Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: oGJefcXW/g6WbjkZugrvCdQuXX+dPDT9INN06CMX7nc=
Subject key identifier: 33:2C:68:38:B3:37:C2:EE:66:A5:12:FE:7B:FA:21:3B:29:24:F5:74
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 01A11ABE4A0792307A69F1BC5C9A0A2C7A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 1A95
Signing time: Thu 08 Oct 2026 09:00:40 +0000
Manifest this update: Thu 08 Oct 2026 09:00:40 +0000
Manifest next update: Fri 09 Oct 2026 09:00:40 +0000
Files and hashes: 1: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: f9aFvqedZmwKOS39E1con5DvuEoUb8XFdE6ZUhbJ8BI=)
2: wBzUUS1esVzgp7-S8WP1zjKAIpw.roa (hash: UgXBz+OKL1MAmpi06fp5fY0KFQ1LRcUZSGp9CfyxDlU=)
3: wjNWOCuY2E1_FvlqggQMJz_Utqw.roa (hash: BberhHSGLHh2AX9W6raGWWWl/q21AJDPsEIrCo+NFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:be:4a:07:92:30:7a:69:f1:bc:5c:9a:0a:2c:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Oct 8 09:00:40 2026 GMT
Not After : Oct 9 09:00:40 2026 GMT
Subject: CN=332c6838b337c2ee66a512fe7bfa213b2924f574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:0a:7f:8a:27:b9:0c:2c:30:be:c4:29:c0:
2d:68:e1:71:dc:a5:55:71:24:5a:fe:7f:5e:e2:9e:
b7:bb:38:71:e2:d9:0e:19:25:08:8a:f4:09:4f:69:
0f:4e:f9:ba:8d:9c:af:ea:cd:c6:73:dd:87:5a:b0:
f3:7e:0e:aa:c5:36:9f:5c:e0:d4:d6:3b:17:74:8f:
b8:8e:f2:84:08:4b:a6:a8:0a:fc:c8:f7:96:23:b7:
e5:a7:71:f1:eb:e1:c3:18:dc:e2:72:6a:ef:15:c8:
9d:a3:90:f4:ad:66:e9:84:42:18:ee:54:3d:7d:9d:
19:c4:42:65:80:7e:8f:7d:8c:7c:5b:ef:a6:72:c6:
c2:fe:e2:75:89:9b:57:6c:ca:1e:b1:c7:bf:87:2a:
21:9a:0c:11:ee:04:ab:d8:7c:f3:39:44:fe:b9:03:
81:d9:78:8d:13:2b:d6:01:77:da:aa:26:bb:f2:93:
00:79:a8:66:0e:e8:bd:66:e6:f9:8a:e0:60:77:a7:
2b:d1:08:01:47:43:db:40:db:3a:24:72:d5:91:2f:
57:77:9e:89:a7:6e:04:5e:94:d8:8b:18:6c:bf:88:
b1:3d:d4:c3:05:81:6c:84:fe:92:a8:79:be:0c:53:
b7:87:98:3c:73:4f:a7:1f:29:07:64:b5:4e:41:85:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2C:68:38:B3:37:C2:EE:66:A5:12:FE:7B:FA:21:3B:29:24:F5:74
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f2:a2:23:30:07:d6:a0:83:f3:80:76:d9:dc:60:23:22:d9:
06:00:2b:22:7a:68:57:ef:2b:0f:3e:c0:4f:09:1d:39:7d:b7:
1b:e5:22:29:40:8d:4f:53:04:bf:9d:32:31:a0:48:a7:ec:8d:
68:2a:18:0f:79:c3:7b:f8:09:cc:50:57:3b:98:74:72:a2:02:
92:34:b1:15:cf:41:f9:c9:44:ee:1b:04:45:0e:b4:6c:a6:18:
4b:7a:2c:1f:af:aa:c7:72:14:a5:65:4c:16:fd:55:93:a9:77:
75:e2:36:be:6e:13:9e:b2:5b:49:22:d1:fd:12:b3:c6:43:d0:
89:e8:49:8d:8c:94:c0:5b:96:f7:9a:55:48:07:be:70:cc:87:
47:84:de:3c:e9:b2:09:ef:f6:c0:3d:ca:1e:a2:86:2f:9b:3f:
a4:38:e2:c3:d1:1b:30:18:c7:92:dd:16:76:70:8d:d4:bc:da:
d9:28:93:df:7a:92:75:f1:8f:73:cd:57:1e:31:e7:b4:8d:8c:
da:ac:c9:ed:55:a3:b6:ce:80:d0:e1:2e:a4:18:43:ee:eb:d9:
a0:49:0d:86:24:8a:15:fe:8c:00:99:86:33:ce:ca:89:02:c0:
5f:a9:00:7d:5b:f0:bd:2a:80:5d:9c:f9:40:f1:96:5d:42:24:
27:5c:ae:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:21:17 2026 by rpki-client