a0f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:54:b7:4e:b2:1f:db:8d:61:08:95:10:60:
26:f5:9f:0f:a5:2e:43:8b:df:26:9f:54:18:19:97:
47:5c:bd:b2:36:04:03:a1:3b:b3:a9:de:a4:b4:c6:
74:48:90:48:f0:f2:ef:02:a3:5c:86:42:d0:89:c3:
1e:93:ae:33:44:d4:17:46:1e:e4:71:27:e7:85:7e:
b5:cc:e7:c9:a5:fe:ed:e5:52:94:94:bf:d1:df:84:
9c:49:70:6e:df:75:8f:3b:08:85:3c:04:b8:b8:fe:
be:19:8c:1f:7d:ee:85:1e:d1:f1:a4:25:8a:ee:9c:
d6:31:98:9b:5f:11:be:79:9a:67:dd:18:ef:5e:66:
b2:26:ff:6c:54:67:43:95:84:04:bb:65:5e:0b:eb:
0b:e4:cd:38:8d:03:de:17:b3:ed:01:60:9e:a1:7d:
7e:33:d7:6f:5f:63:bc:af:9d:a2:f1:eb:1e:d1:61:
fc:ad:64:00:1f:47:70:9f:40:a7:da:65:33:df:51:
c7:f0:12:c9:dd:65:09:bd:09:8a:bb:40:6c:3b:1a:
0d:1b:97:f0:95:88:fe:32:1a:52:4e:2b:9b:03:44:
53:54:05:43:c0:be:66:90:06:a9:80:85:52:7f:b4:
4d:82:fc:d1:a0:75:c8:f7:b4:13:df:19:9d:7a:78:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:17:8F:97:F5:9B:02:D7:6F:21:45:F8:DD:5D:C4:0B:0A:8A:0F:6A
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b5:36:9e:75:eb:ff:b2:35:56:47:36:a3:d9:48:7b:b2:3d:
42:e7:9c:6a:f5:75:12:f0:e1:73:71:a4:aa:1e:6e:3c:29:ad:
37:54:bb:75:ee:f5:cc:00:ff:26:f3:49:f0:d2:c7:b5:ff:71:
f5:bf:72:9d:0f:88:0c:5a:d0:c6:0b:72:cf:aa:cc:32:5c:89:
8a:a2:45:37:ca:a0:5b:09:f4:2e:b2:09:40:93:fa:cb:75:64:
29:4a:c2:c1:03:a7:1a:1f:85:37:7f:9b:91:ef:9c:1d:f5:e7:
db:99:1a:59:6a:8e:ad:d4:2c:64:e9:b4:90:a3:92:75:86:a9:
00:dc:02:4d:76:d5:e4:db:30:80:22:f8:9c:c4:30:25:a3:53:
a4:2e:29:d1:db:23:f7:7a:ea:b2:bc:1c:43:b8:6c:43:4f:ac:
e2:cf:fa:58:6b:fd:f2:35:1c:56:ae:bc:f1:30:ce:0c:fa:04:
3b:aa:5f:2a:d3:5f:3b:3c:d4:2b:4e:17:34:74:cc:65:80:c9:
61:7d:fb:36:3c:6d:59:e5:63:5f:5f:19:8e:d1:99:91:0e:9f:
09:69:2a:8f:7c:e7:40:1c:fb:b8:4a:8c:53:db:42:bf:e8:b0:
06:9c:40:ba:02:06:77:74:fb:8f:89:33:fb:f9:6a:3d:5a:e6:
74:fd:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:09 2026 by rpki-client