Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: pzHHvlEyntK1zVr/iO7zX1A2CHwVNU5fl2arq+Bhqwk=
Subject key identifier: FD:AA:91:A7:B3:B5:C5:47:F8:6A:32:30:C7:B0:B6:A4:A4:9A:25:9E
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 01A0C96B663BD13D5A1AC557696AF1FB0C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 0C8E
Signing time: Tue 22 Sep 2026 14:00:53 +0000
Manifest this update: Tue 22 Sep 2026 14:00:53 +0000
Manifest next update: Wed 23 Sep 2026 14:00:53 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: ojlXgb5ToJMHeSdWL2eETEejjh7yvUMLLwpTjVC3aoQ=)
2: 2TC861jK8VELUxYLqwLBwJEBDQA.roa (hash: oKo7gej4ajG4+SLdtnyEgBggOZ1BZWPfVe9QrL/7Aj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:66:3b:d1:3d:5a:1a:c5:57:69:6a:f1:fb:0c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Sep 22 14:00:53 2026 GMT
Not After : Sep 23 14:00:53 2026 GMT
Subject: CN=fdaa91a7b3b5c547f86a3230c7b0b6a4a49a259e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:3d:52:64:2c:37:0e:b2:87:a1:eb:fe:d5:
d3:d9:53:02:2d:43:0f:54:80:d8:6d:89:b6:b3:35:
c9:30:aa:73:92:f5:ac:56:4a:e4:d7:5a:24:81:e6:
56:86:e8:a7:04:b6:7a:76:56:fc:ce:7a:08:6a:f6:
df:4a:44:2c:7d:c0:ed:70:67:68:09:24:b9:08:a8:
b3:c2:9a:ad:d5:40:52:c4:87:d8:6d:b7:b0:11:ce:
34:b9:55:a6:6a:ed:c5:ae:b3:c5:5a:54:9f:0d:7a:
d6:99:3e:94:0e:8a:d9:a1:0e:e7:b5:be:ab:c2:3e:
86:75:b6:6a:f6:96:a6:a6:ab:c1:01:f5:02:e1:78:
5f:67:64:ac:1e:12:dd:0b:7c:fc:d3:3f:7e:fa:f0:
20:82:a3:b6:c6:e3:5f:0d:74:6a:6b:88:02:68:39:
cf:23:c0:b4:77:5e:55:02:e9:04:c7:aa:74:a2:ef:
e7:96:6e:6b:2a:c6:af:58:a4:6a:b6:c0:f5:5f:cd:
a4:9b:ac:0b:38:22:20:f0:1e:f4:2a:e2:f8:f8:73:
d8:d5:58:fe:49:79:2b:f7:9f:75:01:07:a1:fd:92:
65:5a:e8:4b:04:9a:20:3e:c2:68:e6:b8:78:b1:66:
ce:55:66:86:66:eb:49:6d:76:b3:af:53:fd:14:4e:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AA:91:A7:B3:B5:C5:47:F8:6A:32:30:C7:B0:B6:A4:A4:9A:25:9E
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:51:f4:88:b7:50:cb:09:fc:aa:66:46:15:3d:42:48:3f:d3:
4b:01:ec:54:f1:aa:a3:fe:79:2f:ab:22:83:dc:0b:04:1f:1f:
04:59:86:8b:f6:ca:61:ba:af:86:ad:0d:08:c6:f7:e3:40:ee:
fe:1d:64:55:fa:d7:6a:51:fb:42:01:0d:f2:3d:ac:90:8b:b4:
ae:94:6d:11:bd:53:d7:82:8d:78:d2:e2:28:55:07:4c:9d:2a:
ea:2a:1a:c2:9d:0f:d5:e5:66:72:c0:3c:26:30:4b:ea:81:b4:
69:e3:19:a0:71:07:ea:f6:a3:d6:fd:5d:24:78:e3:0f:44:7b:
3f:40:c0:85:ca:9b:33:e8:91:86:73:fa:dc:fd:1d:35:c3:1c:
99:78:ed:a0:9b:52:b8:31:8c:41:8c:8f:8b:2c:40:da:a1:dc:
7f:e0:fb:e4:b6:b1:a9:3a:93:8a:e4:b0:22:5a:5a:4c:7e:06:
9b:45:48:99:1e:39:06:c6:f1:fb:c6:98:94:3c:52:ca:45:7d:
ef:56:b5:30:f0:4e:fc:9a:06:d2:e0:b7:63:4e:a5:63:89:84:
5d:07:79:84:ea:01:9d:89:4a:53:d5:d4:69:95:a6:ae:cc:80:
91:a8:4e:b9:b8:d9:56:fd:c9:46:55:45:96:c5:11:eb:d9:e3:
23:b5:2f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:44:42 2026 by rpki-client