Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: /3m747ry2fuLrvKBijdNcq8tVhZ601TlO+0D4meHJv8=
Subject key identifier: C6:95:ED:A5:26:6F:06:79:8D:3E:47:35:00:2D:45:8F:03:34:6B:6C
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 01A13C6E46AC5293A8B0E8A0EBA251841345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 1AA5
Signing time: Wed 14 Oct 2026 22:00:22 +0000
Manifest this update: Wed 14 Oct 2026 22:00:22 +0000
Manifest next update: Thu 15 Oct 2026 22:00:22 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: Mi8cDRcr4DHr27/rEhBWo1NuznXollrokRijIgSQcC0=)
2: OeILc9n1u8YEH2AOBIE0o0dgpEE.roa (hash: /7A8rLMm0YbWTOXfPXut3LLp0Fa9Ut9MxlMvs+Wsm1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:46:ac:52:93:a8:b0:e8:a0:eb:a2:51:84:13:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Oct 14 22:00:22 2026 GMT
Not After : Oct 15 22:00:22 2026 GMT
Subject: CN=c695eda5266f06798d3e4735002d458f03346b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:67:44:41:c2:9e:d3:60:d1:48:b7:f8:ae:04:
c2:a6:eb:21:b9:72:fb:38:5a:61:e4:1a:dd:02:73:
d8:ac:73:b9:08:6c:24:01:9b:47:25:33:86:4d:62:
c5:7c:2f:ce:9c:87:8b:04:bc:ac:81:ec:28:07:69:
13:74:87:b4:24:ae:c0:e8:2b:b3:21:42:97:70:e2:
d7:7c:0f:60:60:79:4b:16:d1:b6:9d:68:d6:9f:f7:
98:10:97:02:dc:f6:9b:f2:22:92:0f:da:dd:cc:96:
3b:92:e5:26:b2:c4:ce:fa:27:c1:77:53:26:c9:09:
1d:31:bd:3b:7f:88:e8:af:1d:13:fe:d8:59:1f:c4:
63:1e:7b:13:7d:b3:a8:48:cc:23:a7:03:a4:ab:59:
44:b0:c6:11:34:3b:39:02:7a:fa:0d:1c:e0:1e:fc:
0e:a9:88:7a:5f:fc:6c:72:5e:9a:a1:4f:f8:3f:b4:
b8:d2:e1:69:4a:08:99:c5:1c:08:5a:5b:92:67:4f:
89:87:5e:d6:c4:07:73:91:81:d0:62:44:c3:1d:e6:
d5:f7:85:90:67:9f:a9:2a:9a:d6:8c:53:01:ed:d0:
5e:00:ce:e1:15:04:fd:60:f1:d2:44:a9:a6:32:25:
5a:b4:78:67:e4:e7:7c:5f:dd:22:9b:48:b2:af:85:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:95:ED:A5:26:6F:06:79:8D:3E:47:35:00:2D:45:8F:03:34:6B:6C
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4d:a9:b4:82:78:cf:26:da:47:2e:9b:46:64:1a:6a:ac:35:
b2:4b:37:14:4c:f8:07:08:bd:88:80:8d:cc:87:05:db:96:bf:
e6:bf:13:dd:e0:e5:cc:25:8a:b6:a3:67:fb:2b:8f:58:50:20:
1e:64:91:bd:23:4e:34:06:ec:11:c9:5a:fe:72:54:ec:e6:8c:
23:2d:5b:19:f8:d2:b2:d9:f7:36:3c:9f:71:51:0e:6c:89:e2:
fb:70:11:5d:62:d9:92:2e:c3:36:f9:7b:ae:a1:e8:8b:87:67:
1c:ba:fd:f6:53:c8:92:f5:6c:07:23:89:83:84:3e:15:d1:84:
ac:a4:f0:1d:1e:d0:ce:01:c6:91:ea:7e:a5:8f:f1:cc:90:f1:
d8:1e:f0:20:38:27:a7:2c:f7:a6:c9:cd:0c:56:24:9f:64:a5:
c2:96:a6:1b:06:81:d9:60:b1:e1:20:94:dd:2c:a9:12:d4:85:
c3:98:13:9e:74:86:90:59:f0:91:cf:90:49:73:88:3e:5b:0e:
f7:c1:6b:aa:16:10:c5:6a:63:6c:2d:a7:5a:dc:08:5b:3a:d3:
9f:b0:fc:a1:b3:8d:54:7a:8d:03:0b:02:92:10:af:6f:52:fc:
5a:d4:4b:a8:00:90:18:39:10:2a:06:11:58:8c:7d:73:2a:df:
08:b4:39:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:12:40 2026 by rpki-client