Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
File: f9gGjnNZlrir5x24LODWupZcJTs.mft (raw, json)
Hash identifier: TVvvGwfphJFV266H1m2LkFoz0SWJBMc/L2eFTX0yGGU=
Subject key identifier: 0C:B1:77:5D:A6:00:C3:EB:86:37:7E:19:9E:46:02:D6:1D:29:E7:27
Authority key identifier: 7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
Certificate issuer: /CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Certificate serial: 019FF97F5484CF5AE642DFD30CF64B9AA543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
Manifest number: 01DD
Signing time: Thu 13 Aug 2026 05:01:39 +0000
Manifest this update: Thu 13 Aug 2026 05:01:39 +0000
Manifest next update: Fri 14 Aug 2026 05:01:39 +0000
Files and hashes: 1: 4wayKTDL0C1-3fX0fDk8_7nVVzE.asa (hash: vPLSw9x0tUrEHh7KFV3i9yLuIjiZTpCl5KAxhMoqI9Y=)
2: FL1sqcRejDIMSh0sMhL_ZqJw4wM.roa (hash: cBRPTc3S/Wcw8/oeYxpadl2du6Hf1WSqA+6+KI3HY8o=)
3: f9gGjnNZlrir5x24LODWupZcJTs.crl (hash: aiLBgVm7BDVkqjTF3VPWy1lnvaq1eXQBB1x/FrbLM+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:7f:54:84:cf:5a:e6:42:df:d3:0c:f6:4b:9a:a5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Validity
Not Before: Aug 13 05:01:39 2026 GMT
Not After : Aug 14 05:01:39 2026 GMT
Subject: CN=0cb1775da600c3eb86377e199e4602d61d29e727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:13:19:5c:5d:b0:ec:9f:e4:00:35:ac:be:
dc:2e:21:e6:7a:d0:93:1f:2a:24:bc:a9:9d:fb:6e:
70:70:7a:48:86:2e:04:5d:b8:f1:73:ec:c7:df:4e:
9a:6a:47:78:c4:c2:d1:9a:52:95:47:7b:ca:d2:99:
90:f1:d4:7c:25:4e:b6:15:27:dc:94:d4:ac:bd:25:
9e:ca:f9:a6:c9:5a:42:b2:27:a8:ed:4d:b2:a5:71:
8c:56:b6:58:2c:d6:9f:ed:03:d8:e7:99:85:c3:f3:
73:88:1a:8c:5e:9f:ec:b1:df:5a:58:fd:a6:e1:11:
fd:be:ca:a3:df:4d:f7:e3:07:38:64:cb:f3:6c:2f:
97:58:aa:fa:36:6b:df:95:27:75:25:3c:95:b6:fe:
fb:9c:ae:a1:63:23:e5:e0:29:29:c4:8f:07:ee:4a:
28:dc:b7:ab:ca:92:d5:33:c3:47:06:dd:f1:76:3b:
52:76:b7:e0:cf:35:2f:bc:4f:96:b4:5a:b0:67:e7:
2c:f8:95:c5:67:99:7e:c0:56:56:60:d2:c8:b9:43:
9b:55:70:09:d6:61:84:51:a1:cc:3c:b6:a0:89:68:
9c:fa:5c:14:33:25:5d:6c:42:63:58:44:57:bb:79:
f0:50:10:86:6d:b5:dc:b8:53:b4:58:69:81:c5:d2:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B1:77:5D:A6:00:C3:EB:86:37:7E:19:9E:46:02:D6:1D:29:E7:27
X509v3 Authority Key Identifier:
keyid:7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a7:3b:1c:b0:10:5d:2b:aa:b5:a3:25:15:96:b1:4a:9c:06:
9c:b1:f8:d9:4a:af:4a:61:b1:c9:a5:9e:39:4b:b6:2d:8a:f9:
71:74:f3:c5:27:c0:1a:ee:a2:14:43:52:25:c2:a4:55:44:8c:
af:6e:29:36:83:5c:56:12:f6:82:b2:d4:36:74:65:11:d5:89:
a7:d8:35:44:1a:29:ca:9f:be:2c:3a:b7:22:04:a6:c4:af:b4:
7f:4f:12:3d:7c:8d:a5:2f:36:b9:f1:89:84:1e:a8:08:8d:ff:
e4:b5:55:9d:a3:23:9f:22:78:e0:4a:7d:87:6b:3e:bc:9b:1d:
15:e3:7a:83:89:51:c1:07:60:ed:7b:b9:a2:72:b4:f9:6f:96:
4e:7c:4d:32:2c:d9:dd:9d:0a:23:23:0c:4e:47:75:1e:cd:af:
3b:41:20:16:79:a4:4d:f2:a0:01:25:6d:cc:a0:63:45:1f:3c:
44:00:c1:74:c8:ff:9e:fa:18:24:08:e0:8b:98:46:d1:c7:81:
08:1a:1f:22:d6:9e:d1:19:04:11:c9:37:4a:f0:76:02:bf:46:
d8:0a:af:91:da:87:ac:c9:0a:8d:bb:49:40:5e:be:e5:1d:a0:
9f:f0:1d:63:4c:e7:30:28:1c:b9:86:26:6a:96:c2:3f:f3:9a:
0d:fa:02:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:05:10 2026 by rpki-client