Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: QmJKrcTGIDnRtkvkAGc3pFMkQ9wuxLjFncR9rPQyKw8=
Subject key identifier: DA:B5:B2:59:76:FB:07:CD:B6:D3:8F:5D:3E:65:D6:1F:2B:A6:5B:54
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 01A17B4D9A7C9044EDAEA0ACF7D4C0FF35BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 1A59
Signing time: Tue 27 Oct 2026 03:00:45 +0000
Manifest this update: Tue 27 Oct 2026 03:00:45 +0000
Manifest next update: Wed 28 Oct 2026 03:00:45 +0000
Files and hashes: 1: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (hash: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: 1gEm0gdWxrkFmoTApncIRnyEFENGZVrj4ddPX+Uyl7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:9a:7c:90:44:ed:ae:a0:ac:f7:d4:c0:ff:35:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Oct 27 03:00:45 2026 GMT
Not After : Oct 28 03:00:45 2026 GMT
Subject: CN=dab5b25976fb07cdb6d38f5d3e65d61f2ba65b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:c7:4e:d0:18:bb:0a:16:7f:9d:db:bd:0e:
00:50:c4:ae:99:0c:1d:5a:1c:36:05:15:7d:b1:7c:
4d:97:f6:93:92:93:04:f5:a5:dd:7c:32:01:fe:80:
cf:c1:0e:02:62:e5:2d:36:43:a2:01:24:8d:41:4a:
fc:bf:e5:ec:8e:84:25:8a:a5:1b:15:1f:90:15:50:
cf:c5:f4:79:ca:0a:c1:9d:a6:f9:ec:be:ad:7e:7d:
8c:e5:61:50:18:46:e1:a6:10:49:1d:05:ce:41:c4:
79:79:7a:cc:43:20:b1:d6:53:51:80:66:86:93:c1:
5d:df:d1:29:82:33:54:6f:56:9d:b5:93:08:4d:3c:
65:d3:18:36:00:d8:0a:b4:38:f0:10:09:31:b0:c8:
1e:90:fb:d6:55:eb:31:04:33:a2:2f:3c:8e:86:c7:
bf:6a:5d:a7:84:10:3c:69:a6:45:a1:e2:af:42:41:
15:7b:1d:3e:fb:ce:df:09:b1:28:4a:7c:ee:50:3d:
b6:1e:51:2e:ac:18:ae:a6:76:15:d4:13:e8:62:b9:
de:11:73:5a:bd:00:81:46:59:30:a6:f0:8c:ed:9b:
9e:7e:88:9f:2b:27:fc:e0:80:39:07:85:96:c5:5b:
19:b1:3e:99:e9:59:f4:2b:fa:bb:28:0a:04:28:f2:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B5:B2:59:76:FB:07:CD:B6:D3:8F:5D:3E:65:D6:1F:2B:A6:5B:54
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:29:44:67:9b:01:19:eb:eb:8e:80:d4:60:40:bd:bb:49:ee:
e8:ad:8e:18:12:76:6b:d7:3b:14:be:b0:f7:b9:fd:44:11:57:
69:5e:6a:21:9a:32:46:ca:d1:ba:22:76:71:61:17:4e:af:b2:
7e:6f:4d:9e:c5:16:24:21:90:4e:57:b6:fd:73:b3:9f:4b:48:
34:0b:46:a4:5f:e2:5b:88:20:96:34:51:47:81:a2:dc:17:8b:
12:26:b6:c1:f7:90:f3:93:2d:2b:44:d8:6f:8a:33:a3:d4:c1:
ee:59:d5:0e:11:03:83:b2:2e:39:ea:58:d6:51:c9:34:a4:86:
68:ca:7b:72:75:1c:08:d6:a4:f1:37:d0:9b:fb:c3:0a:ab:f8:
c1:92:3b:14:b0:3c:0f:67:e1:a6:14:6e:5d:ed:a0:17:a4:31:
38:7d:a8:d6:c9:50:b0:01:68:9c:12:f1:8c:61:cb:c4:73:a3:
a9:f8:47:6d:9d:e9:44:06:83:68:b1:6d:55:dd:ad:71:83:58:
ba:c4:01:f7:38:db:d6:a3:36:16:bf:b1:a4:4d:14:c9:90:80:
97:20:c0:6f:da:f5:4d:f3:e5:23:b8:55:5d:44:30:ad:d7:5e:
4f:5c:e6:f6:97:e6:95:a9:7c:44:6c:53:32:ff:2b:45:77:12:
e2:47:0b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:44:19 2026 by rpki-client