Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: gXd++ZYdcDKO0jGPqpr0wR92kO4uikfP7FWMgQyoUhM=
Subject key identifier: 30:42:47:19:50:FF:35:BD:B6:32:D0:E8:66:93:26:67:51:DB:66:E5
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 019E30A9ACA852580425ACC90B0CF0935C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0E19
Signing time: Sat 16 May 2026 12:01:26 +0000
Manifest this update: Sat 16 May 2026 12:01:26 +0000
Manifest next update: Sun 17 May 2026 12:01:26 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: S/Hq9FVI7K4+omKmT6XU28+0Xky0Hp05y6I4WGVsLO0=)
2: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (hash: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:ac:a8:52:58:04:25:ac:c9:0b:0c:f0:93:5c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: May 16 12:01:26 2026 GMT
Not After : May 17 12:01:26 2026 GMT
Subject: CN=3042471950ff35bdb632d0e86693266751db66e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:5a:fc:3b:6b:03:96:b6:eb:ff:35:67:7b:
60:a7:b3:b1:e0:e7:b5:66:93:c5:1a:4b:24:f3:81:
6c:b3:a6:25:85:ec:1d:b6:68:c6:29:9a:9d:09:d2:
be:9b:c1:01:ff:5b:b4:e7:18:de:3b:65:e6:9a:ec:
dc:4b:42:6e:56:81:69:15:01:09:3b:0f:66:94:bc:
91:14:e1:94:11:51:9d:d9:3d:2c:06:78:97:a9:2e:
95:24:3f:95:e3:9f:92:81:5a:3a:ed:ee:0d:ef:d1:
45:74:67:39:61:43:35:82:49:ad:b6:09:21:ae:a5:
a0:b1:f5:09:04:75:44:5b:17:f5:53:e0:a7:3a:e8:
83:d2:81:b7:a2:ce:e0:3a:54:f1:b5:72:13:65:7b:
45:b2:eb:fc:2e:f3:e0:e2:47:1b:76:51:1a:49:f0:
57:51:f0:92:ec:a4:e5:90:c1:c8:42:fd:88:24:32:
2f:43:59:9b:0a:69:49:f2:18:52:a0:3b:10:ec:c5:
21:f9:bc:83:4e:4e:3f:c3:0b:cc:f1:2a:e7:c2:a0:
6a:e0:fd:24:ad:dc:57:a1:cd:54:37:4d:a8:f9:0f:
64:62:d3:11:5c:93:b4:39:43:11:5d:f9:4c:fd:dd:
c5:15:e0:c4:54:b9:ac:41:ac:84:b9:66:b3:4b:2f:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:42:47:19:50:FF:35:BD:B6:32:D0:E8:66:93:26:67:51:DB:66:E5
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c1:09:1e:ea:4c:e6:3c:14:ee:7d:61:84:03:72:3a:41:88:
40:6e:f3:13:9d:99:a4:64:d3:9b:02:c9:fb:ef:80:b3:b5:8e:
76:59:aa:13:b3:48:c4:c5:89:e4:3a:99:b9:d2:19:94:c8:67:
b5:38:cf:92:b0:39:65:25:39:c8:ef:db:60:b1:11:50:94:81:
b2:f9:df:e2:f4:95:7a:2b:c3:f2:8d:c9:1d:bb:d6:d8:94:38:
aa:55:a7:38:b3:ae:f1:d9:33:af:05:7b:34:ca:cd:bc:54:73:
5d:0d:76:6b:ce:a7:66:48:ac:b9:bf:f0:fa:83:39:55:e5:70:
57:99:78:c6:0b:34:7b:ad:f5:f7:31:02:8b:98:a0:6b:86:e2:
18:f4:a9:b6:45:ea:7d:f9:27:42:1a:a8:e3:e9:7e:8b:66:49:
b9:0c:f7:97:02:b1:6e:e1:e7:9c:da:11:d0:58:ba:31:8c:ec:
74:a7:08:58:74:dd:dd:39:89:bf:e3:e1:ac:51:23:e6:cc:0d:
c3:65:d6:7f:f2:76:29:75:f8:20:26:31:9c:ae:6b:40:03:f3:
87:71:8c:20:e7:8f:d7:17:42:c1:92:31:5c:52:31:d7:12:e5:
67:f9:ef:19:14:b4:27:4b:b2:d4:65:46:58:b3:35:fb:b1:87:
2f:d6:05:32
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4wqayoUlgEJazJCwzwk1x2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzA4Nzc5ODViMGM1Y2Y2OTE2N2M5MWU4Mzc0MjRjNDdk
OWE0MjUwHhcNMjYwNTE2MTIwMTI2WhcNMjYwNTE3MTIwMTI2WjAzMTEwLwYDVQQD
EygzMDQyNDcxOTUwZmYzNWJkYjYzMmQwZTg2NjkzMjY2NzUxZGI2NmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmda/DtrA5a26/81Z3tgp7Ox4Oe1
ZpPFGksk84Fss6YlhewdtmjGKZqdCdK+m8EB/1u05xjeO2XmmuzcS0JuVoFpFQEJ
Ow9mlLyRFOGUEVGd2T0sBniXqS6VJD+V45+SgVo67e4N79FFdGc5YUM1gkmttgkh
rqWgsfUJBHVEWxf1U+CnOuiD0oG3os7gOlTxtXITZXtFsuv8LvPg4kcbdlEaSfBX
UfCS7KTlkMHIQv2IJDIvQ1mbCmlJ8hhSoDsQ7MUh+byDTk4/wwvM8SrnwqBq4P0k
rdxXoc1UN02o+Q9kYtMRXJO0OUMRXflM/d3FFeDEVLmsQayEuWazSy96qwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDBCRxlQ/zW9tjLQ6GaTJmdR22blMB8GA1UdIwQY
MBaAFPlwh3mFsMXPaRZ8keg3QkxH2aQlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YQ0hlWVd3eGM5cEZueVI2RGRDVEVmWnBDVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvZDlkYjk4LTQwMTAtNDMyOC04NDQ1
LWVlY2ZlN2ZjZjFjMC8xLzEtWENIZVlXd3hjOXBGbnlSNkRkQ1RFZlpwQ1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y0L2Q5ZGI5OC00MDEwLTQzMjgtODQ0NS1lZWNmZTdmY2Yx
YzAvMS8xLVhDSGVZV3d4YzlwRm55UjZEZENURWZacENVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMEJ
HupM5jwU7n1hhANyOkGIQG7zE52ZpGTTmwLJ+++As7WOdlmqE7NIxMWJ5DqZudIZ
lMhntTjPkrA5ZSU5yO/bYLERUJSBsvnf4vSVeivD8o3JHbvW2JQ4qlWnOLOu8dkz
rwV7NMrNvFRzXQ12a86nZkisub/w+oM5VeVwV5l4xgs0e6319zECi5iga4biGPSp
tkXqffknQhqo4+l+i2ZJuQz3lwKxbuHnnNoR0Fi6MYzsdKcIWHTd3TmJv+PhrFEj
5swNw2XWf/J2KXX4ICYxnK5rQAPzh3GMIOeP1xdCwZIxXFIx1xLlZ/nvGRS0J0uy
1GVGWLM1+7GHL9YFMg==
-----END CERTIFICATE-----
Generated at Sat May 16 15:37:40 2026 by rpki-client