Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
File: sFcIRcI56ZkcibxcUEMekIeGDE0.mft (raw, json)
Hash identifier: llXRDvewVxsoWhgsjShIU7Y9+v0c3sqZHNCQT1aFpkc=
Subject key identifier: CC:47:57:A3:26:D9:16:81:93:CF:6C:54:A5:48:14:6C:7A:63:8F:56
Authority key identifier: B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
Certificate issuer: /CN=b0570845c239e9991c89bc5c50431e9087860c4d
Certificate serial: 01A03DF1CE9D4CCB12588E946A6C79DC0932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
Manifest number: 04A9
Signing time: Wed 26 Aug 2026 12:00:52 +0000
Manifest this update: Wed 26 Aug 2026 12:00:52 +0000
Manifest next update: Thu 27 Aug 2026 12:00:52 +0000
Files and hashes: 1: InFnBGmGL8Q0FS0kuwygTEx8_Lw.asa (hash: zLqLkWTB98DOsRwXQTGdXmZzjw6dskDN5dpYGFPv88s=)
2: K-YLwRkSzVEmaijGrfpAVzJifJ4.roa (hash: L8Lz36nzwl/37ohmXFXYr583fjOX5wiDRQZnOouDtTE=)
3: sFcIRcI56ZkcibxcUEMekIeGDE0.crl (hash: uDnP6NnBqogKZGqeeN9s+4wTILFLo5wd4SdssTowsy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:f1:ce:9d:4c:cb:12:58:8e:94:6a:6c:79:dc:09:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0570845c239e9991c89bc5c50431e9087860c4d
Validity
Not Before: Aug 26 12:00:52 2026 GMT
Not After : Aug 27 12:00:52 2026 GMT
Subject: CN=cc4757a326d9168193cf6c54a548146c7a638f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:29:ec:fe:46:09:83:3d:5f:ac:06:35:2b:
2f:ba:cc:f7:90:99:c2:fa:52:a5:03:54:2e:ae:25:
28:c2:a0:f0:15:77:e9:03:40:6d:5e:74:4a:f2:cf:
86:c0:19:d6:2e:7b:c2:a1:58:ef:c1:56:1f:dc:bb:
bf:83:09:c8:56:6b:2c:24:4c:7e:d1:58:83:b0:ca:
2c:05:52:d4:45:d2:4e:f9:90:9d:5e:3d:dc:4d:91:
07:8d:8d:8d:79:a4:5e:6b:83:82:b1:ae:d0:47:77:
1e:ff:63:7f:78:a5:18:60:4d:79:91:67:64:3a:a3:
da:fe:8a:f7:05:bd:bc:c6:a4:25:97:f2:ea:5a:1b:
76:4b:d2:66:c0:54:a3:28:37:36:34:b7:0d:1c:10:
43:8b:3f:08:e1:b5:3f:0f:3f:55:f1:1c:5e:e8:cb:
f8:a6:cc:59:39:94:d8:f4:32:54:e7:b8:28:3c:a7:
9f:2d:81:7e:e7:75:3f:bd:32:d8:bd:39:4c:4a:ff:
2b:23:bf:26:df:a5:2e:72:d0:44:3e:aa:db:71:d2:
cb:b6:90:ad:d1:d1:17:ae:94:4f:a8:d2:b7:e5:8b:
53:0a:7c:c0:3d:fa:fe:e4:8f:46:6c:37:3a:76:4f:
17:1c:9d:95:61:88:41:e6:af:44:e1:fa:5a:13:8d:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:47:57:A3:26:D9:16:81:93:CF:6C:54:A5:48:14:6C:7A:63:8F:56
X509v3 Authority Key Identifier:
keyid:B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c0:33:39:c7:88:12:82:1a:f3:93:30:c8:21:48:c5:72:fb:
8b:58:1c:06:34:ae:6b:a9:4e:5e:78:9c:1c:52:c2:17:b1:f3:
6d:1e:ca:6c:c1:72:be:de:64:2e:7c:87:f2:c1:b4:63:9d:3d:
cc:b2:a7:5f:a7:3c:d2:7a:3c:d3:05:6d:9f:50:32:d1:2c:61:
9f:f8:a7:a8:fd:2d:f4:58:02:44:81:75:02:80:0f:61:e1:60:
e4:44:83:66:08:3c:08:11:11:9a:8e:32:8b:84:18:06:71:4b:
ee:86:42:83:15:36:30:01:b4:4c:6f:bb:f6:1a:47:3d:ba:0d:
54:81:07:92:cf:e6:c7:5a:9d:9e:ed:39:ab:5d:aa:f1:6a:bb:
66:21:5e:c4:98:4e:37:ae:f4:99:39:e4:6f:7a:11:3c:a6:6f:
5a:e0:80:f0:c2:7e:55:96:c5:89:14:68:0c:a4:c2:83:90:67:
3f:7c:af:e8:df:f1:4f:da:3f:f1:72:87:88:d9:8d:e6:ef:7c:
70:9a:86:a4:4a:8d:5d:35:67:49:e3:80:22:8c:a3:7c:8e:e0:
d5:85:dc:f3:2d:49:e8:36:45:b4:66:70:3c:30:d1:1f:ae:0c:
3c:90:22:f7:80:c2:77:53:76:66:57:71:3f:8a:1c:3e:0b:5a:
3d:97:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:00:28 2026 by rpki-client