Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: QNTkJJm9XkdQrMYra10R8KisA2pj5SYVbnuhWRW85bQ=
Subject key identifier: 77:54:E4:EA:B3:5B:2E:52:56:11:B8:B2:1B:FA:79:5F:7F:7B:BB:A3
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 01A0D9BA38E8C1E67700C7AFE454AAFB5F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 18:00:55 +0000
Manifest this update: Fri 25 Sep 2026 18:00:55 +0000
Manifest next update: Sat 26 Sep 2026 18:00:55 +0000
Files and hashes: 1: BvnR5KCMhsoLCz2hSAnbNfkHGk0.roa (hash: hDwrjYY17s8gLiCt6EYouA8sleyAadnkSLPmIcLH8nw=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: b+NclZVd0pjE1+vBKqnh6uelgUVByZycHBAnSLLbpng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:38:e8:c1:e6:77:00:c7:af:e4:54:aa:fb:5f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Sep 25 18:00:55 2026 GMT
Not After : Sep 26 18:00:55 2026 GMT
Subject: CN=7754e4eab35b2e525611b8b21bfa795f7f7bbba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:d9:0d:df:20:32:df:cc:e4:48:2b:36:e0:
a7:c2:65:8a:29:a8:2e:e7:49:29:c0:05:37:6d:e3:
d2:6a:cd:f1:51:ec:a1:ac:ef:cb:0e:8f:f6:9e:a7:
2a:18:19:32:be:24:12:5f:ff:2c:60:9b:d0:d7:df:
2f:64:a4:ce:e6:d9:33:4b:15:fe:77:c5:b0:30:40:
80:2f:4b:46:5b:eb:78:23:72:89:7e:4f:20:5a:d4:
24:a7:a5:d3:e9:58:ef:df:06:66:57:3c:c7:1f:8e:
0e:c5:25:01:bb:eb:43:85:c4:d5:05:9f:68:06:29:
00:e1:4c:b2:aa:a2:36:29:4a:68:7a:2c:f0:9f:c2:
e6:08:c0:66:47:2c:2a:d4:4c:94:89:e6:18:4f:97:
7a:1f:96:70:20:82:15:c8:ff:e6:64:7e:bc:c9:6a:
99:8b:b4:54:b9:4f:5a:44:0e:81:85:bd:61:01:1d:
09:a4:e2:26:23:f0:76:c9:34:32:7f:9a:44:85:57:
23:2d:40:87:87:dd:75:ab:2b:bc:88:52:13:b1:b4:
50:db:5b:ef:28:52:f1:1f:61:42:39:3a:b2:7c:f6:
40:3b:b7:45:cc:bb:f8:18:ce:df:7f:99:c4:b0:09:
e9:7f:14:b8:4c:58:fd:65:07:96:e8:af:4f:b1:d5:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:54:E4:EA:B3:5B:2E:52:56:11:B8:B2:1B:FA:79:5F:7F:7B:BB:A3
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ee:22:5d:f0:f6:65:dc:94:17:58:42:97:1b:4a:46:aa:5d:
66:e1:f3:6a:f4:87:c5:c9:4c:58:c2:f3:80:7b:a0:61:4e:a5:
4d:7d:ba:95:3b:3e:f5:05:ff:8d:37:ee:c8:c7:68:f4:32:c5:
a4:81:18:e5:a6:36:92:80:29:c2:82:45:8a:65:f4:76:1e:65:
59:fc:76:ae:dd:22:8e:b4:7b:91:f2:f4:81:31:ca:66:9c:5f:
04:e8:d9:95:ad:73:de:68:94:82:6f:0a:67:81:e4:5a:e3:2a:
b3:69:1c:26:4a:9f:e2:c6:39:d0:10:0e:19:4c:a2:a4:3a:40:
a9:69:bf:10:89:c2:ce:09:2b:31:aa:f5:79:10:13:de:78:77:
0f:2d:20:1e:1c:3c:c5:b5:5e:2c:d9:42:0a:0b:40:4e:15:de:
a2:6f:0e:b1:2e:ea:7d:d3:52:a5:f0:e8:25:86:ef:89:e9:11:
0b:6a:f5:ff:39:dd:3e:58:3a:20:8f:7d:bf:db:77:f6:48:17:
3f:91:1f:33:7c:ab:dd:8e:46:83:fe:26:d7:2e:57:fc:64:96:
1a:d5:28:c7:73:2b:4a:92:ee:5b:97:ee:25:3a:5c:ce:0a:f3:
91:dc:1f:a4:2a:5e:a8:0b:85:f2:5c:22:a6:0d:ab:b2:cc:48:
9a:97:2d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:14:04 2026 by rpki-client