Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: SoP+OU5B8UW7n6g1Xi9HsrQZ13qzO/HkctN+326vA/0=
Subject key identifier: 51:4E:21:E1:6D:2F:EE:66:84:38:49:48:EC:92:F7:07:4F:EC:61:7C
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 019E3072F872BC9BA4B691A3611AED456A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0FDC
Signing time: Sat 16 May 2026 11:01:41 +0000
Manifest this update: Sat 16 May 2026 11:01:41 +0000
Manifest next update: Sun 17 May 2026 11:01:41 +0000
Files and hashes: 1: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (hash: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8=)
2: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: OvENonbZ7RX8NhO+qDr8OkHzQUlVefTbgs/5nYfGr/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:f8:72:bc:9b:a4:b6:91:a3:61:1a:ed:45:6a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: May 16 11:01:41 2026 GMT
Not After : May 17 11:01:41 2026 GMT
Subject: CN=514e21e16d2fee6684384948ec92f7074fec617c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:3a:33:3a:bb:78:ac:0e:12:9b:8c:66:15:
78:b4:a1:7a:4c:ab:18:9b:36:a1:a4:14:4f:ed:ad:
4e:99:6d:6b:30:87:53:ac:bc:4d:49:eb:6f:93:17:
74:8a:3d:03:df:0a:2a:f3:37:56:eb:9a:fe:3a:96:
06:66:92:98:73:f4:99:5b:c4:88:24:61:5f:02:ee:
51:90:cc:34:a7:2a:b6:02:1c:97:7f:01:70:8b:c0:
f2:71:e9:a4:8b:5d:66:1d:e9:8a:d2:58:c9:1a:8a:
bf:44:e9:d9:e4:97:c1:35:76:e1:83:91:36:a8:e7:
56:ac:e6:63:2b:1a:30:1f:a9:06:a7:43:26:84:e8:
f3:4c:bf:17:80:c4:2b:45:1c:03:d4:c7:06:16:3b:
97:0c:4d:39:0b:0f:18:77:13:c6:f4:16:0b:3e:05:
62:64:8e:80:4c:e1:8d:b3:9d:0e:9a:25:17:0a:ab:
cb:81:61:ec:05:2a:f1:ff:bb:f9:83:d2:58:25:56:
9b:c9:36:2a:b7:68:60:87:5f:04:26:86:81:00:53:
fa:3f:96:2f:fa:82:65:b8:68:75:5e:af:fb:c7:02:
7e:21:2d:b6:50:74:57:f3:9e:2e:bc:38:99:30:a0:
18:aa:8c:05:c7:3d:dd:77:b5:c8:f2:e3:fa:2d:20:
24:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4E:21:E1:6D:2F:EE:66:84:38:49:48:EC:92:F7:07:4F:EC:61:7C
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1e:79:4b:8e:07:3e:4a:ed:cf:cd:b6:20:56:3e:11:28:24:
f3:d5:85:2f:7d:c4:2c:e1:2e:b7:32:87:c1:4c:ba:63:fd:5d:
42:62:14:eb:d7:39:e9:3d:e9:1b:c8:d9:48:f8:7a:01:dd:07:
51:37:fc:3c:50:9e:cf:6d:be:0c:cb:5d:ed:60:2a:26:15:b0:
bf:1d:ee:62:4c:93:d9:1c:b7:0e:cf:11:5c:b4:ac:cc:77:18:
ea:5d:98:6f:42:a9:19:08:1d:3b:ae:22:3d:3a:6a:bb:07:c0:
89:f4:19:79:dc:37:5f:7e:0c:88:de:50:70:9a:2c:d9:7f:47:
f1:50:06:5b:5e:d3:6b:e3:9b:19:a5:a1:e4:19:d9:e7:bb:38:
7d:15:40:70:33:4a:07:01:31:99:cd:64:de:47:b8:f0:9a:b1:
cc:0d:c9:67:44:b1:7b:bd:04:d1:52:1c:85:6d:e8:35:17:78:
f3:7b:c3:6c:9a:6d:9d:40:d8:cc:ba:69:b7:9a:fe:53:61:eb:
72:06:43:cd:f5:fc:53:8f:4a:cd:a3:6d:b8:23:0d:55:21:d7:
29:5d:97:76:4b:68:c3:9f:81:45:f7:7c:7d:9d:4a:fa:1a:c6:
ba:d8:22:5d:a3:20:37:24:a7:e9:f1:e1:8e:a3:a8:5a:64:33:
59:fe:1f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:26 2026 by rpki-client