Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: xmdTivsoFJW6E4z9FfXp3SYAqdH2NV+UzNzvkxpYTBA=
Subject key identifier: 58:79:9E:E6:3A:EA:B0:2F:98:F1:94:2A:59:AE:EB:76:F8:EE:97:B9
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 019D3789BF34A48F8FB8CFDBD7448F81FBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0D98
Signing time: Sun 29 Mar 2026 03:01:07 +0000
Manifest this update: Sun 29 Mar 2026 03:01:07 +0000
Manifest next update: Mon 30 Mar 2026 03:01:07 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: Iz59UIHJFN/iTTOIDAqDbbll1jzYeW6M+7su39vMM8s=)
2: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (hash: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:bf:34:a4:8f:8f:b8:cf:db:d7:44:8f:81:fb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Mar 29 03:01:07 2026 GMT
Not After : Mar 30 03:01:07 2026 GMT
Subject: CN=58799ee63aeab02f98f1942a59aeeb76f8ee97b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:a3:a2:f4:15:89:5d:5f:ac:0a:ec:d0:66:
22:56:38:53:ba:d1:30:44:4d:c4:da:d1:25:4e:af:
19:6f:d7:46:19:e2:98:ac:56:55:bf:18:a2:35:50:
50:36:ef:0e:53:76:d6:59:c3:bd:7e:f2:fc:7f:dc:
b5:ba:e9:20:8b:a8:d4:38:ca:79:8e:46:92:f0:56:
10:a5:58:ef:9d:8e:ce:a4:f8:b9:f0:0a:83:15:86:
a9:c8:5a:ce:24:74:25:53:6a:77:b5:01:e6:42:5b:
83:ef:e6:5e:92:c7:da:18:84:30:ab:00:ab:6a:ec:
5c:9c:fc:9a:4e:6a:3d:80:09:25:92:65:ca:04:ab:
50:ab:e2:d7:b2:15:c7:2e:31:45:15:37:5e:6c:12:
cc:e3:cb:f4:88:8d:6b:8c:d3:b3:b9:fd:32:57:bd:
20:7a:ae:90:2c:10:8f:8d:a5:5e:7d:10:10:a2:46:
21:4e:c5:65:56:be:37:1c:71:4d:af:66:d9:a6:11:
39:c7:ef:8c:6e:65:bc:32:0b:fc:05:09:08:72:7a:
a8:1a:26:a8:00:4e:7c:2e:17:31:98:07:f2:ad:a9:
ef:68:8a:d7:29:c3:a5:ea:02:9d:96:ea:75:c0:10:
d6:4b:9f:7b:43:d4:0d:1b:6e:e1:55:c1:52:ff:31:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:79:9E:E6:3A:EA:B0:2F:98:F1:94:2A:59:AE:EB:76:F8:EE:97:B9
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:17:f9:f6:51:20:aa:5d:a3:53:e0:21:02:e3:81:ed:3a:0c:
fa:d7:2a:e2:39:01:94:e6:3b:ea:9a:79:80:8e:64:62:9a:71:
bd:9c:c8:a5:33:ae:42:d5:88:c3:2a:7b:e9:fe:bc:b9:11:89:
f0:06:a9:68:43:b8:25:33:dd:64:69:56:af:52:d7:1d:6e:34:
0b:de:76:b3:ca:c3:32:49:e6:76:99:3b:95:ef:7b:c5:15:15:
58:fe:50:d6:03:47:b8:d1:df:12:04:4f:02:96:43:5e:84:1d:
37:d0:4c:54:77:ca:2a:48:cc:ee:38:4a:e6:5b:13:cd:11:74:
c8:15:e1:5c:0f:f8:e7:86:f0:b3:96:a8:e9:18:33:80:7e:66:
38:be:3b:b9:0d:d3:bb:e2:37:5a:06:46:01:3e:64:7b:b7:ac:
f6:16:0b:79:dc:95:22:c5:56:ab:74:b9:70:57:3a:c7:e6:4f:
74:25:b9:35:96:20:54:59:54:13:c7:0d:7c:36:98:de:85:eb:
c9:6b:8a:a8:d8:01:47:c7:51:c6:a3:41:22:0f:50:41:4c:36:
7d:e4:c3:16:e6:11:f4:e1:68:2b:14:49:55:2c:6b:09:18:22:
22:10:b2:d4:73:9a:43:96:85:7f:e8:12:78:85:1a:89:a4:f6:
b8:33:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:04 2026 by rpki-client