Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: iyk4l6qtjpQiQlYgggFqPozFNU/3S95OT3kR/eDIb78=
Subject key identifier: B8:F8:D2:F6:DD:89:0D:71:18:E2:58:03:BF:01:73:AB:6E:C9:D4:0F
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 01A08BD677FBA8F0431C15C19BB0339EE05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 15:01:23 +0000
Manifest this update: Thu 10 Sep 2026 15:01:23 +0000
Manifest next update: Fri 11 Sep 2026 15:01:23 +0000
Files and hashes: 1: GvNFYyBUTZVKqfxGJ29AQ8ybUOI.roa (hash: uZnUMOZEaipYyz6w+Q0CeYwOVjF6E1oqOIzqR9nYZ4k=)
2: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: aRtuRYQPm0vTFkPHcRzvt/y6NCCW8VA9WHuUMwx7Ltk=)
3: nFyJiI2QEmXq35fuiG_EUZU-0Tw.roa (hash: cLxbEZlxAIqYS86le/aYrGcroGy0E1YAeKBMSi+G8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:77:fb:a8:f0:43:1c:15:c1:9b:b0:33:9e:e0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Sep 10 15:01:23 2026 GMT
Not After : Sep 11 15:01:23 2026 GMT
Subject: CN=b8f8d2f6dd890d7118e25803bf0173ab6ec9d40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:c5:c2:07:14:9d:86:af:f6:77:c9:8b:ea:
1e:f8:83:5f:b3:75:74:2a:28:9f:02:32:a3:97:c2:
97:14:4e:2f:e0:00:78:f4:42:23:40:da:68:d7:df:
b2:c0:65:36:1e:1d:b2:f8:fb:a4:35:2f:84:50:70:
98:93:94:1d:89:0d:f1:a7:24:ea:6d:44:a5:64:af:
4e:c9:36:53:67:0b:25:b1:b7:45:de:af:c9:26:1b:
af:1c:89:a1:a1:fe:df:e5:d1:f0:3d:4a:34:31:94:
00:65:e9:fa:44:66:5b:87:d0:95:79:22:b1:d0:3f:
d4:4f:85:a4:b5:eb:29:c5:f7:60:6e:96:5f:1c:3a:
8f:88:e5:66:a2:fd:d5:ab:71:fa:1e:4a:e1:a2:92:
ff:f1:7c:96:a6:65:ae:4d:4c:f3:91:de:4f:52:51:
d0:00:de:2a:19:3f:a7:fb:5a:ed:0a:cf:10:ba:1d:
69:c6:88:fd:8e:48:dd:84:66:b6:b3:d8:ea:0d:8f:
7f:44:76:49:58:e8:14:03:73:a7:e6:d6:d1:2c:4a:
8d:4e:96:4f:f1:31:d4:34:c4:f5:ca:7d:eb:2f:3a:
ae:07:ea:0d:5a:e7:a7:ff:31:d5:0c:8a:a1:df:fc:
0f:5b:89:aa:0d:09:47:98:b3:22:50:d4:39:c2:c9:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F8:D2:F6:DD:89:0D:71:18:E2:58:03:BF:01:73:AB:6E:C9:D4:0F
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4e:eb:1c:92:c8:e2:a9:b6:6b:ea:21:c2:88:a3:97:6d:8d:
ee:2f:1d:10:6a:3f:84:33:ae:ca:77:c2:d9:e1:3e:4b:3e:9e:
bd:fa:2c:a4:63:9d:55:35:d8:3d:8a:43:61:39:1d:80:3c:66:
b3:03:96:a9:c4:32:41:8f:82:50:11:5d:d4:c3:eb:ec:22:50:
d0:2c:5a:aa:4e:81:62:fd:5b:5e:d5:c7:45:c6:58:84:10:ba:
48:6a:e3:80:5f:b7:23:d3:71:e5:c1:e5:3f:85:05:f5:4b:0e:
de:54:45:42:4a:81:6c:57:a9:fb:90:aa:56:f8:fe:22:0d:c8:
38:1b:38:06:96:a8:df:21:a9:87:55:cd:87:67:6b:76:d5:6e:
d6:c6:4a:92:d2:ad:7c:b9:6d:e2:8a:88:87:55:e5:8a:ff:9c:
da:2c:79:97:d4:7b:97:05:b9:64:23:47:08:f6:33:3d:8e:3e:
41:52:14:c9:12:b5:58:21:ce:3e:90:f1:e9:25:59:da:38:f2:
15:bc:55:54:f1:f1:20:38:3e:bb:f2:b6:4a:c5:75:2f:23:7f:
9e:71:95:a3:c9:10:79:1b:ba:55:6e:88:b7:c5:b3:0a:89:ce:
e1:e7:9c:ee:e5:12:81:58:7f:96:17:f8:0f:94:86:96:d5:c4:
e0:d6:e4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:31:38 2026 by rpki-client