Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: YkW/aYSl2tfAq2M+6KYRPjwQvTd0DlSxG+KvmQouKos=
Subject key identifier: 05:6F:75:46:0E:E5:19:96:08:5C:53:A1:DB:2E:A0:4C:9C:0F:3E:C1
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 01A001A667B758D85303EA03D6C99FEB3B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 19:01:17 +0000
Manifest this update: Fri 14 Aug 2026 19:01:17 +0000
Manifest next update: Sat 15 Aug 2026 19:01:17 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: VLUZqLDpspWDd3hRDijxNeDQfJsBrx2utlqW/6pRetU=)
2: OeILc9n1u8YEH2AOBIE0o0dgpEE.roa (hash: /7A8rLMm0YbWTOXfPXut3LLp0Fa9Ut9MxlMvs+Wsm1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:67:b7:58:d8:53:03:ea:03:d6:c9:9f:eb:3b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Aug 14 19:01:17 2026 GMT
Not After : Aug 15 19:01:17 2026 GMT
Subject: CN=056f75460ee51996085c53a1db2ea04c9c0f3ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a0:37:a2:af:19:e5:4e:f9:b6:24:ff:3e:c2:
f8:c4:ac:87:04:16:9a:b3:f2:4c:b4:ed:7e:47:50:
1e:4a:2e:3d:ca:a5:71:f7:01:cd:97:36:9a:76:91:
36:11:31:10:07:61:cb:bf:7d:aa:9b:f6:89:7c:45:
58:19:1d:b1:63:2f:d0:23:90:97:11:4e:43:08:29:
d5:b9:80:d6:d9:ca:88:6c:6d:bf:a7:ac:09:9b:a7:
3a:4b:39:97:12:fc:e5:4f:b6:9d:30:35:23:35:55:
d4:e5:c3:f2:36:ef:95:68:69:44:98:0f:8e:4d:4a:
36:59:50:6e:aa:63:84:ed:e3:cb:ae:db:72:bd:49:
ae:df:09:b1:10:b2:2f:b9:d4:85:e6:74:cb:da:e6:
56:d2:d2:0f:ff:4f:c9:2a:17:cc:57:ce:1d:56:c7:
c8:bf:de:66:f4:1c:10:96:2b:d5:9e:5c:1a:eb:68:
6e:5d:e6:27:3b:96:bf:ca:88:bd:b5:bc:f6:d2:e7:
95:1e:0b:17:0c:1e:31:d4:d7:02:4e:78:bf:66:32:
0b:ee:29:e4:c2:8a:12:1a:4d:8e:87:0c:c4:6f:56:
c9:9d:5c:24:9b:2b:84:f6:f2:60:23:a9:c4:f6:25:
39:d1:91:d9:56:af:5e:a2:e1:22:be:53:1a:d9:b5:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6F:75:46:0E:E5:19:96:08:5C:53:A1:DB:2E:A0:4C:9C:0F:3E:C1
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3b:30:34:32:2d:9b:4e:a2:12:e7:2d:36:06:2c:de:86:ab:
b4:6b:f8:58:dc:97:98:28:d1:98:ef:8b:1f:ac:91:18:38:d5:
75:c4:06:4c:8d:da:3e:f3:06:f5:28:2c:fd:7a:cf:34:30:fd:
f1:54:91:72:8f:87:38:d0:ed:9d:ef:fe:87:2e:26:2e:c9:4e:
0a:13:e9:a6:be:dc:a2:cb:3a:4f:66:29:7e:54:5e:22:f8:82:
c7:54:6a:bf:b7:8b:4d:0b:d2:53:61:75:e3:ea:22:f7:5b:94:
ba:b3:d7:12:48:af:40:d5:cd:3a:29:29:c1:77:25:ad:d6:fb:
95:ad:98:89:f7:27:7d:26:bd:6e:3d:9c:de:c9:e3:d6:12:f3:
02:e5:4b:c7:b2:2a:d8:ea:20:8f:47:d3:b9:14:ee:32:5f:09:
5a:b3:ad:de:65:5e:5b:25:7d:94:cb:03:9c:77:47:63:d2:de:
4b:8f:5c:b2:80:a3:68:58:19:ee:98:0c:e1:94:d9:01:a2:4a:
e7:ec:60:eb:c3:85:d1:6d:e9:43:67:34:c6:bb:8d:23:eb:e1:
00:e5:d7:36:cf:45:36:0d:10:62:bb:14:fa:54:f2:27:96:2b:
b5:66:4c:46:8f:7d:b1:5d:64:6c:c3:bf:fb:83:c3:4f:65:c4:
e1:f8:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:24 2026 by rpki-client