Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
File: rFxTEhWE19himH8m_3vtWuE4FqE.mft (raw, json)
Hash identifier: 0P80esWX+tvdJEpP5u6T2ZqrmC5IV6t3Vp9fTHns1sQ=
Subject key identifier: D3:9E:4E:D7:A2:9F:D1:25:B8:7A:CA:86:2F:74:D1:F0:EF:CD:67:88
Authority key identifier: AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
Certificate issuer: /CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Certificate serial: 01A07D3F14B5CA7C2BC045066DCD1043A411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
Manifest number: 0406
Signing time: Mon 07 Sep 2026 19:01:21 +0000
Manifest this update: Mon 07 Sep 2026 19:01:21 +0000
Manifest next update: Tue 08 Sep 2026 19:01:21 +0000
Files and hashes: 1: Ln3OJ6zDWx7Blw5HCll4po4CH-M.roa (hash: BZd7Kwg87H/bospWBtm/c29GcUHDV3xSrqHEL2bm8Hg=)
2: rFxTEhWE19himH8m_3vtWuE4FqE.crl (hash: J2kS3QG2r6powxAOhCStYC8KJ0f8KdPe0MZ5RkYiv1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:3f:14:b5:ca:7c:2b:c0:45:06:6d:cd:10:43:a4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Validity
Not Before: Sep 7 19:01:21 2026 GMT
Not After : Sep 8 19:01:21 2026 GMT
Subject: CN=d39e4ed7a29fd125b87aca862f74d1f0efcd6788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:c9:e0:7a:70:fd:2a:9b:71:98:d7:8a:d9:
39:52:76:ad:f6:82:44:d2:aa:01:a5:f5:f9:a1:c3:
54:10:42:46:3f:06:d8:a1:b2:fd:d6:57:b8:2a:5b:
cc:6a:05:46:99:be:f2:69:24:ed:9f:cd:c8:3f:85:
bb:57:2a:31:cd:a8:f7:5d:82:da:46:fa:cd:b5:39:
b6:72:86:b5:c7:74:bf:23:cf:ca:af:dd:6c:c3:5c:
49:6d:73:2a:7c:92:e1:44:7f:76:54:e0:21:23:d2:
c4:5d:50:d6:e4:2c:23:9e:a7:c1:d8:5e:fb:f1:a5:
3f:2c:a4:5c:ec:fc:6d:05:93:66:a9:ef:46:45:03:
b2:51:46:35:b1:ab:45:85:67:2c:7e:5f:05:a0:f2:
18:ec:43:3b:e7:6f:60:2a:82:ab:a2:74:38:e6:76:
28:51:36:ea:8e:c3:33:c6:b2:fe:1d:c3:06:8d:fd:
01:af:fa:7f:89:07:b9:35:4f:f0:ac:62:6d:11:66:
b5:d4:8e:c2:9a:76:a2:ab:51:e2:c4:16:c2:a8:47:
3f:51:26:74:af:6b:28:10:c0:ce:00:af:58:7c:76:
64:8c:4c:7d:09:34:c2:42:5b:cb:ee:61:b1:da:c1:
f4:74:31:22:5a:33:76:0f:06:12:79:59:b3:eb:c6:
61:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9E:4E:D7:A2:9F:D1:25:B8:7A:CA:86:2F:74:D1:F0:EF:CD:67:88
X509v3 Authority Key Identifier:
keyid:AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a5:5f:3e:90:27:00:ee:f3:78:53:b9:2d:5b:a1:d8:91:c1:
8c:0f:f5:2c:ef:31:19:11:f5:3e:2d:eb:5e:1b:32:ab:67:f0:
66:4a:1c:e4:c9:16:98:37:0d:34:0d:7f:f3:59:7e:67:1e:f2:
ab:db:52:bf:90:42:57:e5:01:8e:d6:64:5f:1e:aa:2c:77:2b:
67:1b:d6:b7:fc:9b:68:34:53:f3:f7:15:c9:99:08:98:e7:fe:
c5:c5:62:51:01:d4:eb:fc:df:53:75:42:0e:82:d2:a4:36:ed:
78:6e:08:ce:78:f5:10:0b:77:c3:f4:0c:8a:0f:e2:d1:a6:c5:
ee:9d:13:27:34:36:ab:79:40:2c:d7:80:97:62:88:65:b2:13:
bb:56:3b:a0:17:ce:b8:73:fc:5f:8e:0e:bf:60:4e:94:9e:b3:
8c:b6:fd:d6:9c:28:92:29:3a:a8:31:f3:9d:66:19:26:d3:94:
7a:29:45:b0:5c:8f:27:d4:a0:2b:68:2c:03:a2:a2:a8:60:6c:
47:cb:9f:2f:bb:8f:91:dc:be:16:6e:a9:10:85:c9:c2:2e:c9:
49:b3:ad:77:b7:ab:17:5a:a4:23:9c:19:24:9e:69:5c:86:18:
15:96:e0:93:55:72:72:87:f8:28:e5:9a:0c:be:76:21:3e:1b:
3a:13:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 04:02:22 2026 by rpki-client