Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: Bx6LU/sutJEd6pFTHZbdAaxw1OobGtVaTRDxn9cB81Q=
Subject key identifier: DF:93:ED:05:50:A2:98:05:F7:24:38:A8:35:32:50:2F:8D:0E:C0:16
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 01A0C4B313A6FD4B7BD24CC82B8296CCC499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 16:01:05 +0000
Manifest this update: Mon 21 Sep 2026 16:01:05 +0000
Manifest next update: Tue 22 Sep 2026 16:01:05 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: 3UixgTdp4BkP9N7deuKvpaGeUYFAwaKfWzDyhyLF5rk=)
2: OeILc9n1u8YEH2AOBIE0o0dgpEE.roa (hash: /7A8rLMm0YbWTOXfPXut3LLp0Fa9Ut9MxlMvs+Wsm1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b3:13:a6:fd:4b:7b:d2:4c:c8:2b:82:96:cc:c4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Sep 21 16:01:05 2026 GMT
Not After : Sep 22 16:01:05 2026 GMT
Subject: CN=df93ed0550a29805f72438a83532502f8d0ec016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:05:90:15:99:f2:44:12:b4:b7:39:e4:a6:c0:
55:be:6a:d6:e3:e4:82:d4:07:74:57:53:0a:12:a2:
49:18:8e:f7:43:b0:16:ff:cd:bf:5a:a3:05:0f:27:
b4:63:fb:e8:dc:04:0c:4f:e1:76:86:77:d9:13:7f:
72:43:d7:38:66:a5:62:a2:d6:f3:00:05:b4:73:ff:
f6:02:0f:a1:27:d3:b6:58:d6:be:90:fe:27:b5:e7:
76:4e:52:d7:e9:d2:17:5a:f1:53:91:eb:71:0b:2b:
55:f4:63:e4:9d:d4:99:2b:06:12:6c:bc:05:3c:5f:
dc:1e:94:8d:ec:3e:52:b3:70:28:2a:de:94:29:f3:
d0:44:fc:bd:e7:d5:3b:1e:73:a1:75:6a:33:1c:34:
b9:c9:41:22:ad:6e:0a:69:62:6c:09:ba:a0:26:5c:
b2:a1:8a:c0:e2:91:aa:1f:d4:3c:6e:cf:09:6a:b1:
29:16:99:be:9e:e4:5d:03:ea:c1:6b:f0:cd:b0:c3:
55:65:f3:97:ad:52:e0:68:c1:b7:97:db:82:3c:d2:
82:ad:b0:da:a5:da:1b:5d:43:9b:08:a1:66:a5:72:
cd:57:cd:0c:67:c6:95:e5:bf:fb:28:88:d3:23:72:
24:41:e9:54:1f:7f:78:b6:7c:47:eb:d0:7c:a8:10:
76:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:93:ED:05:50:A2:98:05:F7:24:38:A8:35:32:50:2F:8D:0E:C0:16
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:aa:87:5d:59:ee:10:6c:26:69:6e:9e:af:be:13:87:9b:f6:
d4:c3:ee:8d:6f:e8:79:b9:4b:11:cc:5e:e3:55:45:8e:d5:94:
be:32:50:1f:af:e4:dc:f9:4c:4a:87:3f:00:f5:70:1b:b1:f4:
1b:c4:00:85:ef:92:b8:41:63:ee:4f:b3:ec:f1:b8:c4:84:6e:
45:ce:0b:d5:2e:79:9d:e5:8a:be:95:42:85:77:63:9e:46:b2:
ce:90:b6:a1:22:7c:24:64:96:d6:93:68:6e:43:1d:9b:66:85:
25:a0:a9:18:a9:8b:9d:d6:87:5c:d0:b7:59:f3:77:23:c0:c0:
97:1a:4a:b0:06:ea:fd:87:63:50:72:87:74:1c:72:50:61:aa:
e8:89:43:95:73:49:09:c1:f8:b6:ed:0b:86:16:9b:f2:3a:be:
25:f0:85:75:31:c9:0f:90:6e:d0:b4:5c:5e:37:e5:bb:c8:41:
77:a4:e5:17:2f:a6:da:e0:a5:15:73:28:58:75:85:b9:21:98:
6c:e7:dc:7b:6a:17:e4:27:90:6e:a8:72:e3:9c:52:c8:be:14:
12:c5:9b:34:bc:98:62:16:bd:97:5b:a1:af:c9:78:f1:36:8e:
5e:f0:81:8a:3a:87:c2:f4:dc:dd:a5:b9:72:1d:fd:d9:c7:74:
04:dd:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:21:46 2026 by rpki-client