Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
File: d5pKQpXGOP3nYPPNpHbYv8JxErI.mft (raw, json)
Hash identifier: 58cEXhHbuoEt2QnmlYsHd5ZPrexVEh8kv0+2cjI0IqA=
Subject key identifier: F6:E4:8D:9E:70:3C:E0:11:34:86:04:1F:4B:C5:D8:00:A4:84:07:4B
Authority key identifier: 77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2
Certificate issuer: /CN=779a4a4295c638fde760f3cda476d8bfc27112b2
Certificate serial: 01A08B9FB3B36AFEA55D45E916A54682082C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
Manifest number: 04FE
Signing time: Thu 10 Sep 2026 14:01:34 +0000
Manifest this update: Thu 10 Sep 2026 14:01:34 +0000
Manifest next update: Fri 11 Sep 2026 14:01:34 +0000
Files and hashes: 1: 1SXyN0yfhT5cSdi9C9NJ49pGu4Q.roa (hash: 9hRMwF9OzYcY4aoj5DqpON+f2xbb5moy11vfbRHpWD8=)
2: d5pKQpXGOP3nYPPNpHbYv8JxErI.crl (hash: 8H9+i8x7x7YInmmQVnFyDNv4U3mR34GbYz3Kdabu+cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:b3:b3:6a:fe:a5:5d:45:e9:16:a5:46:82:08:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779a4a4295c638fde760f3cda476d8bfc27112b2
Validity
Not Before: Sep 10 14:01:34 2026 GMT
Not After : Sep 11 14:01:34 2026 GMT
Subject: CN=f6e48d9e703ce0113486041f4bc5d800a484074b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:73:e3:e3:b0:8f:07:b8:4f:d8:db:d0:f9:
f7:8a:14:e5:f0:ac:5d:cf:ed:9a:a7:16:9b:70:3a:
70:d5:cc:a1:fe:95:d6:c8:fd:f8:53:9c:62:5a:a0:
49:08:3e:1b:10:43:18:b6:46:d2:95:23:32:d3:e4:
07:77:40:ef:4a:2b:8c:35:60:c3:e0:03:e6:d3:fb:
d7:d5:70:95:47:58:fb:dd:6c:a1:20:17:f0:4e:c1:
11:ed:ab:e5:ef:64:4c:69:ed:23:1f:70:8f:db:91:
1e:93:c8:13:19:cb:90:cf:f6:22:2a:2d:cb:d0:6d:
c3:5f:27:a5:a7:fb:de:22:ae:c8:22:41:e5:5e:e1:
02:1a:54:49:7d:31:a3:9d:d0:37:cc:2b:fa:08:ef:
53:20:26:ea:a5:00:8d:05:be:79:5d:0a:8d:6a:27:
27:20:de:64:d8:01:73:f9:1a:62:40:cd:71:42:81:
b6:59:f5:8e:4b:82:48:e7:10:90:8f:17:b8:c2:70:
4d:81:60:ea:31:29:1a:60:96:e1:b6:94:3c:62:79:
c2:8c:3b:20:fa:d9:82:8a:70:d4:6c:d2:bf:37:a4:
a8:f2:17:b3:e1:35:6e:1f:30:b5:05:25:76:d2:d6:
c1:2c:b9:d1:1f:2e:42:eb:7c:09:a2:d3:54:d3:05:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E4:8D:9E:70:3C:E0:11:34:86:04:1F:4B:C5:D8:00:A4:84:07:4B
X509v3 Authority Key Identifier:
keyid:77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9f:8b:8e:44:41:b7:8b:fd:cc:60:2d:49:b6:79:2f:5e:3c:
2e:bd:71:84:04:93:23:a3:5f:fa:bb:0f:b5:8e:e6:b8:34:92:
41:2b:07:a2:d8:07:c5:68:b2:f5:cc:c3:8d:8d:fe:7f:6c:a9:
7b:a1:ee:23:4e:97:7f:f3:25:99:97:d3:cf:9f:5f:25:bd:5b:
5b:a5:b4:f8:ee:6c:8c:03:58:fa:0b:76:c5:89:b7:e3:e7:3d:
06:0e:c1:3a:24:5e:32:5f:08:59:8d:ba:bf:c2:fb:ed:cc:9b:
4a:0b:cd:27:38:ea:c2:7c:fc:31:3b:c7:a8:5c:52:05:c2:d3:
89:21:4d:ce:c6:83:a9:0a:75:42:f6:ec:27:62:fd:b4:41:10:
18:23:8a:71:07:4e:c2:ad:4b:b0:68:f2:4f:f9:99:1c:b1:b4:
54:11:38:3c:a8:69:86:e9:27:e4:14:8c:58:06:a3:be:db:26:
da:ab:50:14:b6:3c:27:90:eb:f1:a1:d7:3a:66:1d:27:46:42:
d6:d0:25:82:11:c9:2d:bb:16:98:ee:b2:82:6b:6a:88:a0:ce:
f1:a5:5e:54:39:a7:ed:92:78:13:59:98:29:ec:2d:52:cd:fd:
7f:39:ed:5c:5b:74:42:9c:37:74:9f:01:47:f2:f7:81:a7:29:
aa:23:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:58 2026 by rpki-client