Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: H9IBemDmEvN/iZeu4txi81XMGXYgLNohMJvxTiktdrA=
Subject key identifier: 05:29:D5:2C:68:C2:30:68:FE:DD:3C:C2:FF:98:CB:94:F2:3C:DA:A4
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 01A08BD606246ADA1D7A14914BB8B8464A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 19DD
Signing time: Thu 10 Sep 2026 15:00:54 +0000
Manifest this update: Thu 10 Sep 2026 15:00:54 +0000
Manifest next update: Fri 11 Sep 2026 15:00:54 +0000
Files and hashes: 1: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (hash: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: MP08recAuLEoqSgHuTd5NLLm6Ifr9FoOXfVxJj8MX6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:06:24:6a:da:1d:7a:14:91:4b:b8:b8:46:4a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Sep 10 15:00:54 2026 GMT
Not After : Sep 11 15:00:54 2026 GMT
Subject: CN=0529d52c68c23068fedd3cc2ff98cb94f23cdaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:4a:65:01:fc:70:f0:0a:c0:78:c1:0d:46:
58:2b:b8:8f:51:e9:a5:a0:21:17:4b:18:60:55:65:
9b:b5:14:9d:68:4e:d9:d7:32:02:a7:c3:b0:66:e4:
60:b3:6a:82:cc:f3:5b:aa:5f:00:f3:65:d7:63:87:
8f:2b:82:6a:ec:95:bd:24:1a:20:79:de:b2:29:ce:
cc:c4:bd:a2:f4:85:b2:d7:89:34:6f:c1:2a:b3:ff:
08:b1:8d:79:f7:80:85:3c:59:b4:0a:4d:71:3b:84:
4f:ca:cc:cb:8c:a7:da:9e:f2:3a:2c:07:c6:0b:04:
28:b2:18:81:5f:a8:aa:8e:69:a1:67:66:29:42:f9:
1f:7d:a5:ad:7c:9f:ff:9b:fd:69:b0:94:da:12:3c:
a7:3e:26:6d:6b:a7:d3:c1:c5:4f:c5:5e:f3:43:b0:
5a:35:ad:61:e9:51:59:2e:da:6a:c4:c0:a1:49:27:
ad:cd:47:99:14:40:69:86:17:68:a2:a7:27:e9:4f:
17:b1:f1:16:da:3d:e7:5d:71:21:a9:a9:07:b0:60:
63:88:66:23:1c:e3:ad:cf:15:c2:5d:1f:ad:58:25:
bc:85:dd:b9:50:49:6f:73:85:0b:d2:8c:c1:3a:38:
f8:f3:5b:51:02:97:8a:16:82:34:52:76:25:e2:56:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:29:D5:2C:68:C2:30:68:FE:DD:3C:C2:FF:98:CB:94:F2:3C:DA:A4
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6a:31:0f:15:ae:e5:e1:9c:db:3e:68:f7:93:50:aa:18:7e:
bf:e3:1f:b0:85:fe:1b:2c:ec:97:dd:ec:3a:56:dd:a7:bf:08:
b5:c3:e4:e7:16:b4:0c:d4:c5:5c:3c:97:36:97:7c:96:14:0f:
cb:b2:c8:f7:54:64:db:18:2a:05:ba:f9:da:49:6d:3b:47:6f:
ec:c3:39:5d:39:be:dd:3a:53:52:37:06:da:b4:a8:f4:1b:97:
44:2e:fa:be:95:9b:2b:6b:a3:c7:ad:c5:4a:81:c4:4f:d9:f6:
c1:af:c6:f5:a4:c9:49:76:fd:9a:72:34:83:a7:0a:51:d6:90:
4c:0e:e6:ca:c1:19:0f:63:0e:06:f1:3b:1f:d0:c3:58:e6:77:
d4:84:c6:ff:8f:3f:1a:9d:fe:97:02:b9:83:ee:7c:25:fe:ac:
29:41:fc:57:39:89:7a:c2:fd:ed:e2:7e:89:3f:5a:e2:b8:e6:
77:3c:54:f0:98:20:49:b5:56:42:c5:a3:74:4d:05:fc:71:c0:
2a:27:85:17:e1:34:a5:f2:8a:76:e9:d3:41:be:19:90:1f:0a:
9c:ff:ea:2c:fa:e5:29:5a:b5:99:3a:eb:86:75:98:17:9e:eb:
ed:4a:3e:c5:8e:59:2f:97:79:63:ea:81:75:f9:b5:eb:6b:7f:
98:1f:e8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:10:48 2026 by rpki-client