Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: Xqz5B5TGN1CVVFv4SPeMOhoZ0oV85AtBOk5ui5IlqbA=
Subject key identifier: E1:59:99:3D:40:E0:4A:05:38:67:16:3C:ED:EC:7C:B5:4E:56:29:A4
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 019D99D08E8E53969D4DE67F1F913CDCF1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0F8E
Signing time: Fri 17 Apr 2026 05:01:14 +0000
Manifest this update: Fri 17 Apr 2026 05:01:14 +0000
Manifest next update: Sat 18 Apr 2026 05:01:14 +0000
Files and hashes: 1: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (hash: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8=)
2: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: FECvqCsAj7F0shKBZWfos/2eAIh8VibwnLWzIwpGFGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:8e:8e:53:96:9d:4d:e6:7f:1f:91:3c:dc:f1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Apr 17 05:01:14 2026 GMT
Not After : Apr 18 05:01:14 2026 GMT
Subject: CN=e159993d40e04a053867163cedec7cb54e5629a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:68:b3:0e:cf:cd:38:cd:aa:02:39:09:83:6c:
23:57:82:15:64:e4:7a:25:d9:b2:cd:1e:13:86:9c:
35:86:96:94:24:97:21:e1:63:ef:04:c8:50:bf:b7:
ac:29:60:c6:ee:f5:8a:0d:df:d8:40:63:6d:14:be:
58:4c:01:c4:da:11:b0:e3:ee:06:4e:68:85:66:d1:
32:04:c9:95:54:66:1d:7e:83:ee:b1:49:9c:c2:0c:
d0:b3:cf:bf:63:90:7e:e5:34:23:a6:17:ba:94:25:
cc:d5:d7:bf:88:69:50:a5:1b:c6:58:8c:91:49:05:
b9:22:2e:2b:51:57:ca:b2:36:c6:ce:24:a7:68:10:
20:d5:7e:69:00:2f:5c:a7:7b:8a:20:0e:20:a4:0e:
0d:7c:ff:60:bd:c5:04:0a:9a:53:83:7d:d4:76:ae:
50:73:82:da:ee:30:95:42:96:38:f0:ec:2c:95:f0:
a8:74:b8:87:67:1d:6d:71:a6:c9:88:7c:5b:81:62:
e8:1a:4a:10:71:22:f9:cd:6e:ba:2e:ac:40:70:58:
2f:c8:c5:5b:a2:6d:b5:1d:b3:8c:28:2b:57:63:9b:
3a:2d:2b:fb:59:11:50:10:d3:a2:bf:54:75:49:ae:
30:9f:14:35:fa:d4:39:c6:90:94:1e:9b:2d:b3:10:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:59:99:3D:40:E0:4A:05:38:67:16:3C:ED:EC:7C:B5:4E:56:29:A4
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:5d:8b:d2:a6:0a:a9:9f:dc:03:79:c8:52:02:da:d4:32:f3:
4a:b9:45:65:77:85:c1:a5:c3:a4:a6:91:9b:d6:30:82:51:3f:
a7:24:d5:08:f3:3f:e1:51:96:52:1d:80:fb:72:ce:7e:0a:5b:
50:a9:a2:d9:d4:0a:57:87:bd:84:be:b9:b2:73:11:e7:d6:18:
14:31:03:42:57:61:6a:a5:3f:19:f3:88:f0:3e:33:37:c5:05:
a1:e0:a0:b9:64:c4:a1:df:16:71:86:de:f3:15:c5:2c:84:6a:
2d:f7:0e:9a:21:5b:50:c2:11:40:c6:a1:9d:e5:cb:de:ec:4c:
37:a6:e9:99:a7:ad:72:2e:5e:be:62:15:b8:3d:4c:8c:f6:71:
84:bc:2d:70:fc:b1:87:28:b3:96:28:84:46:d5:68:cc:f3:d1:
c9:d4:8f:f6:09:df:67:75:71:f5:60:50:eb:c4:6c:fa:ea:ea:
32:7c:80:08:d5:f7:e6:fc:62:62:ea:3d:53:b3:b4:f6:62:b6:
98:f0:25:8c:34:c4:6b:49:35:9b:a6:ed:51:9a:71:36:1e:ec:
63:d0:ac:9d:12:cd:6e:59:22:31:ce:aa:13:5d:5d:1a:39:db:
c4:7c:ae:18:94:22:d8:f6:09:b3:d9:66:07:98:17:56:1b:40:
e2:6d:ce:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:07 2026 by rpki-client