Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
File: rFxTEhWE19himH8m_3vtWuE4FqE.mft (raw, json)
Hash identifier: ftJAE2yyabCpPlOybDhH02o0LGulXN4BcZyKWY1jKj8=
Subject key identifier: 47:75:86:B8:DB:CF:93:44:28:F5:D4:6B:0C:A3:AE:BE:03:06:1D:DF
Authority key identifier: AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
Certificate issuer: /CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Certificate serial: 01A0DBDFF8FFB98379CC983A59DFB24C2F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
Manifest number: 0437
Signing time: Sat 26 Sep 2026 04:01:23 +0000
Manifest this update: Sat 26 Sep 2026 04:01:23 +0000
Manifest next update: Sun 27 Sep 2026 04:01:23 +0000
Files and hashes: 1: Ln3OJ6zDWx7Blw5HCll4po4CH-M.roa (hash: BZd7Kwg87H/bospWBtm/c29GcUHDV3xSrqHEL2bm8Hg=)
2: rFxTEhWE19himH8m_3vtWuE4FqE.crl (hash: i62NnnHzX2GSsPbyrfJq9+hOpyC/4pjImVfvIDfYsMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:f8:ff:b9:83:79:cc:98:3a:59:df:b2:4c:2f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Validity
Not Before: Sep 26 04:01:23 2026 GMT
Not After : Sep 27 04:01:23 2026 GMT
Subject: CN=477586b8dbcf934428f5d46b0ca3aebe03061ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:f6:c3:9a:b6:b5:b8:88:2e:ad:6e:a0:55:
31:26:51:97:c7:ea:45:84:b6:65:56:59:c1:df:13:
c7:67:3a:15:9b:47:d7:6a:96:9d:39:2e:01:ea:ac:
05:c4:1b:2b:cf:ea:da:48:ce:16:81:30:f6:7e:b9:
40:4d:a7:03:c1:ae:55:6e:d5:6a:15:0e:0b:8c:de:
85:0f:a1:be:82:df:81:d3:6b:ca:f4:0e:30:30:0f:
32:e3:a3:8a:f9:7d:13:4a:52:07:4d:f6:0b:81:10:
74:57:30:b7:93:18:50:df:77:f3:dd:30:5a:68:0a:
81:33:c9:ac:8c:9d:2e:ac:49:05:0d:a1:b7:b0:1d:
91:ef:71:48:36:ee:7f:d8:52:40:f8:be:5b:5e:0b:
a3:b5:65:1d:8a:ea:46:54:2b:73:01:d0:6e:3b:4c:
d5:0d:f9:7b:43:0d:29:92:ac:2f:82:ab:a9:8b:0f:
f2:4e:33:95:69:e7:66:df:c5:10:c3:95:5f:94:59:
be:3b:08:da:58:5f:99:34:f1:f5:08:0c:63:be:db:
9f:ce:7a:3c:c5:f6:d1:fd:b7:6e:6d:32:48:9c:b3:
27:90:54:36:ab:d0:89:31:d6:97:94:0d:75:71:af:
b5:2c:39:e9:84:c2:af:36:7f:2d:48:87:9e:a5:7d:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:75:86:B8:DB:CF:93:44:28:F5:D4:6B:0C:A3:AE:BE:03:06:1D:DF
X509v3 Authority Key Identifier:
keyid:AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1f:e2:4d:e6:65:65:ff:f4:88:d3:02:86:8e:ba:69:bc:73:
bc:8b:c1:63:09:ff:74:02:22:7f:f8:bd:f4:31:6e:7b:b7:f8:
b5:ac:a4:b8:e3:92:7b:f8:7b:b2:c5:dd:23:62:d7:e5:0d:29:
34:8a:20:4c:9e:18:65:09:47:ee:75:7a:4f:be:9b:32:fe:10:
3d:7a:9f:e6:1e:eb:17:0b:6d:72:df:63:c7:7f:b5:2b:ab:da:
56:a5:a1:a0:a8:d8:d1:c4:af:a2:b3:89:04:d2:39:40:dd:8c:
ce:f5:08:72:dd:5d:00:3c:c1:42:bc:c5:79:db:ad:b6:15:6d:
37:81:32:08:65:f9:a0:80:b1:ca:63:62:1a:70:5e:62:eb:d6:
71:3f:1c:96:c8:c1:7d:3f:09:bc:dd:29:ed:d0:c0:29:28:f6:
d2:18:70:3b:6b:4e:bc:3c:69:83:70:f7:17:1c:c5:33:38:0e:
85:ee:be:57:08:c8:c9:af:0e:95:91:b8:2f:c4:c5:54:bb:84:
a3:40:5d:fc:0d:f5:78:d7:c3:52:d1:64:b4:0d:f0:15:3a:41:
db:7e:32:3c:58:35:2e:bf:99:61:58:0b:6d:bf:5e:0d:1e:b8:
86:04:b2:b1:21:74:c9:f0:52:9a:01:88:b5:9e:11:63:56:8c:
33:ae:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:52:15 2026 by rpki-client