Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: eZlKMKywT6Zjj9IDsdtdXMOWYZ1TpoFrmuV31fNsr/s=
Subject key identifier: 66:4A:2F:5B:75:00:74:26:DC:2A:04:2C:2C:B7:51:BE:2F:CE:8A:32
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 01A0DA2930F280A1683839F5B67FC5617C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 17E9
Signing time: Fri 25 Sep 2026 20:02:07 +0000
Manifest this update: Fri 25 Sep 2026 20:02:07 +0000
Manifest next update: Sat 26 Sep 2026 20:02:07 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: z9YAAZTNBfBdQ/PvFLJnanHCEt/BPrr3QRDJL0Lq4xA=)
2: jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa (hash: 54K+k1GuCsLHpi8qK3vvD17O4Ihyjwnmzr57+VpXx/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:29:30:f2:80:a1:68:38:39:f5:b6:7f:c5:61:7c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Sep 25 20:02:07 2026 GMT
Not After : Sep 26 20:02:07 2026 GMT
Subject: CN=664a2f5b75007426dc2a042c2cb751be2fce8a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:c0:04:9f:4a:79:c0:f4:04:b7:3c:6d:32:
56:73:05:33:55:84:80:c0:40:b4:56:e2:74:be:ff:
3f:23:4b:0a:17:ee:48:04:86:c9:a5:46:ca:f1:ea:
30:a4:e8:f1:fc:92:3b:d2:40:10:1c:1d:46:88:2f:
fb:2e:cb:6f:56:ee:8d:f9:18:61:02:72:3f:74:8a:
3a:22:24:0e:50:b4:df:bc:fe:28:fc:09:e9:08:e5:
01:4a:13:63:4a:4a:c5:82:f4:58:6c:d1:2f:1b:04:
db:40:47:cc:09:fb:d8:66:3a:60:41:43:e5:8f:42:
f5:36:98:c1:b4:2e:54:d7:fc:45:b2:d2:82:42:3e:
67:80:13:15:6e:b1:83:51:26:2e:40:9e:c7:f7:ba:
a0:12:39:26:f5:46:16:6f:c9:5c:53:0e:b7:f5:2b:
87:52:c6:c6:f2:eb:9c:9f:fb:d5:4a:33:05:df:55:
d5:59:2d:dd:ec:48:38:78:fc:ae:68:0d:a8:d3:d0:
95:f0:66:46:17:5a:a5:c2:47:24:23:90:aa:1e:31:
0d:35:0e:5a:97:68:8f:a4:ee:5e:c7:67:48:e1:ce:
72:7a:4a:d3:a5:69:e1:56:fa:b7:56:e9:09:d9:ee:
9b:53:74:24:1f:42:a1:2b:3c:fd:2c:d2:04:24:29:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4A:2F:5B:75:00:74:26:DC:2A:04:2C:2C:B7:51:BE:2F:CE:8A:32
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:75:1d:c1:e2:cc:54:9f:47:51:52:fd:b4:27:a2:55:d0:c4:
83:cf:6f:e1:fe:94:87:d7:41:6a:3f:fb:cb:ad:e9:ce:74:92:
d2:1b:c1:b3:11:32:6b:5c:8c:c3:4c:cc:67:fe:1f:df:a9:12:
36:5f:8d:f5:28:ba:30:c1:0a:d1:2c:fb:95:f7:08:22:5a:a1:
94:ea:91:b3:1a:cb:f1:f5:a6:ed:fe:74:7e:b1:0a:38:67:0c:
ff:2b:c2:5b:4f:ef:b5:8d:ef:af:f9:76:4e:fa:6c:f9:31:41:
6b:9b:00:7c:85:86:80:cc:a6:7f:e5:89:66:42:48:3e:6c:6b:
13:7a:2c:28:c9:8e:5c:9e:28:54:a8:74:e1:48:fc:b8:30:b1:
b9:56:b0:82:e5:51:5e:d0:2d:9e:e5:a0:eb:50:83:69:f3:ee:
aa:5a:00:8f:d5:2a:af:1f:85:79:aa:42:e0:4f:4b:94:01:44:
ba:36:92:3f:26:88:7b:1f:84:b7:09:d0:71:41:10:8b:7a:ee:
c1:99:03:8c:9b:67:24:0a:b7:fd:97:97:d3:7e:72:2d:c4:7b:
6c:8b:94:26:ea:57:4f:33:72:f6:74:ab:51:7a:c9:38:c2:da:
fe:23:07:c7:7e:3a:00:c3:c7:eb:69:fa:c5:31:6b:77:0a:fb:
ab:8c:8b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:04:02 2026 by rpki-client