Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: bzNR2apLpVnHES3JTvufcA4fE4yUgkKyf6APHkbtztA=
Subject key identifier: 7E:27:79:4A:88:A8:8E:9F:C2:D8:34:70:E2:93:0A:AD:89:4D:96:FA
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 019F1867E163137E9A9A490F0FCBF2B9698C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0E91
Signing time: Tue 30 Jun 2026 12:01:28 +0000
Manifest this update: Tue 30 Jun 2026 12:01:28 +0000
Manifest next update: Wed 01 Jul 2026 12:01:28 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: hO2kTeAR6OW2Inp8izZ8LhdnpexsbEoXbEK83LA9RVM=)
2: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (hash: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:e1:63:13:7e:9a:9a:49:0f:0f:cb:f2:b9:69:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Jun 30 12:01:28 2026 GMT
Not After : Jul 1 12:01:28 2026 GMT
Subject: CN=7e27794a88a88e9fc2d83470e2930aad894d96fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:e6:d8:be:d4:a9:15:14:1e:2d:50:46:b1:
03:c5:43:c0:74:6d:9d:bf:86:32:59:87:b1:3d:8a:
1f:86:1f:ac:52:8f:d1:b6:44:b8:1c:a1:5e:7f:9e:
83:8e:06:4f:ac:29:3c:ad:48:1d:b5:a1:dd:9e:1b:
20:1d:e2:12:84:28:ec:e8:c3:ad:ca:2d:5a:94:64:
02:0c:60:fe:23:85:ec:91:55:69:20:d0:b1:15:05:
d8:5d:b0:5d:92:fe:8f:5c:6c:4e:ff:8f:eb:a0:a4:
06:bb:a4:b4:75:a7:2c:27:46:ac:40:96:e8:ee:e9:
34:f9:4a:df:6e:fb:82:eb:89:67:d9:58:54:df:e8:
8d:9d:a9:f5:80:2d:7a:fd:c3:38:89:58:01:3d:d7:
02:db:85:f1:6b:13:b4:ef:4e:4a:f2:1d:53:18:f0:
bc:d2:df:bc:79:9b:a7:cf:60:33:08:4d:63:50:fe:
a7:64:b6:42:24:e6:9a:67:ba:ce:77:b8:d1:31:8c:
3e:d1:c3:5f:da:f7:22:ab:0f:a8:0c:4d:a7:b7:1c:
84:62:8a:65:96:eb:7d:71:dd:79:51:ab:54:08:0d:
c1:d8:56:89:aa:85:f2:d9:8f:f1:5d:76:ed:7f:39:
0f:9f:96:b0:07:18:fd:ee:3d:15:75:0c:7a:ca:88:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:27:79:4A:88:A8:8E:9F:C2:D8:34:70:E2:93:0A:AD:89:4D:96:FA
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:51:25:44:39:6e:85:35:f7:b1:d7:d9:80:c2:3f:c1:70:5c:
98:35:69:b5:fe:55:ad:ba:bd:e0:c3:0d:f7:96:5e:02:d6:6b:
87:ef:c6:43:93:fe:bd:ac:43:93:04:ad:81:33:7d:20:6b:cd:
4f:dd:54:c3:a9:a5:35:15:50:b0:d0:ec:07:57:b5:a5:48:a8:
ee:29:d2:74:89:2e:11:54:58:e5:e8:14:98:6c:e8:b9:84:73:
51:dc:30:f7:af:9b:79:7d:c8:1a:0a:4e:60:07:ee:90:64:63:
03:45:16:ee:a4:93:a0:8f:48:e0:64:28:50:0f:cf:65:5f:07:
7f:3c:c3:71:f6:7d:78:5f:4c:ea:e6:f4:c5:7f:81:b0:4d:94:
87:36:22:78:21:68:73:1f:97:c9:78:8b:0f:a6:89:4d:ea:3c:
64:4e:5b:58:19:72:48:05:84:4c:05:a6:1a:a9:5e:df:10:6a:
31:fe:ef:35:3d:02:67:1a:eb:fd:55:35:44:d3:af:cf:e3:c9:
94:d3:64:a6:a8:bd:70:86:29:3f:77:32:fe:20:19:dd:e0:9b:
93:53:5d:6e:39:a3:a9:59:e0:4c:b1:78:fc:7b:bd:08:b6:ad:
ec:cc:b8:06:54:d8:5a:7c:37:a4:3d:8f:48:7a:0f:b4:2f:e2:
40:f5:ec:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:43 2026 by rpki-client