Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: WhR3Xvy0WC4ybJ07+EpNbnwUIqd6vqdlwcfH39euVh8=
Subject key identifier: 3E:E9:F3:A9:75:25:22:B2:E3:7A:F0:D1:96:0F:41:56:9C:94:19:C0
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 019D3940E0FF6449EEF3EAC06C20270DAB79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0F5C
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (hash: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8=)
2: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: L4n3JQZo23gc8V2yyalfE0/ZFqyOc7d0kjmPbggP8X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e0:ff:64:49:ee:f3:ea:c0:6c:20:27:0d:ab:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=3ee9f3a9752522b2e37af0d1960f41569c9419c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:01:51:fe:e9:4e:e9:76:45:2a:a3:e0:62:
b8:4b:91:45:6a:77:ea:9e:bb:85:1f:24:d1:61:67:
38:f7:a3:46:24:a3:84:74:30:55:79:f4:a8:a2:aa:
38:47:22:36:53:b1:37:18:6a:da:ea:95:79:4d:c8:
11:0f:92:7e:90:36:8b:4c:5b:b0:f6:30:09:23:a5:
f1:a0:6b:49:29:05:66:e5:51:d8:4a:97:c9:da:c7:
f9:2f:4c:a0:52:d1:91:06:e3:29:18:ff:14:eb:26:
22:fe:21:b4:75:02:9c:5e:8e:30:05:96:d2:73:5e:
2d:0a:aa:f1:68:0c:be:bc:61:3c:4c:6b:56:90:59:
1f:d5:d6:8e:a2:89:44:d1:fb:ac:71:2e:6c:bb:3a:
91:33:ab:13:55:d2:a3:d6:65:35:30:63:cc:e7:58:
b7:53:01:a9:e2:83:33:4b:33:ef:3b:e2:02:45:9a:
79:80:07:40:96:b1:ea:9b:36:ed:6a:f7:6d:ca:37:
62:7d:4a:e8:52:f9:49:40:1d:e6:a5:17:a1:4d:ef:
58:b7:0c:b2:4c:92:7d:75:d7:f8:24:34:aa:32:75:
a7:33:2b:92:a2:07:8c:82:85:43:35:63:d9:aa:32:
b8:11:e2:80:e2:9f:10:ec:6d:a6:a7:34:6c:e4:6c:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E9:F3:A9:75:25:22:B2:E3:7A:F0:D1:96:0F:41:56:9C:94:19:C0
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:93:b1:9e:2e:d5:5d:1d:b3:a7:4d:4c:6b:b5:04:0a:4b:af:
98:8e:ae:10:53:4e:2d:d9:d5:b8:f7:d6:9b:20:24:98:5f:95:
b6:1b:31:f7:be:d2:05:8d:f3:cb:62:ac:ea:fd:43:f4:0c:60:
f2:dc:80:27:9f:d2:f5:25:08:e9:5c:30:ff:50:ac:40:e2:f0:
8c:0d:d0:f8:21:43:35:3a:82:92:ae:b5:de:df:c1:53:64:6b:
4a:cb:69:cd:b8:6f:ad:c0:44:12:a1:0b:43:ff:67:a6:33:3e:
86:53:a0:68:74:cb:3b:7e:f8:f8:8f:44:60:42:12:53:b9:17:
be:e3:7a:ea:40:3c:aa:7a:8d:34:3a:3c:de:65:41:21:a2:05:
7c:b6:a5:fe:0b:52:01:05:c5:46:05:7d:4b:d3:dc:86:a1:98:
23:03:69:3b:65:03:0a:88:3a:8f:43:52:c8:a5:04:87:26:c9:
18:b7:c6:47:6e:d7:3e:73:44:fa:b0:e7:8d:27:6f:9c:db:58:
d7:ad:51:82:28:53:28:fd:97:e5:f0:b9:0b:70:26:0a:db:8d:
ee:a1:61:19:5f:39:7b:b0:42:d6:a3:c1:51:dd:e9:37:4d:b2:
62:ae:7d:5d:c1:5c:61:be:64:ca:84:db:ac:36:28:7f:b0:c7:
fa:dd:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:54 2026 by rpki-client