Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: dicYyVooZQILlwX8VQ+x37c5W8GOZZWMI5yaZrkLeGg=
Subject key identifier: 0F:F1:47:5E:07:1B:10:02:3C:CE:A3:9B:F4:FD:46:48:E7:83:A2:C0
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 01A13ECB9636B7AFDCC422CF2C1341EC0BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0FAE
Signing time: Thu 15 Oct 2026 09:01:31 +0000
Manifest this update: Thu 15 Oct 2026 09:01:31 +0000
Manifest next update: Fri 16 Oct 2026 09:01:31 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: taS4EhL93gSaYHmzsdTawJUBZuL+QWaHKSqWX9v05wE=)
2: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (hash: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:96:36:b7:af:dc:c4:22:cf:2c:13:41:ec:0b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Oct 15 09:01:31 2026 GMT
Not After : Oct 16 09:01:31 2026 GMT
Subject: CN=0ff1475e071b10023ccea39bf4fd4648e783a2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:a9:62:08:87:8c:95:70:63:d2:5a:ce:a8:
4e:39:a0:93:fa:e1:4e:61:c4:e3:f3:58:24:11:2a:
35:8c:d7:ac:c7:7d:63:46:27:81:c6:94:a9:38:3c:
6e:02:9c:03:a6:df:b4:64:18:cb:ee:8f:83:3d:88:
59:06:75:00:80:5b:5f:46:ab:66:98:64:10:90:73:
2d:97:51:5d:5e:db:22:45:97:fe:9d:a2:c9:79:59:
07:be:c1:83:ca:f9:94:db:d9:c6:64:ce:49:35:e4:
bd:e5:8e:fe:9a:c7:36:31:bf:97:c0:e0:52:54:00:
ff:3a:e9:9a:0f:7f:7a:bb:3e:85:7a:44:d3:85:78:
b8:8c:0c:d6:43:81:59:2e:b9:a6:11:6d:06:68:85:
70:8d:e0:6d:c7:54:c4:b2:e5:ce:33:fd:a5:c1:ba:
d4:8e:9c:25:8b:26:d5:fd:ac:97:84:1f:77:5d:2a:
50:01:77:7c:94:51:11:10:cd:3f:24:df:44:81:5f:
1f:26:ae:95:45:8d:02:46:79:e9:41:05:b8:90:a7:
50:01:e0:d9:2f:d8:7a:e1:30:c7:b6:78:e3:2a:f7:
92:c8:71:a6:82:79:7b:ed:3b:84:ae:60:04:d2:ca:
2e:64:6f:85:08:20:ac:aa:7a:ba:71:2b:16:40:62:
d3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F1:47:5E:07:1B:10:02:3C:CE:A3:9B:F4:FD:46:48:E7:83:A2:C0
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f5:e1:26:92:61:f0:d9:de:a7:41:70:5e:c0:97:a6:9b:36:
30:8b:28:8d:10:64:38:40:e8:85:7e:9e:f7:80:b8:d2:f0:f3:
76:63:38:b0:d5:46:40:f8:59:4b:6e:4e:bf:71:a0:2f:5c:f1:
43:87:c9:16:74:0b:e8:1b:77:15:81:b7:de:e6:51:78:41:ae:
34:a8:95:58:6e:21:e4:5d:b8:07:8f:68:a8:19:5a:71:43:8c:
9d:2b:d9:52:27:1b:cc:27:87:c5:28:c0:46:57:03:08:d3:57:
f2:ae:10:fd:6e:fe:22:6c:99:5e:2c:c1:36:8c:9e:18:79:09:
06:d9:ed:58:1a:97:3e:0e:03:b1:5f:be:92:8b:71:06:17:dc:
b3:ca:fc:1c:8a:f3:05:6c:6d:8b:03:e7:7a:3c:b7:fc:4e:37:
6f:ad:cd:f0:15:ee:77:17:ad:d4:e8:f0:c1:8f:bd:31:cd:9f:
ac:3e:e3:da:3e:fa:93:ed:84:b0:3d:06:61:09:4a:d6:85:fb:
72:45:81:f9:54:7f:df:a2:c0:28:4c:40:be:6e:9a:70:ba:16:
e5:49:7e:1d:9c:99:6e:d7:73:2c:16:ff:74:d3:1f:c3:bc:35:
0b:cb:35:c5:dc:31:85:ca:c0:b0:0d:f3:8c:f8:f2:ad:a5:51:
f6:fc:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:00 2026 by rpki-client