Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: rHcQ2whxg6GCL91avQKS3scenWLZCwKuLvEFzQG2z4U=
Subject key identifier: 77:47:28:EF:82:42:EB:F7:26:A9:E0:3E:7D:BA:24:AE:4E:1C:76:77
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 01A0002560994BE4307E5E91737DCF5F68A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0F09
Signing time: Fri 14 Aug 2026 12:00:44 +0000
Manifest this update: Fri 14 Aug 2026 12:00:44 +0000
Manifest next update: Sat 15 Aug 2026 12:00:44 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: jNnWFbyug7DV/zvSVy/Z28JMDRznTJB8JCrt7ZA0RYA=)
2: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (hash: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:60:99:4b:e4:30:7e:5e:91:73:7d:cf:5f:68:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Aug 14 12:00:44 2026 GMT
Not After : Aug 15 12:00:44 2026 GMT
Subject: CN=774728ef8242ebf726a9e03e7dba24ae4e1c7677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:7a:77:90:f0:28:13:2b:e9:eb:74:28:49:
5b:40:f3:eb:13:58:fc:ee:86:d3:ec:90:55:3d:c0:
e9:43:3a:c2:ae:92:4f:90:96:3c:8c:89:da:74:e1:
01:74:14:db:80:36:20:0c:27:bb:62:21:89:02:0f:
89:d3:01:42:f0:53:ad:b1:ee:50:45:b7:c6:bb:5b:
74:a2:3d:d4:37:b4:c7:87:6f:0e:f2:9a:51:eb:00:
f0:ec:1a:0b:f6:c8:47:65:85:85:f6:16:91:7f:2b:
56:9d:07:f9:5d:c3:76:c3:5c:e9:9b:4e:26:f2:5c:
55:48:e3:30:af:c0:cb:15:e7:a0:fc:35:a4:ab:9b:
a0:bb:db:d8:e2:da:2c:74:4f:02:f0:4b:11:54:0c:
5d:d5:4e:95:ab:39:ca:fc:e9:a8:97:ec:e5:91:78:
7d:cc:47:e1:cc:00:37:aa:26:da:b7:a5:de:87:60:
9f:01:87:9f:61:f0:5f:38:8b:f6:9d:f4:b0:01:8a:
52:39:9a:8b:fd:cc:20:4a:d1:49:cb:c5:53:05:0f:
97:51:d1:39:57:0c:f2:ca:aa:0a:dd:fc:83:44:fd:
33:4f:8b:54:eb:a0:69:d8:a0:70:a0:57:b2:8f:87:
ca:ac:66:76:54:fe:82:27:34:63:4a:10:c2:d1:60:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:47:28:EF:82:42:EB:F7:26:A9:E0:3E:7D:BA:24:AE:4E:1C:76:77
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:94:86:4e:bb:91:78:40:b0:15:fc:11:c6:8c:fb:cf:69:c0:
bb:aa:cf:75:23:fe:0a:f5:a8:33:13:98:72:cf:74:b4:17:91:
c6:ee:e3:6d:b1:c6:4c:db:74:f5:ea:df:c3:0c:8a:1e:fc:58:
03:b3:7e:c7:10:46:75:62:fb:eb:48:0b:09:1c:81:63:f8:cd:
7f:4d:b7:61:e7:0b:fa:4c:f1:b6:3f:d8:a3:4c:63:24:20:9d:
40:e6:e3:2b:e5:39:03:3c:c1:2b:08:92:f2:51:bf:d5:8b:47:
ca:c1:e6:c1:ad:e3:14:29:16:c7:0b:4c:ab:e5:87:d8:84:9b:
d3:26:68:c4:f8:d1:f5:c7:30:ba:18:52:4e:c0:87:50:b8:75:
0f:70:fa:6e:2a:8d:a5:02:17:d5:7d:8d:81:11:05:ce:f1:d3:
50:ed:1d:fc:f4:09:7e:22:76:76:19:90:43:cf:c5:ea:06:a9:
56:85:6e:04:13:e3:62:dc:e7:2b:1b:7e:02:2e:2b:98:5f:4c:
a1:2f:27:aa:84:d3:cc:a0:ac:28:5f:0f:39:98:e0:4f:d3:95:
bb:7f:cb:f0:57:dd:5f:b4:d6:5e:2e:84:e5:ee:f6:f2:d0:26:
14:f9:17:f9:ad:77:e4:08:cb:6c:39:53:7e:2b:76:3f:7a:f7:
21:a0:03:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:12 2026 by rpki-client