Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: bDGQ9QPA1Sst9YImbj/LYUSiEUSNMq0NHLa9oIf49Og=
Subject key identifier: 80:75:84:FA:5E:BE:4E:10:93:5E:2D:4F:7F:38:E6:24:EF:B1:11:42
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 01A13E952328EC96629ED9721A260172C8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 1171
Signing time: Thu 15 Oct 2026 08:02:03 +0000
Manifest this update: Thu 15 Oct 2026 08:02:03 +0000
Manifest next update: Fri 16 Oct 2026 08:02:03 +0000
Files and hashes: 1: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (hash: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8=)
2: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: Fan9swcoul4XoJDzY9jWKoIHmD16FGz+9P5x8xvjfBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:23:28:ec:96:62:9e:d9:72:1a:26:01:72:c8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Oct 15 08:02:03 2026 GMT
Not After : Oct 16 08:02:03 2026 GMT
Subject: CN=807584fa5ebe4e10935e2d4f7f38e624efb11142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:e8:66:79:67:37:ee:9a:3c:22:6e:5b:92:
38:00:69:f6:28:60:87:0e:20:f8:f0:a3:f3:0a:11:
3b:08:e4:89:30:5f:fa:ad:87:f2:89:c4:d5:6d:da:
39:91:1b:ca:fd:33:99:4e:02:41:11:96:5f:b9:0f:
e8:4c:db:ef:9f:f5:58:55:d3:d3:ac:a7:c0:b5:b9:
40:06:e8:a9:23:93:1f:29:3f:87:82:35:d9:d0:a0:
91:f1:b6:e3:a3:f8:0c:df:33:a5:37:2b:d7:2e:9b:
7b:82:72:3a:3f:2f:d1:57:59:a6:26:38:4e:1f:85:
fa:51:85:0e:c6:fe:66:4d:14:3d:da:a3:be:76:c1:
08:ac:88:76:0c:5f:68:54:91:9b:00:c6:d0:3b:cb:
b4:4b:4d:e5:17:f4:38:33:57:d4:ec:6c:b8:ff:fc:
81:38:96:ad:e6:6b:9c:af:ee:00:93:51:ea:62:26:
9c:ea:2e:cf:55:0c:83:b8:4d:34:1c:e5:5e:5f:50:
d0:f6:97:23:ed:e5:35:20:0e:72:c5:5f:f2:14:a1:
19:b6:3b:89:53:13:9d:0d:6d:87:c3:82:a7:5c:fa:
5a:68:c4:e8:4c:1e:3c:05:fc:73:05:65:ac:ca:7a:
b6:09:27:f5:83:55:af:72:77:d3:cb:e4:94:04:f2:
86:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:75:84:FA:5E:BE:4E:10:93:5E:2D:4F:7F:38:E6:24:EF:B1:11:42
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ec:2d:e5:8b:ec:bb:9f:8b:35:19:f3:fd:ee:11:11:b5:67:
e3:a3:9b:91:70:d8:91:cc:77:86:9a:6c:9e:ec:cf:1f:cb:a4:
d7:7a:8c:3d:18:c3:19:97:d4:ae:54:07:49:67:6b:93:d3:55:
7f:d3:2d:ca:10:fd:21:52:6f:c2:d0:c1:5f:ac:b5:7a:6e:1c:
03:5e:9d:67:bf:bf:07:15:a5:60:fa:34:a9:f2:2e:51:ff:65:
5d:7e:54:4d:e2:25:f0:5d:78:3d:20:f6:53:08:f7:d8:12:9d:
c0:25:ba:29:52:45:13:07:bb:f6:88:97:e7:fe:73:b6:c9:25:
b2:fe:0f:ef:5a:ab:ef:72:fd:8b:a7:97:47:7c:64:b5:61:ee:
74:f7:17:a2:53:7d:85:6d:95:98:5d:56:93:02:4a:d9:1c:65:
14:56:de:22:81:27:12:41:ac:5c:64:e3:25:c7:8c:92:8b:02:
2e:5a:02:3a:14:cd:9b:f9:7e:c6:7f:26:bd:54:7d:e2:0e:06:
b1:79:be:42:d9:4f:c5:ff:f9:e1:a8:f9:ae:a9:b7:31:e7:ef:
01:2f:95:03:19:8e:13:f2:7e:6a:6e:12:29:89:a5:bf:46:f1:
ab:ec:8a:7d:3e:9e:96:57:2a:e9:cd:69:d1:b2:5a:17:32:5d:
bb:5c:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:51 2026 by rpki-client