Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: pJK5zjK50/JSOgO2Ki5ffyKVcPX5/lBFuFsyF7R5ccM=
Subject key identifier: 77:3B:72:D6:9C:1A:C6:A3:D9:52:D8:B5:BE:46:5B:12:01:F0:71:11
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 01A089B0F03A60BA4D621FD55EF32083FAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 0676
Signing time: Thu 10 Sep 2026 05:01:09 +0000
Manifest this update: Thu 10 Sep 2026 05:01:09 +0000
Manifest next update: Fri 11 Sep 2026 05:01:09 +0000
Files and hashes: 1: L5BfioWz08XOKOc7LGuDTFScCDM.roa (hash: oJjcndnAKImb4AebXhMuHLKYhu0NzBboRQfoXDCNW0c=)
2: Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa (hash: vf8tQnW7oqoTXI/ZHAP1eVwRqXSdr72IdtoqliIf4Ys=)
3: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: 8KmbEhkKVaNVKSsYdnS36cKO8C1Vj21aFyfAJEMacOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:f0:3a:60:ba:4d:62:1f:d5:5e:f3:20:83:fa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Sep 10 05:01:09 2026 GMT
Not After : Sep 11 05:01:09 2026 GMT
Subject: CN=773b72d69c1ac6a3d952d8b5be465b1201f07111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:90:0f:74:b7:95:36:cc:7e:16:1f:05:57:
f0:9c:46:a4:ea:78:c2:d8:7a:5c:f4:6a:cf:cd:94:
22:56:21:cb:fa:06:db:a5:03:ab:cd:39:2e:20:5d:
12:73:5b:9c:43:61:f8:50:e2:57:e8:16:0b:62:8c:
06:50:a5:16:07:93:5f:5e:b3:70:fc:9e:78:01:df:
a1:20:3f:4b:b2:52:b3:87:d4:32:7c:01:77:47:20:
bf:1f:22:90:36:01:e2:a2:74:7a:cc:2c:51:93:b8:
f2:d3:54:54:27:a0:ed:7a:b8:c0:21:6c:de:ce:36:
25:96:0a:c1:2d:9d:70:70:cc:9b:59:11:9b:66:00:
6d:4b:a4:fb:5d:f6:b8:4f:e3:00:28:6e:ac:1c:e2:
ee:79:88:a9:95:fd:7d:f2:1e:f2:1d:5a:91:92:c4:
08:e9:8b:42:1d:93:da:b9:b4:21:a4:50:f1:0f:f7:
ad:3f:d2:75:c7:2f:a9:f3:fa:4f:14:fb:8e:05:57:
07:8f:95:8f:6a:37:9b:95:54:b8:c8:c6:66:ef:47:
6f:c2:f5:4e:0b:a2:dd:52:48:32:fb:d7:84:d5:d0:
42:79:c2:85:7c:cc:2e:6e:a1:49:b2:cf:37:d1:ae:
20:5c:83:79:75:c6:2c:9c:8f:71:6d:77:1c:ea:02:
81:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3B:72:D6:9C:1A:C6:A3:D9:52:D8:B5:BE:46:5B:12:01:F0:71:11
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b6:8e:0d:eb:da:1c:79:da:11:9c:33:fc:ab:64:75:29:e5:
57:79:83:ad:3d:03:ff:23:e5:c2:ac:3d:95:4e:ef:7d:26:12:
bf:7f:cb:9c:67:f9:5a:d8:4e:24:0f:7e:fa:a9:55:3d:32:6e:
95:09:03:a4:44:b5:99:7b:94:6b:f3:36:82:c9:67:7a:fe:da:
8e:94:26:ba:ce:5c:b2:bb:31:6b:46:4f:d2:a0:08:8c:76:97:
e1:ec:97:db:95:0f:87:d9:0e:c9:a0:11:77:ec:c4:85:07:8d:
12:52:42:e0:cc:79:9d:1c:59:0a:df:65:29:29:09:9c:ce:b6:
bf:31:fd:17:d1:97:f7:49:33:af:f3:da:10:c1:4d:3b:b0:4b:
3f:74:1f:4d:b2:e7:d8:0f:52:f4:fe:3b:75:75:1e:42:16:3d:
3a:7b:bc:7f:d5:10:7b:dd:5c:c4:a9:d3:26:35:73:0e:7d:9c:
40:84:65:b6:33:3a:d0:05:6f:cb:f0:e6:b3:56:73:8b:43:56:
60:4d:2f:b5:17:4e:10:f5:d3:c3:15:6d:45:0a:b6:ca:73:72:
0d:83:5d:79:b8:06:e9:61:58:d1:61:7a:0d:5b:0d:f6:f0:3e:
93:74:33:2e:26:c2:16:3e:57:52:a2:bc:3b:50:55:42:be:a1:
cd:08:98:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:58:51 2026 by rpki-client