Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: tGznPt9UzgDbFdJNGwwifzdNV6mzeb5VraXpa67cWHg=
Subject key identifier: 5C:C2:00:D8:08:7D:52:74:B6:1C:C1:5C:EA:B0:E6:E5:4C:0F:9C:5D
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 01A0BE0BE2F30F398BDC1D9C12E5077CF63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 19F7
Signing time: Sun 20 Sep 2026 09:00:45 +0000
Manifest this update: Sun 20 Sep 2026 09:00:45 +0000
Manifest next update: Mon 21 Sep 2026 09:00:45 +0000
Files and hashes: 1: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (hash: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: Lcah5uVc453YjGsEEzYGb3XN7TyJ9PJOFBHWjec2k40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:e2:f3:0f:39:8b:dc:1d:9c:12:e5:07:7c:f6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Sep 20 09:00:45 2026 GMT
Not After : Sep 21 09:00:45 2026 GMT
Subject: CN=5cc200d8087d5274b61cc15ceab0e6e54c0f9c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:c6:68:a9:a8:9a:fc:62:69:21:bc:ca:12:
7e:ee:81:c4:d3:72:d2:8d:02:e1:cd:d1:4b:b6:7b:
81:fc:32:ab:ec:a9:c4:ee:c1:a4:7e:a7:1d:82:ea:
32:6e:6f:a3:f0:4b:4c:ab:a5:e8:98:6c:c8:94:46:
51:5f:ff:6b:2c:9c:7e:55:b3:8e:56:11:3c:85:75:
ec:e8:5c:0f:1a:0e:9e:e1:eb:ba:88:8c:6b:00:8a:
99:5b:80:13:99:a5:50:40:eb:aa:f5:48:2c:2a:ae:
5d:9c:df:4e:07:f8:2d:bf:39:ab:d6:2e:c9:92:14:
7a:2c:2f:18:c1:93:b4:b9:f4:dd:90:5e:c7:70:f8:
a9:74:2e:33:13:f3:d7:a4:d6:96:3e:4e:9c:ae:99:
a6:f4:16:45:a8:d2:82:2b:00:1b:71:24:eb:62:77:
93:d5:20:08:a1:6c:b5:58:3a:43:c7:e6:4c:4e:f6:
f7:33:d1:30:42:1d:e3:d6:a7:42:12:66:11:d1:35:
a5:c1:04:3e:40:17:56:68:45:2e:b0:75:53:23:c3:
49:67:a5:cf:58:24:1b:3a:ed:80:fd:e5:30:2b:af:
b0:1d:7b:55:51:83:f1:59:9e:00:07:de:90:f5:2e:
88:65:6e:dc:5b:19:29:87:e3:b5:1a:3f:73:f5:ac:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C2:00:D8:08:7D:52:74:B6:1C:C1:5C:EA:B0:E6:E5:4C:0F:9C:5D
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:91:f8:a5:99:30:7e:9c:28:37:b9:57:c6:e3:1d:e1:aa:fe:
85:ce:ef:ec:de:b3:24:2f:56:d8:a4:b4:19:24:72:32:80:bc:
5d:3e:2a:a6:cf:22:3d:db:00:a0:61:e7:0d:fc:59:b7:01:45:
31:5f:4e:3b:40:89:36:51:54:22:f4:dd:11:dc:b5:e4:00:a4:
ac:1d:bb:e3:c4:f1:67:d6:97:eb:23:de:ca:ab:12:50:72:3b:
2d:28:11:76:98:ca:47:61:10:0d:35:93:d1:9a:52:ea:b4:9c:
08:96:7d:1b:f9:0b:87:f3:0b:bb:c2:ea:f6:8f:1b:28:2e:81:
0e:2e:cb:00:41:d7:96:e8:fb:d8:36:af:63:4d:3d:e5:62:39:
12:45:f7:78:c9:94:b7:05:3b:6a:55:19:49:9b:dc:d4:21:91:
5f:e3:b5:04:8d:e8:e5:93:82:98:8c:2d:a3:4a:a6:21:4a:24:
80:19:42:6d:72:a4:0a:48:34:56:9e:14:a3:08:a5:2b:31:77:
45:66:af:ab:1e:40:4a:72:a5:c0:0e:28:e1:17:36:1d:2f:f9:
b9:9f:83:6e:ed:da:41:64:a1:24:b8:f5:d0:db:7b:3b:ab:1b:
4f:6f:4c:c7:10:ab:37:e8:85:46:19:83:15:08:e5:f7:38:08:
60:65:da:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:14:07 2026 by rpki-client