Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: VJOZtxZXivKl5mTOIGaWBo4RpNdoE5QvMDImQfrt7J4=
Subject key identifier: 4F:C4:E8:F0:BD:3D:44:2E:D1:CD:2B:4B:D4:C8:7E:42:26:44:63:98
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 01A08CB21768292963CE77E6834F1D6CC96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 0559
Signing time: Thu 10 Sep 2026 19:01:16 +0000
Manifest this update: Thu 10 Sep 2026 19:01:16 +0000
Manifest next update: Fri 11 Sep 2026 19:01:16 +0000
Files and hashes: 1: 1LsBmA-SbOfGa2eleJLL4F-PoS0.roa (hash: fOsQjw7Bt8zL6Bscj5Hp28N4r7Zpof4N2iXErdaa6yA=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: x0BhNvYPTsugHLKvFkwoxiB5CXiYsjZWAPSDKp+WQBM=)
3: yUSfqsPPl1YTQhIE73fMTmMnfkE.roa (hash: yAZHs4HcwBg1li8wEtRge9Bo9Q1pztQUu5urOyY+7Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b2:17:68:29:29:63:ce:77:e6:83:4f:1d:6c:c9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Sep 10 19:01:16 2026 GMT
Not After : Sep 11 19:01:16 2026 GMT
Subject: CN=4fc4e8f0bd3d442ed1cd2b4bd4c87e4226446398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:72:21:3d:eb:96:41:62:1d:fe:36:61:00:
98:ef:a4:a9:16:d8:7a:ea:78:05:98:a0:91:36:63:
4c:da:d2:29:4e:c0:a5:e5:ea:3d:21:b1:24:20:a7:
64:d3:53:bc:4b:e3:74:4a:2a:d0:0b:48:15:ed:36:
6e:47:d9:09:d9:b9:14:ed:27:d5:f4:c3:9c:10:2b:
1c:01:01:63:39:e7:34:7e:84:a4:76:7a:9b:d5:e6:
d8:55:ce:2f:6e:de:f8:f3:9d:49:67:ff:ca:c8:b9:
08:aa:6a:88:0d:38:40:c9:95:8e:88:11:e4:2c:b2:
ce:95:73:da:08:de:16:9e:09:a6:86:d1:07:4c:20:
b5:7f:9f:d6:5a:f8:05:47:01:8d:94:79:d3:11:9e:
c5:24:d8:35:49:53:72:4d:cb:3d:50:e6:c6:40:46:
93:a7:13:e5:5e:e4:17:22:03:ac:1e:4c:ae:5d:c4:
a2:33:ab:7d:53:1e:81:f7:c9:85:d0:0b:1a:9d:5f:
05:23:42:eb:5a:6c:c6:c8:6b:fd:09:43:3f:ae:8d:
4a:8c:71:c3:00:e4:3f:cc:16:a6:b8:2c:0b:2b:a9:
55:e8:28:49:9f:5a:3d:9b:6d:fb:da:da:70:ab:ee:
d9:63:b0:5d:7f:76:95:72:b0:f2:01:9c:9d:cc:58:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C4:E8:F0:BD:3D:44:2E:D1:CD:2B:4B:D4:C8:7E:42:26:44:63:98
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d8:45:94:46:4c:cf:97:16:2f:bc:53:45:27:78:55:c6:28:
7a:44:10:9e:b6:7d:a2:13:40:b4:67:30:a0:1b:3b:97:a1:5a:
d4:35:ba:fa:d7:26:5d:a4:50:7e:7f:3e:d2:91:a1:9c:7e:22:
6a:a0:9e:cb:da:7d:76:e2:49:37:be:c0:ae:fb:c3:d7:93:e0:
f6:b0:b8:55:a4:85:79:43:8d:fc:d7:bc:ef:77:4f:e7:37:d2:
18:89:f8:5f:9f:be:ce:26:cb:2c:f2:84:ee:83:b7:34:a0:d5:
9c:77:9b:7f:da:de:cb:7e:37:19:c0:af:4f:55:c1:eb:80:17:
af:65:92:bb:d7:9d:3f:86:11:19:48:f7:a3:65:13:57:78:58:
a7:48:d1:19:36:95:06:06:7b:31:a6:f1:fd:d1:ae:f3:5f:67:
c0:28:95:ea:02:02:64:c7:9a:5e:e1:fd:89:86:9c:75:11:12:
cf:be:22:7e:da:d6:36:09:f8:ae:c1:71:f6:68:26:36:8f:6f:
16:1a:82:f3:5b:97:14:8b:fd:06:c6:40:43:a5:1d:ee:77:ed:
f2:30:64:70:b9:12:13:68:e6:48:81:ff:9a:e5:0e:bc:9e:e6:
64:d3:e9:08:b2:5a:5a:1b:15:17:b2:7d:7c:b9:44:f0:9a:53:
72:63:11:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:32:34 2026 by rpki-client