Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: /1e7gBr/q5ZDru7tLSv67HcyPVlplczgCyPx4AuFVpA=
Subject key identifier: E3:B3:43:1E:17:74:11:7E:72:08:69:51:43:0E:36:96:2C:55:AE:87
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 01A0EB8A802719112516DD919B74D605BBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 133C
Signing time: Tue 29 Sep 2026 05:01:57 +0000
Manifest this update: Tue 29 Sep 2026 05:01:57 +0000
Manifest next update: Wed 30 Sep 2026 05:01:57 +0000
Files and hashes: 1: EogTS1WEx_vkYhbZSi3vHNHhiHY.roa (hash: bP41/ID8ron8LWTYg41pAko9WG04aRJj5QuWiGa7VvM=)
2: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: KYxuU5xGG8v05Fz0dRmR6VhBMc3ZVG7j7aVhUGsN96M=)
3: m_9DNbciOyMJhFYq6AMIc9hId24.roa (hash: tBW7znRdSpU63evh7Ukilhd1TX1abcrpsvoLCnD8lGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:80:27:19:11:25:16:dd:91:9b:74:d6:05:bb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Sep 29 05:01:57 2026 GMT
Not After : Sep 30 05:01:57 2026 GMT
Subject: CN=e3b3431e1774117e72086951430e36962c55ae87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:27:6c:2f:fb:c5:14:47:21:a0:80:51:f9:
f3:e7:51:13:26:f9:a3:a5:2a:04:bb:f0:bc:d1:31:
cf:1c:a3:d9:26:84:b0:aa:64:26:57:83:1e:f5:6d:
26:84:9b:3b:0e:45:1c:9a:5c:69:39:d7:57:ec:ea:
75:3b:8b:2f:02:10:6f:bd:9f:b2:66:28:48:29:3b:
d6:bb:1d:6f:36:cb:5e:79:35:62:cc:ec:f1:91:f9:
f5:d2:91:fc:c3:45:79:2b:c9:c3:b4:4c:e9:a5:9a:
58:e1:f9:61:5d:97:4e:b3:41:2b:39:e1:20:0b:9c:
06:a4:a8:05:36:b6:79:73:25:95:df:0d:9b:22:90:
99:01:00:be:0f:31:42:5d:8b:41:25:a3:6e:c0:a5:
4c:e2:8a:22:4d:b3:0a:a4:10:cd:cb:40:5c:fa:1a:
cb:bd:2e:7c:b8:b9:dd:1f:91:98:70:4e:46:59:14:
f6:be:16:32:57:ba:54:59:28:e7:a2:0f:97:8a:94:
06:1e:c9:15:3f:39:8a:32:b7:1d:f5:02:b5:22:77:
ae:64:bb:80:0c:fa:12:44:89:6e:ef:85:39:0e:89:
50:e6:1a:2d:e6:be:37:ae:c8:90:09:cc:70:8f:13:
a7:5c:55:fa:b1:de:7a:c0:11:21:c4:8a:1e:34:7f:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B3:43:1E:17:74:11:7E:72:08:69:51:43:0E:36:96:2C:55:AE:87
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a3:c3:24:b9:95:5f:7b:88:02:3e:ba:94:98:6a:00:5c:97:
75:b0:15:b8:b0:b8:be:81:d5:7b:33:e9:33:7b:ec:4e:2d:ab:
17:36:16:8a:77:e5:33:a6:75:bf:01:a3:a8:91:8d:fd:5b:a6:
43:32:b8:f1:25:0d:b6:68:30:4a:09:47:e1:98:40:8e:2c:c5:
f8:38:d1:56:ff:7f:cf:94:fd:b0:a0:1a:46:3c:ae:72:0d:99:
21:30:bd:80:4c:88:c1:eb:1d:dc:88:15:54:0f:2e:4f:8b:cf:
61:af:cd:d6:89:2c:e1:a4:b1:bb:86:02:91:6d:2b:a2:b9:b9:
52:7d:31:e8:9f:59:df:b5:fb:de:7b:83:bf:4f:4b:fd:9d:02:
5f:23:1f:fb:64:b7:17:66:69:d8:6f:1f:1a:77:c2:80:37:a1:
42:37:03:31:7e:f0:da:8d:7e:d8:1d:fd:73:d6:04:ab:7a:a4:
f5:b7:80:cb:a6:e4:ec:ab:6a:7a:79:71:d5:ad:69:1a:b4:e3:
38:fa:11:c0:4b:74:8a:61:01:3f:56:db:8c:18:fd:be:e2:db:
99:b0:69:78:30:17:dd:49:f5:0e:a1:fc:98:d4:d7:18:68:1a:
70:be:50:54:2c:1f:50:5c:d1:14:04:49:56:7e:53:47:cc:86:
0c:c5:27:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:54:20 2026 by rpki-client