Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: 9LWftlLla0A+9S0UF4jXQFwXExAnlC141bqYOWXFooc=
Subject key identifier: FF:2B:BE:82:8C:6D:86:FE:21:06:29:2E:AC:76:E0:83:EE:C4:AC:33
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 01A06EDE1B4744250DF65991DE61E676691F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 1A3C
Signing time: Sat 05 Sep 2026 00:00:44 +0000
Manifest this update: Sat 05 Sep 2026 00:00:44 +0000
Manifest next update: Sun 06 Sep 2026 00:00:44 +0000
Files and hashes: 1: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: hxWTBcmMV8rXSc5QwVt7yyCQPfZMqms7BttzDl56CcM=)
2: wBzUUS1esVzgp7-S8WP1zjKAIpw.roa (hash: UgXBz+OKL1MAmpi06fp5fY0KFQ1LRcUZSGp9CfyxDlU=)
3: wjNWOCuY2E1_FvlqggQMJz_Utqw.roa (hash: BberhHSGLHh2AX9W6raGWWWl/q21AJDPsEIrCo+NFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:1b:47:44:25:0d:f6:59:91:de:61:e6:76:69:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Sep 5 00:00:44 2026 GMT
Not After : Sep 6 00:00:44 2026 GMT
Subject: CN=ff2bbe828c6d86fe2106292eac76e083eec4ac33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:fe:f9:7f:f6:bc:01:4b:39:a0:b6:af:b5:
4e:b5:21:0e:cc:ea:f9:73:69:e5:d0:b2:18:2b:2c:
6d:62:56:52:79:7c:8d:ea:07:7d:35:27:25:65:be:
65:d3:e3:7a:bf:8b:84:34:ad:9b:7d:e3:54:25:fb:
12:fe:94:5d:7a:70:95:17:b9:85:b4:86:4e:67:0a:
d2:1d:b1:6d:ee:75:00:6d:02:c4:88:eb:d1:f3:9d:
28:81:d1:d7:ef:57:32:f9:43:0e:a0:26:1f:4f:09:
d6:42:69:55:74:b4:f6:78:18:e0:7b:6f:78:06:d8:
59:37:8d:81:bb:27:c4:60:53:33:83:5e:80:13:f9:
9b:c1:b0:c7:5e:43:cc:c1:42:a1:c1:21:08:6b:8b:
1c:a4:ab:6f:68:50:04:76:c7:b2:51:5e:5e:21:c0:
83:ee:4c:a0:fd:bd:6c:8a:c5:2d:57:77:df:ef:29:
7d:e9:a4:11:24:81:7a:b7:3f:a1:25:e9:9b:9c:ae:
79:44:11:db:04:fa:79:2d:7e:c1:be:04:38:0f:86:
e6:91:0e:b8:5a:0a:51:54:92:4f:6d:e4:7b:73:eb:
d9:08:69:b5:bc:8b:0a:19:6d:03:8a:59:a4:92:86:
62:a3:cf:66:55:16:11:56:fe:c7:25:20:d2:53:50:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2B:BE:82:8C:6D:86:FE:21:06:29:2E:AC:76:E0:83:EE:C4:AC:33
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1a:aa:36:3c:de:dc:4f:f0:2b:07:08:b4:00:02:95:71:b1:
1d:9f:fe:ad:a6:f1:dc:0f:24:4c:d2:9c:b3:f2:68:54:c4:e0:
93:a9:78:fc:7a:ed:39:6a:1c:83:c2:10:98:bc:98:d8:1a:b2:
e5:6c:5d:30:f3:f2:40:e0:dc:99:19:1e:a9:df:a3:ab:8c:60:
5d:e6:eb:74:41:c0:9c:da:02:d1:fa:28:cf:5f:69:9b:ae:f7:
a6:89:ea:61:62:b0:66:00:9a:cf:08:6d:6f:b2:cc:66:58:d2:
c9:01:92:34:57:b3:38:11:9d:d9:d0:26:a7:a1:c0:f0:88:5f:
76:3b:6c:d9:b0:d4:49:05:15:98:60:29:f9:a9:36:6b:55:b0:
5a:99:b1:05:89:91:ab:94:4f:0c:eb:42:f7:c4:8a:b7:51:c8:
1e:51:fe:54:f4:05:c1:48:e1:cd:0f:29:76:ca:aa:77:88:ae:
a7:cb:6e:f0:20:be:1b:ed:1f:08:24:11:36:67:bb:0b:51:78:
70:84:0f:48:90:6b:06:bf:14:80:e9:68:14:69:ed:e0:93:01:
13:be:60:1f:7e:7c:c3:22:a1:32:94:bf:a5:e7:da:a7:eb:7f:
af:d0:91:b4:8d:2a:6f:84:82:d5:ac:7f:e5:b2:e2:cb:72:d1:
ad:50:ab:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:09:59 2026 by rpki-client