Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File: FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier: VS5XwJX3B/6mnSx7UjdJBQrhzLAvMHMYEIHpf8dUMDQ=
Subject key identifier: D9:85:BB:AE:8F:E0:AF:7D:7F:DA:A6:6A:13:62:00:5B:3E:59:72:A5
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 019E1EA362CB518CB11A9C58A6D8A5D6D089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number: 11CC
Signing time: Wed 13 May 2026 00:01:24 +0000
Manifest this update: Wed 13 May 2026 00:01:24 +0000
Manifest next update: Thu 14 May 2026 00:01:24 +0000
Files and hashes: 1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: 02wubvHR55U+N++9X68QhAHD8rIu5PequJu6c235NiY=)
2: jDnrlpzju9hJvaoQu4OXwOXPSyA.roa (hash: 5ssODwVsvynqY+E+xEJbdKWKWIk6XsrizpcJBHs3DN8=)
3: uxvdRH3Lx7ZudvJAlNDH4WnIMb8.roa (hash: 7H1SzU9/jyjG63PZcxwjrSZgzIIH3ECkB+OiPPAHQwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:62:cb:51:8c:b1:1a:9c:58:a6:d8:a5:d6:d0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: May 13 00:01:24 2026 GMT
Not After : May 14 00:01:24 2026 GMT
Subject: CN=d985bbae8fe0af7d7fdaa66a1362005b3e5972a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c4:c8:9c:a8:07:86:a7:3b:c3:96:ed:62:c2:
42:20:30:ec:96:b8:ac:00:e7:b6:17:b2:87:0f:e2:
b0:1d:5c:88:82:96:be:be:b8:c2:f0:88:66:3a:8e:
d0:a5:4f:36:49:68:e3:6d:08:79:35:21:32:5c:34:
8e:e6:92:c2:f5:e8:6f:99:3e:8d:37:f0:f2:bf:cc:
c5:3a:d0:28:28:8d:78:97:b8:65:ac:82:aa:e9:c2:
ca:3f:15:8d:46:62:3c:41:d0:c3:18:6f:5f:d5:7b:
51:8d:9b:7d:3d:29:7c:82:39:6a:d5:be:8b:b9:37:
31:03:2a:f1:2e:15:9b:59:89:09:e6:74:87:97:e9:
52:79:c7:0e:f7:50:e9:58:20:ef:6f:51:36:fb:6c:
2d:c2:68:24:09:09:b7:27:80:70:81:37:93:f6:d9:
45:8b:13:c0:86:d8:c1:4c:df:96:49:a8:69:b8:40:
a0:4a:65:f0:0e:29:9c:fe:c1:7a:27:d8:3d:c9:d3:
0f:4d:32:4d:aa:dc:35:6c:df:70:f7:db:9b:8f:60:
5b:c6:58:dd:37:55:a1:3c:10:c2:2b:d5:47:7b:68:
7e:89:e9:db:18:b8:4b:ef:fe:04:cc:18:52:1d:dc:
89:4a:04:df:36:3f:5f:c1:0b:9e:e5:ab:03:50:b1:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:85:BB:AE:8F:E0:AF:7D:7F:DA:A6:6A:13:62:00:5B:3E:59:72:A5
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f2:d1:ef:21:56:a3:f0:5b:1c:a6:4f:c2:a6:cc:2f:c9:9f:
d4:a6:f8:7f:8e:67:cf:01:4c:ac:89:ea:f7:9c:65:24:a4:da:
68:5b:be:e9:a5:8e:20:d7:de:42:bc:b2:72:0d:d7:1e:90:69:
a1:39:35:38:f7:c7:2b:ff:12:b0:cd:95:7f:02:5e:a6:57:23:
fa:6c:3b:34:5b:66:77:54:dc:dd:06:32:5e:bb:4b:e1:56:bc:
7b:58:5b:ae:cd:a7:51:70:5f:61:0a:33:cf:c3:ed:c6:2b:78:
f8:91:15:ec:9d:86:d5:08:42:f9:45:f5:82:80:9e:17:44:fe:
fc:88:c9:5c:bf:03:6b:06:22:57:53:31:3d:dc:3b:9c:e8:fe:
5a:66:63:e7:0a:49:d8:d8:01:63:72:4d:14:ae:c8:e2:fa:c8:
41:8d:a6:63:f9:dd:a9:f0:a3:b8:cf:09:7f:00:8f:b6:89:c8:
67:90:d8:f1:5c:07:26:42:93:63:08:35:ec:fd:3b:51:91:8c:
ff:61:53:c1:d3:6f:3f:8e:8a:30:36:60:6b:fc:33:8f:6b:37:
a1:7a:5d:f6:85:21:6c:4d:07:a9:86:a5:13:ab:8e:8c:c1:33:
b9:d2:cb:f0:c5:e4:e0:09:9a:c9:74:76:91:5d:15:cb:8d:ed:
63:39:6b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:53 2026 by rpki-client