Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: 3j8Pjbp91Jl+q2GgzdK7lleloJokT8R0QhawfvYotuM=
Subject key identifier: BF:0E:42:1E:1C:B6:D9:63:46:79:8C:9D:82:46:D6:A1:88:BC:41:2D
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 01A001DDAB8F6205A9164A1CFC0EB7994371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 10CD
Signing time: Fri 14 Aug 2026 20:01:39 +0000
Manifest this update: Fri 14 Aug 2026 20:01:39 +0000
Manifest next update: Sat 15 Aug 2026 20:01:39 +0000
Files and hashes: 1: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (hash: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8=)
2: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: ZgpZz2U4AzYJz0j/JPqHO7r+mZE2BMC/Zkx0rFEDAzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:ab:8f:62:05:a9:16:4a:1c:fc:0e:b7:99:43:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Aug 14 20:01:39 2026 GMT
Not After : Aug 15 20:01:39 2026 GMT
Subject: CN=bf0e421e1cb6d96346798c9d8246d6a188bc412d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:e8:52:03:7d:a4:30:1c:5a:23:6d:b0:6b:
ab:dc:db:11:2e:73:3a:8d:97:b9:75:2f:34:5f:5d:
aa:36:0d:40:59:f5:2e:d6:36:9e:29:6c:f3:5f:fc:
cf:d0:25:be:72:e6:2f:2d:d1:2f:91:92:91:53:c9:
37:ea:da:e9:d1:52:a8:dc:1c:32:2b:33:98:3f:21:
d2:cf:93:2e:2a:0c:8d:ba:88:e9:76:07:8c:c6:a5:
09:48:28:58:e1:2e:bc:a0:ce:53:61:de:85:63:78:
7e:c6:cf:90:54:62:aa:61:34:f5:f2:37:84:b8:89:
6a:a3:34:6f:25:50:1b:91:49:91:d3:0b:dc:d8:e0:
91:42:89:29:79:7f:8a:4a:53:63:80:1c:d7:a4:55:
d3:75:52:19:f4:94:28:17:ac:f8:68:d7:93:da:8b:
77:fb:8e:46:95:94:56:80:73:b3:41:37:d1:37:73:
09:42:72:ac:e1:9d:2c:7c:c3:e3:04:11:f3:fa:f8:
28:1b:3a:ac:38:16:7c:f1:06:82:b3:4c:14:32:27:
d8:c6:ac:21:c2:12:33:d3:09:fe:52:d1:7b:72:03:
f7:66:02:77:7e:dc:82:52:c5:cc:8f:e0:9b:6d:d7:
67:8c:2a:ec:c0:1a:94:2e:7a:1f:15:16:54:fa:09:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:42:1E:1C:B6:D9:63:46:79:8C:9D:82:46:D6:A1:88:BC:41:2D
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cb:44:89:b8:27:f2:f5:4e:f0:a0:63:60:d9:19:10:22:27:
fc:74:d8:bd:61:53:46:69:53:b1:44:4e:89:a2:54:5e:6c:a6:
56:b0:74:92:91:ae:9e:56:8e:70:d8:f6:ec:7c:ed:8e:09:33:
72:89:42:0e:e2:f2:57:26:b8:98:19:14:86:77:35:75:cf:b6:
76:54:2b:89:e4:e7:98:4d:44:56:dd:00:03:1f:a0:b3:71:81:
6c:14:b1:4a:48:4e:d1:98:f8:2a:83:6e:67:07:a2:bb:a5:1f:
b3:55:0d:8e:84:0a:a0:ee:54:bb:5c:27:53:8d:de:c9:65:fe:
4d:45:fb:51:82:18:47:12:4f:af:16:79:fa:94:30:6f:20:aa:
d2:0a:f6:23:11:84:de:5f:c1:fc:44:5a:74:c2:c1:b2:9e:8a:
f8:b7:5c:9c:0a:5d:ff:93:eb:d9:ca:b4:8e:b7:f4:5c:74:0e:
94:d1:ef:9d:2a:8d:f1:50:b8:07:73:6b:2e:80:75:89:47:30:
89:d1:9d:ef:e2:9a:97:93:1d:4a:bf:e4:80:56:21:36:48:8e:
5f:dd:26:7e:4d:76:a2:18:26:dc:06:9a:03:49:bd:e0:33:7a:
ac:30:8e:22:9c:bf:3c:f5:c4:2e:d0:32:de:6c:d3:a6:fc:54:
2c:8b:47:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:25 2026 by rpki-client