Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: 3ZPpl5es5zkDuwR5DQu9n3X061itsTRcsYKgy+gKBCI=
Subject key identifier: E9:60:00:AC:FB:3B:5D:AF:A5:7E:4B:34:66:7E:F9:59:3A:75:75:DF
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 01A09C92B8AB44B57A9413B4241722F9DD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 1A50
Signing time: Sun 13 Sep 2026 21:00:56 +0000
Manifest this update: Sun 13 Sep 2026 21:00:56 +0000
Manifest next update: Mon 14 Sep 2026 21:00:56 +0000
Files and hashes: 1: HeTj1rlCLTtvBYW1onGZ7LauPQY.roa (hash: weFl57AveWg1aEff8nmfajyotthwbCTL0U0EBzxk8Zk=)
2: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: KKeNJwfc9RsBvM4oiumxawbscb7k7LTbY577MDVJRf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:92:b8:ab:44:b5:7a:94:13:b4:24:17:22:f9:dd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Sep 13 21:00:56 2026 GMT
Not After : Sep 14 21:00:56 2026 GMT
Subject: CN=e96000acfb3b5dafa57e4b34667ef9593a7575df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:af:b6:8d:c1:5b:04:cd:52:b9:55:4d:92:
35:b5:a7:69:0b:0b:37:f5:d8:d4:ac:97:a6:a1:a0:
35:7a:85:6b:df:3a:67:2b:59:e5:6c:7a:8d:9c:29:
45:ca:11:c8:66:54:59:50:39:82:cc:92:df:f3:12:
7c:c1:20:b7:ed:d9:72:83:99:8f:4f:39:cb:21:94:
ec:d6:0c:3e:eb:aa:36:d9:20:1f:df:76:1a:3c:41:
f4:29:1e:fb:ad:5a:20:6f:f6:ac:67:6a:3f:6c:58:
22:53:53:be:db:28:f5:01:46:02:93:be:d6:a2:5d:
3a:39:99:09:b4:61:be:1a:1b:4e:2c:dc:f5:6f:25:
f1:1b:08:2b:82:a9:0c:27:72:b3:f3:1f:9e:44:73:
a0:e2:a8:11:e9:57:b9:22:8b:39:38:3c:4b:b4:30:
bc:17:3c:23:9e:34:6a:4a:08:20:07:e2:0e:ae:26:
37:64:7d:45:0a:17:c4:12:6e:da:e5:05:d4:1e:06:
2e:8e:03:96:5d:4d:f0:56:e4:f8:71:2c:9e:37:c8:
81:6d:f1:4f:26:1a:ee:cc:cf:bc:c8:ca:7a:a9:dd:
33:b5:aa:0a:69:92:16:84:ee:5b:78:51:6e:04:15:
ec:5c:7c:b3:b8:74:c5:70:14:93:ec:05:a4:70:01:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:00:AC:FB:3B:5D:AF:A5:7E:4B:34:66:7E:F9:59:3A:75:75:DF
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1c:c6:21:c5:24:83:3e:a5:12:37:b6:38:c5:28:a2:b6:61:
68:fc:2a:88:c3:fb:85:0d:b5:e6:ea:1e:4d:46:a9:3a:2e:e5:
52:ab:96:8b:c7:1e:95:13:f2:46:22:58:29:c9:d1:d7:3f:25:
32:f9:ff:8d:13:0d:4e:12:54:29:f0:fb:7f:1a:8f:13:2c:ff:
47:45:ae:d4:1c:6b:e1:d9:27:23:ab:27:88:f3:02:d4:fc:7c:
1c:b4:8d:1c:33:48:c3:7d:31:2f:3a:1c:45:df:4e:06:91:44:
d8:b0:7b:06:9d:c4:1a:4a:f6:c4:89:c7:aa:f4:70:c4:d8:05:
65:16:18:d2:9a:24:ce:e5:25:dd:fd:db:d8:a9:c5:a9:18:a7:
ef:e4:4b:23:e5:3f:6c:64:88:5c:d2:09:84:fc:df:33:7f:e4:
56:fe:42:fa:32:f8:31:c4:fd:48:b4:da:25:9d:8c:fa:9c:e2:
04:32:64:a2:db:45:42:90:f1:ce:a0:33:37:66:ab:f0:1c:66:
e6:33:4d:d2:ee:e5:53:eb:6f:58:d3:d6:94:ca:c3:d3:70:f8:
bc:1c:11:1a:dd:2a:64:52:da:81:ce:31:2d:91:34:56:50:57:
64:08:12:b7:53:97:c3:e4:90:1c:46:e2:d5:0f:58:4e:d1:48:
15:6b:f9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 03:32:04 2026 by rpki-client