Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.mft
File: rfvxCf18BDkHbEGsADQUWxjyupU.mft (raw, json)
Hash identifier: tWRL/WD5FNeD3pzst6Ax2zmKfZ+EDMkaCUG7fOAgbz0=
Subject key identifier: 3F:50:BA:95:F7:0B:4E:D7:98:13:16:42:3F:4F:1B:B4:4B:AB:B2:30
Authority key identifier: AD:FB:F1:09:FD:7C:04:39:07:6C:41:AC:00:34:14:5B:18:F2:BA:95
Certificate issuer: /CN=adfbf109fd7c0439076c41ac0034145b18f2ba95
Certificate serial: 01A0CA0FE9722C9FA972FF2A67869D205F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfvxCf18BDkHbEGsADQUWxjyupU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.mft
Manifest number: 06
Signing time: Tue 22 Sep 2026 17:00:35 +0000
Manifest this update: Tue 22 Sep 2026 17:00:35 +0000
Manifest next update: Wed 23 Sep 2026 17:00:35 +0000
Files and hashes: 1: T4C3ngZ0kiOERSm8KIUL6SFIVCw.roa (hash: tZwjPSBZgMqEIOo7Vw/0mMnq5X49xxkO30FWElQAEqs=)
2: rfvxCf18BDkHbEGsADQUWxjyupU.crl (hash: V3L06FaGDFG1mtN5tu/yemaiKE30m5JOPGQjIz3Zct4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfvxCf18BDkHbEGsADQUWxjyupU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:e9:72:2c:9f:a9:72:ff:2a:67:86:9d:20:5f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfbf109fd7c0439076c41ac0034145b18f2ba95
Validity
Not Before: Sep 22 17:00:35 2026 GMT
Not After : Sep 23 17:00:35 2026 GMT
Subject: CN=3f50ba95f70b4ed7981316423f4f1bb44babb230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:62:b9:b0:b6:90:0c:2a:b6:5a:f8:e8:13:
6b:0b:9e:03:9f:1e:10:0e:10:10:54:f3:14:df:b4:
e4:08:3f:a7:30:de:e9:f0:b6:0b:e3:a3:4a:66:ab:
db:9a:ca:71:7c:8e:92:71:a4:9d:33:99:e9:72:19:
2a:aa:02:c0:e2:6b:b6:fb:15:cb:0d:3e:2c:b3:90:
81:d9:36:03:16:8c:ef:c2:cd:89:87:cf:53:dc:e9:
a2:3b:01:41:a7:79:df:6f:eb:47:11:e5:79:7f:8c:
49:70:d4:85:d3:c2:a8:e0:ea:52:20:58:9d:aa:b0:
f6:ef:3b:ac:00:23:d0:3a:ff:1e:1a:1e:ff:c5:18:
9c:05:f2:8f:3a:78:43:72:32:b0:63:f7:4f:11:cb:
35:65:8d:1e:45:d6:25:ea:20:d0:02:a3:16:4b:84:
96:dd:68:4c:3c:fa:c6:27:d6:cf:de:c3:eb:f0:da:
ce:23:19:08:65:9a:af:02:89:17:06:aa:8f:08:69:
60:f5:18:c3:1c:9c:3f:70:75:86:5a:6e:d7:24:0c:
3c:ef:21:6b:0f:6c:35:07:59:a8:63:d7:22:db:f2:
3e:d4:de:52:bb:85:54:24:8e:bd:a4:fc:d6:ec:f3:
d6:37:60:0f:be:21:ac:bb:f3:ba:19:6e:bb:44:8a:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:BA:95:F7:0B:4E:D7:98:13:16:42:3F:4F:1B:B4:4B:AB:B2:30
X509v3 Authority Key Identifier:
keyid:AD:FB:F1:09:FD:7C:04:39:07:6C:41:AC:00:34:14:5B:18:F2:BA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfvxCf18BDkHbEGsADQUWxjyupU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:99:65:98:00:54:3d:f0:a7:bb:58:38:9b:c1:eb:b5:8d:67:
cd:f7:49:07:8f:43:c4:97:d1:0a:49:82:1c:ac:10:e7:a0:76:
53:67:af:80:94:d1:16:4f:3e:0d:3a:d5:44:71:ba:b9:dd:b5:
70:6e:78:54:21:ab:89:96:92:87:d1:ff:f5:a0:67:3d:3a:7b:
fe:4d:c4:1b:0b:c0:04:5b:d1:98:01:d5:67:96:af:8f:65:be:
54:48:4a:45:d6:0b:4f:0f:8c:7d:97:98:39:f9:cc:e5:6a:66:
32:dd:ce:24:01:ea:56:2f:dd:ac:a9:34:eb:fa:9b:63:5c:29:
44:20:31:ca:4c:bb:d0:22:93:f8:e7:53:47:90:0c:73:00:29:
f9:5b:06:13:81:88:1a:5e:48:1e:a5:7b:f0:ea:03:74:23:3f:
d9:b7:26:63:af:22:58:38:57:15:ef:7c:d3:5d:ae:13:10:6e:
1a:b1:44:ea:3d:f2:88:7a:0a:51:85:7f:76:37:a3:22:2d:e6:
05:27:42:48:d7:e4:76:a8:21:b5:58:99:8a:92:40:36:ea:63:
d6:f3:d2:49:b6:83:e4:cd:cd:b2:b0:ac:82:ea:9f:e0:18:04:
81:f6:a6:da:40:2f:6d:8f:08:56:4a:73:e2:42:f2:1f:5a:88:
59:bc:b1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:52:16 2026 by rpki-client