Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File: 54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier: sclP7bRXHt3CnWa3g6BYh3h764eiMKtv+7cHzZV32lA=
Subject key identifier: 65:6A:6A:6B:A3:A7:6C:DC:6F:A0:80:80:1E:15:5B:CB:9F:AC:91:87
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial: 01A0C14382C65EDF584FC363863878D2171A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number: 19FA
Signing time: Mon 21 Sep 2026 00:00:22 +0000
Manifest this update: Mon 21 Sep 2026 00:00:22 +0000
Manifest next update: Tue 22 Sep 2026 00:00:22 +0000
Files and hashes: 1: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: 80V9orq5cIgZWdiH+P3AgzFK7jagSFNvXjzINRXCUEQ=)
2: 8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa (hash: ihfIEbqwEULTE/OLIE3mqsVCssWQ6XBCkAGO8OC7UiQ=)
3: KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa (hash: 8i1NfCOqJ0Jq8VqPBEJyQbTSUD60u+xKuWbGsqyrU/A=)
4: Kn1fdpMjWnhcO_e1XOSq5Q_SqOo.roa (hash: ipV86oOkjGzli6pzk5Ar8vQYROabIbZnZILhX3gNwHo=)
5: P7qWrs2V2AQezp3eeUtgLDcatjI.roa (hash: 24DT/UvLaMHn12NZyYMSEhf55ywjNyUpSkfYVKDW1As=)
6: m9ne4AYiPOSdzaOHma0RPMHFIXo.roa (hash: CcdNSaFI+Idh1vG8DNWCzWCXN6GNcifanXez8Ab1HsA=)
7: slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa (hash: Nu5TAyzLPZcJp+J4t6JX8dbl8sGpnXq2tX6BxvM07Oo=)
8: yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa (hash: bFUcyJVn75mPPcVkoj5xBq3tVwT0rV177XBSyfgCsxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:82:c6:5e:df:58:4f:c3:63:86:38:78:d2:17:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
Validity
Not Before: Sep 21 00:00:22 2026 GMT
Not After : Sep 22 00:00:22 2026 GMT
Subject: CN=656a6a6ba3a76cdc6fa080801e155bcb9fac9187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:99:5c:9e:89:91:96:53:ae:70:b5:dd:d1:
f3:14:df:65:1d:5f:f4:a7:86:df:fe:d6:51:4f:8e:
e4:fa:6c:ec:a1:ba:d7:41:25:52:1c:bd:94:7c:e7:
6d:0d:94:1f:cd:48:aa:24:ac:10:17:fe:bf:47:d1:
c6:82:20:aa:29:dd:9a:87:f7:52:d0:68:70:0b:8e:
ee:09:d7:1f:c0:fe:b4:93:38:f3:65:b9:36:eb:64:
d3:87:39:22:9c:8a:bf:23:57:96:02:a6:3c:57:a2:
d2:bc:7b:36:98:08:70:f7:16:ce:85:61:0e:56:00:
1d:c6:b7:c5:12:be:04:19:41:c9:1f:25:bd:57:b4:
86:4e:7f:f0:b1:0b:c6:4c:ab:7e:ea:bb:78:33:71:
ff:af:fb:89:b5:07:b0:cf:47:39:d9:a6:51:52:96:
3e:7b:c0:c6:58:20:0c:c0:4b:4f:61:ab:64:af:95:
63:54:25:ed:0a:69:a0:dd:90:01:ab:6e:cc:db:8e:
97:49:f2:88:2d:04:c1:7a:10:7d:0a:a8:1e:1a:41:
74:1d:8a:34:a8:33:8e:19:09:65:88:32:c4:c6:78:
b3:61:01:16:83:01:b9:7e:67:a7:d7:2c:25:b1:2d:
d9:6a:3c:5f:96:3f:20:51:95:36:ec:39:b6:a4:bb:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:6A:6B:A3:A7:6C:DC:6F:A0:80:80:1E:15:5B:CB:9F:AC:91:87
X509v3 Authority Key Identifier:
keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bb:67:51:cd:56:fd:cb:cc:8f:3d:59:c9:c1:89:15:b9:26:
0a:e2:e4:53:8f:e9:f2:2d:0d:f4:b7:5b:3b:a6:0d:9c:3a:89:
3c:f5:ea:77:48:95:7d:59:56:19:15:67:8e:7c:36:47:16:63:
c3:64:3f:a7:e8:ef:12:0a:7e:b3:94:29:41:63:4e:7b:24:9f:
21:a3:5a:0d:61:b7:8c:e1:e4:cf:32:31:9a:39:d2:2b:cf:19:
94:e5:71:c9:f6:98:b7:4d:a1:95:d2:52:08:81:88:9e:54:45:
eb:b5:c6:c2:ee:79:fd:7e:83:47:e4:a6:f4:27:9d:8d:5c:33:
30:3c:a5:96:f6:16:fd:20:14:d7:85:c2:e5:92:66:54:ff:37:
d6:23:61:8b:1e:56:1e:54:69:a1:d0:77:e2:62:54:fa:aa:bf:
7b:e7:5d:e8:06:86:28:4e:fa:7d:5d:fe:fd:9c:a3:44:dd:c0:
d0:d8:fe:1b:a3:75:59:33:e8:bd:b1:e0:33:ec:68:84:67:79:
2e:46:1d:ad:da:4c:31:2b:bb:72:15:45:ef:1e:55:12:c1:b2:
ff:b6:95:4c:2f:79:c3:32:5c:2f:aa:89:ff:cc:d0:86:3a:41:
c7:4c:cd:4b:ef:7c:7e:7e:d2:38:72:18:64:6d:4f:7a:8d:58:
11:cc:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:19:24 2026 by rpki-client