Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
File: 891MdxfPacsnmpvjhwzh1ViI6BI.mft (raw, json)
Hash identifier: fynjuQh1jQwWVzIo4BnzzHxe6EFNZaEWNnVRwAjimRY=
Subject key identifier: 3D:0E:9B:17:2D:54:89:B2:0A:2D:F3:9A:12:BF:38:D5:45:FB:F5:4E
Authority key identifier: F3:DD:4C:77:17:CF:69:CB:27:9A:9B:E3:87:0C:E1:D5:58:88:E8:12
Certificate issuer: /CN=f3dd4c7717cf69cb279a9be3870ce1d55888e812
Certificate serial: 01A1212F0750F6018C28B0F9706499A9219C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
Manifest number: 010F
Signing time: Fri 09 Oct 2026 15:01:32 +0000
Manifest this update: Fri 09 Oct 2026 15:01:32 +0000
Manifest next update: Sat 10 Oct 2026 15:01:32 +0000
Files and hashes: 1: 891MdxfPacsnmpvjhwzh1ViI6BI.crl (hash: Dyv5dNk733SJ9SQwRxQBvzoIXi2YH5nGnh/uQmssoEY=)
2: DaMYvuVk4VxbeiY5886TRjR80-c.roa (hash: D4FeXaKBovPda7PA/y7sGSV1DU6UbX4cAmo6Backls8=)
3: lyXkg79P2FE1dqoSHDtkOfaKYYE.roa (hash: cbRt0iwVvDFLlG9nHuLjCQUjtgic0aVsU0+cAtoJ9AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:07:50:f6:01:8c:28:b0:f9:70:64:99:a9:21:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3dd4c7717cf69cb279a9be3870ce1d55888e812
Validity
Not Before: Oct 9 15:01:32 2026 GMT
Not After : Oct 10 15:01:32 2026 GMT
Subject: CN=3d0e9b172d5489b20a2df39a12bf38d545fbf54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:43:ce:49:9b:17:4f:d2:b2:13:96:c0:bc:
46:70:fc:51:02:23:6a:d5:b7:2f:9c:07:e0:47:74:
be:fd:7d:5b:73:e9:de:51:a7:2f:fe:37:f5:8f:c5:
24:09:ba:17:2e:07:22:d1:70:de:a5:4d:c2:a7:91:
32:69:ae:a7:66:ed:d7:57:9d:c1:ba:a4:1c:0e:5b:
d9:64:88:53:93:b9:31:0d:12:a6:6d:9b:fd:1a:17:
e3:54:20:7d:c3:f5:3a:a1:5f:08:0d:b1:39:a6:e0:
7a:31:b3:5c:41:88:0d:3a:aa:e2:f7:af:0f:8f:93:
5c:14:5c:b5:3c:f4:e1:ad:a0:fa:6f:af:5b:6b:2f:
21:02:96:f5:4d:5f:db:97:d0:f9:a7:e2:05:46:cc:
23:5f:c6:ab:11:bd:60:ca:72:6e:70:6e:90:7d:84:
d7:09:76:90:2f:eb:6d:f5:0d:48:3c:ac:8a:47:25:
6e:5b:d7:e3:47:f0:07:05:9c:1d:3b:75:71:98:1d:
9a:28:59:7f:ba:fc:4f:89:21:2f:88:ab:35:f4:f2:
74:1b:9d:dd:1b:f9:ea:5d:47:2f:ff:79:cb:98:87:
08:ba:69:59:c6:55:63:e0:2f:58:be:13:fb:f4:8e:
40:05:ce:cf:b4:6c:33:0e:05:02:72:a8:ad:f6:6d:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0E:9B:17:2D:54:89:B2:0A:2D:F3:9A:12:BF:38:D5:45:FB:F5:4E
X509v3 Authority Key Identifier:
keyid:F3:DD:4C:77:17:CF:69:CB:27:9A:9B:E3:87:0C:E1:D5:58:88:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5f:bb:5d:e4:c4:f5:6b:53:41:50:02:dd:da:8a:e1:2e:fa:
07:cc:a5:70:64:3f:4b:5c:09:e0:a5:0f:26:e4:34:36:3d:9e:
96:fd:da:5b:11:88:34:50:43:94:08:a4:5a:54:41:c2:a4:3c:
3f:93:17:b3:e5:bf:88:22:82:00:cb:c2:ce:ee:c0:dd:2d:38:
e2:00:ab:71:df:77:ad:c4:13:02:b2:fe:ac:bd:08:b0:59:08:
c6:32:08:c9:2f:12:97:75:62:e3:d6:85:5a:45:a2:62:e9:ca:
49:4d:48:8c:56:a8:fd:ba:ef:1e:07:15:78:bb:bb:67:46:a9:
26:8e:82:08:e0:0d:5a:c2:6a:31:9c:43:23:9e:77:c1:0c:e9:
e0:d8:31:70:34:4d:4d:f5:51:35:40:32:26:d6:be:98:3a:f5:
ce:fc:c4:d3:66:8b:ec:9c:bd:7a:bf:04:79:18:e3:cf:46:7e:
de:ac:e1:ed:7b:6c:01:cd:82:7d:b1:77:5c:bb:c5:51:21:a1:
b3:aa:6f:ce:a1:71:35:04:c7:5d:86:2f:f8:6c:12:2a:dd:ae:
d4:90:a2:d8:23:41:19:06:e1:13:d0:a7:6b:87:c4:74:3d:61:
30:bc:c6:3a:cf:36:02:50:90:3c:21:78:ef:47:02:11:33:6c:
b9:45:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:28:15 2026 by rpki-client