Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: MYrN1v7pyfDI1nUTrNIwW5Bg+h1dLdpgAzhgiZRV3CU=
Subject key identifier: 5F:05:F0:16:3C:19:F7:30:7B:B7:33:08:83:F4:97:0D:BA:81:3E:B2
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 01A0C2FB5C19A8AA697830ADCA1645D5A85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 1131
Signing time: Mon 21 Sep 2026 08:00:48 +0000
Manifest this update: Mon 21 Sep 2026 08:00:48 +0000
Manifest next update: Tue 22 Sep 2026 08:00:48 +0000
Files and hashes: 1: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (hash: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8=)
2: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: onBl2RqiiZRz4un/cX4JdR35IuMsmK3HhVVNSqvwgWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:5c:19:a8:aa:69:78:30:ad:ca:16:45:d5:a8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Sep 21 08:00:48 2026 GMT
Not After : Sep 22 08:00:48 2026 GMT
Subject: CN=5f05f0163c19f7307bb7330883f4970dba813eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:4e:13:ec:e1:75:80:11:83:1f:d0:d8:e5:
b7:c7:7f:ad:75:69:6c:8c:46:0f:59:af:70:1b:ab:
a6:29:f7:60:54:4e:cd:86:40:7c:77:20:29:8b:03:
8d:ba:02:c6:49:c9:2e:14:f6:d1:4a:2a:ca:42:cb:
fa:f7:ab:1a:75:f9:7d:3e:36:17:90:d7:77:fd:98:
c9:5b:22:fe:73:9b:68:e9:f6:04:74:0f:6e:ba:ee:
5c:f4:6d:da:4c:a7:1b:ae:1b:d3:e0:16:91:9b:5c:
18:ff:6e:27:3f:60:bf:68:42:3a:8f:55:bb:bc:e8:
02:8e:1c:a6:cb:a6:f7:d8:82:2f:2a:a5:4e:bc:b6:
76:23:70:71:9d:2f:4c:60:14:47:bd:49:21:2e:4c:
59:b1:6d:0c:34:cc:5f:f0:7a:15:03:a4:9d:ec:01:
d8:75:84:49:f0:77:d5:40:65:19:c0:db:5e:01:01:
0c:48:a1:d2:ed:f5:f9:af:3a:a6:92:68:96:c0:c9:
56:e7:67:a5:ab:15:93:56:c2:10:74:53:a9:22:72:
94:67:88:d3:0a:de:c3:11:ca:b9:be:6e:cc:33:46:
dd:5f:c0:71:c9:34:23:eb:73:03:7b:e1:6d:93:06:
3d:f0:9e:fa:17:a1:a5:79:22:47:d0:6c:51:e9:a4:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:05:F0:16:3C:19:F7:30:7B:B7:33:08:83:F4:97:0D:BA:81:3E:B2
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:21:30:51:3c:dc:d2:61:8d:e6:3c:60:73:c7:0e:9a:c5:67:
84:f3:a7:d9:1c:2c:02:75:1a:50:04:83:7a:3c:b8:a0:70:bf:
71:4f:0f:64:76:b6:33:4f:cb:7d:c1:90:2f:1a:c2:04:8a:f2:
54:67:d6:94:df:a2:77:4d:ee:b3:2b:46:f7:6e:f3:81:a2:02:
bb:39:d5:71:03:8c:3f:6e:26:4a:81:ae:7f:cf:f7:bf:4c:e0:
f9:e2:4d:9c:7d:a1:6f:82:df:cc:3b:ea:3a:43:df:6f:7b:ad:
d9:21:2b:49:88:ed:51:f6:28:53:2e:9c:77:7f:0f:36:74:00:
36:84:ca:83:6a:05:3b:18:18:4a:2d:ce:63:71:26:e7:be:91:
b8:b9:9b:8c:7f:6b:b5:9d:02:e7:28:87:e7:f7:fc:c7:96:5a:
2e:7b:3d:10:f2:06:6b:75:6a:4b:17:07:4f:4b:4c:75:7e:9c:
0c:8b:19:87:37:cb:6e:00:b0:14:0c:30:12:f6:1a:95:88:ab:
b2:a0:8e:c3:67:b6:67:cc:85:ed:08:41:30:50:f9:3c:24:68:
a6:6a:90:b9:79:71:1d:4c:3f:cc:25:e3:46:c2:51:51:7b:ec:
d5:0f:82:de:97:79:f9:bd:df:a1:a0:17:65:f7:b1:dc:b0:e3:
b9:80:9e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:57:38 2026 by rpki-client