Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: TbMFjo3R1w9gtyUBCcgJlwqGWfEgDlBp9gm+nNmaau0=
Subject key identifier: 8A:A5:4D:9E:67:74:95:CA:25:D9:67:93:CA:EA:8E:53:1F:F5:4C:0B
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 019EBF5B04453992F23853EEECA6DDE062CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 1026
Signing time: Sat 13 Jun 2026 05:01:13 +0000
Manifest this update: Sat 13 Jun 2026 05:01:13 +0000
Manifest next update: Sun 14 Jun 2026 05:01:13 +0000
Files and hashes: 1: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (hash: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8=)
2: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: eFw/luwbSGJilJuPRPWyJAIGvZY8uU6TZvh/qiFPQys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:04:45:39:92:f2:38:53:ee:ec:a6:dd:e0:62:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Jun 13 05:01:13 2026 GMT
Not After : Jun 14 05:01:13 2026 GMT
Subject: CN=8aa54d9e677495ca25d96793caea8e531ff54c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:a6:3f:50:0c:bd:18:63:fa:c8:d5:ae:2b:
6f:f4:77:98:6a:e6:fc:d1:aa:31:96:70:05:f7:36:
8e:45:d6:1b:31:ff:3a:d1:9c:fc:51:af:09:83:5e:
d5:5b:4d:b7:42:f4:4a:34:36:96:04:b6:b7:56:ab:
ad:02:5c:7d:01:65:41:3f:62:0a:d3:e6:92:ca:70:
ed:c0:ee:39:ef:38:95:a3:13:44:4d:62:76:0e:c5:
9c:4b:27:f3:7e:7a:20:68:cc:26:91:d6:e9:43:43:
86:05:77:a3:79:cd:37:a8:fb:24:9f:3d:61:3a:5b:
19:4c:1e:9f:43:da:8c:a5:ba:2c:a7:14:62:cd:ee:
a7:4d:b9:cf:34:b4:ba:91:5b:3e:a1:da:53:24:c5:
ae:8c:6d:be:af:c8:51:71:28:40:8e:9b:2d:ae:9d:
9e:c5:86:d6:4f:e3:25:e4:24:90:68:17:67:b4:1b:
6f:e5:e3:ec:86:8c:f4:66:7a:ad:39:5a:ce:35:3e:
9b:a7:bd:f4:27:ec:4a:5f:f3:5a:cb:df:96:e5:6b:
19:e9:a9:0e:03:1f:75:05:68:0b:24:4b:21:a8:c7:
48:67:f6:f0:a3:3c:7f:ab:c5:cf:79:52:24:25:50:
e1:00:c1:23:07:09:01:a8:8f:75:d0:50:cc:f7:1e:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:4D:9E:67:74:95:CA:25:D9:67:93:CA:EA:8E:53:1F:F5:4C:0B
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7d:c1:68:83:9d:c0:81:d3:02:7f:73:bb:0a:c4:66:18:2c:
77:7c:f5:07:85:34:7c:34:3f:aa:1f:5c:f2:74:0a:99:7c:02:
9b:9e:ec:ed:46:9f:8a:6d:15:63:bf:e6:37:9b:b2:97:01:74:
3b:b0:d1:ac:ed:6b:55:b1:08:f9:1c:03:cd:db:20:51:37:68:
28:4c:b1:37:89:0c:06:cf:97:d3:13:43:3f:c4:a4:fb:e5:9d:
32:b2:a5:c7:f1:1f:8e:92:b9:45:9f:de:1e:0b:0e:87:01:6c:
e8:61:79:85:db:96:ff:63:8a:40:bd:ee:5c:9d:7b:47:ae:92:
f7:b2:f8:57:9b:fe:d2:68:5c:34:e8:76:6c:3d:f0:c9:c8:9b:
5f:40:14:42:e3:98:b9:94:92:53:c1:45:1c:52:2d:0c:61:61:
ab:53:1e:9f:49:3e:6f:d7:4c:f8:36:c9:d2:90:51:06:4b:19:
62:75:8a:9d:38:3a:27:7b:35:27:4e:d0:65:f9:92:20:da:2c:
16:49:60:a2:c1:80:31:9e:cc:eb:fd:00:e4:ef:6b:0a:04:46:
d6:e4:c6:7f:b7:81:e3:ef:c7:f6:4d:03:90:54:68:a7:5f:34:
63:38:bd:52:a9:b0:ab:f4:37:be:1e:cc:ab:8e:9c:ad:f4:1a:
88:ed:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:49:15 2026 by rpki-client