Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: aCDF20bnaLIHiT9rJFo5qnYCbsVft9Fr44xwc6XyIv0=
Subject key identifier: E9:37:C0:24:6A:84:C2:3F:B7:CF:C1:0E:44:DD:A9:69:7A:FC:03:BE
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 01A1291F4A54E6E787F8DFB526C2A9436DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 04:01:18 +0000
Manifest this update: Sun 11 Oct 2026 04:01:18 +0000
Manifest next update: Mon 12 Oct 2026 04:01:18 +0000
Files and hashes: 1: Kj2nJpqI7GEu-K-TsbARVzYFqTM.roa (hash: l5siJkXM+WfWhL0L8OL/uvl+AJmTO8+Cpk3bOaW4F7E=)
2: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: u8Gx+noFbd3EkeoEjDcwe6nwUyRF5XtNU5DA70bbiz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1f:4a:54:e6:e7:87:f8:df:b5:26:c2:a9:43:6d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Oct 11 04:01:18 2026 GMT
Not After : Oct 12 04:01:18 2026 GMT
Subject: CN=e937c0246a84c23fb7cfc10e44dda9697afc03be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:b4:37:e6:af:57:24:70:16:81:4b:af:f8:
9d:07:f0:24:54:5c:7a:13:83:99:27:19:e0:a5:d4:
a6:92:c3:74:5f:83:67:c7:65:c2:4b:df:1c:2a:ef:
15:b2:e8:2b:29:89:03:83:02:fa:d9:93:b6:ec:4e:
c2:fb:00:b1:63:57:35:1e:26:0d:dd:c6:ee:5d:35:
f9:62:02:2e:37:89:a6:24:32:6a:da:bf:2c:38:ab:
dd:6e:af:8d:fc:76:31:28:84:47:c5:ac:7b:a7:5a:
62:b2:20:7b:5f:4b:7f:c0:e9:da:be:f3:46:c9:8c:
62:21:76:b6:67:3a:12:18:62:7a:82:4e:af:71:a6:
60:a3:f7:77:ff:fa:81:80:8d:6c:96:49:a5:9b:6d:
06:b4:f4:ea:ab:24:01:f2:1b:7d:60:22:97:b3:2b:
75:79:15:7c:b3:f4:92:2c:7d:ce:9b:ed:5e:33:e0:
42:29:8f:7f:a6:10:76:d7:7b:0e:9c:b9:cc:8f:6c:
80:41:bf:01:88:04:6e:d8:46:40:a7:f0:c8:a9:85:
cb:6e:42:32:dd:e9:90:58:31:31:2f:e9:a4:30:31:
01:99:86:62:28:37:28:e0:77:50:53:ab:13:c6:76:
ef:97:89:a0:f4:3b:55:d1:13:3c:a0:78:45:bc:1d:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:37:C0:24:6A:84:C2:3F:B7:CF:C1:0E:44:DD:A9:69:7A:FC:03:BE
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:49:2e:db:fd:d2:9a:b1:d9:18:3a:30:a3:22:67:72:2f:ce:
eb:12:62:44:8b:95:a8:ed:b2:c0:64:99:da:b9:74:cd:80:20:
7c:39:cd:b2:7d:5d:57:f7:50:e4:5f:26:d5:7b:87:ce:85:5c:
51:a2:1e:18:ad:3d:30:dd:f9:07:c3:bb:59:67:7a:2f:bb:c4:
f4:fc:5e:9e:57:62:c0:bb:91:46:02:9b:01:82:3e:5b:a1:f5:
17:67:13:76:1a:68:1d:fc:07:8c:c0:21:25:15:13:1f:a8:1c:
42:6d:c6:17:08:f5:b1:26:85:24:f2:2d:88:85:56:66:cc:ba:
37:f5:85:7d:17:10:ed:63:0c:08:0a:16:61:4d:a3:87:c6:c5:
78:37:cb:9f:72:59:dd:4d:0a:09:c7:86:00:db:41:c0:86:7b:
60:84:31:2a:98:8c:c7:d6:66:23:e4:15:a3:32:b0:7a:23:a5:
9d:fe:9d:32:d8:44:ac:6b:41:a2:5f:1a:ae:bb:5e:dc:57:73:
70:cd:3e:39:ac:3e:be:4c:45:83:0e:be:f0:87:d5:8b:ab:8a:
ae:93:05:3e:ac:05:85:5a:45:be:82:85:ca:b3:11:48:49:60:
a2:13:46:2a:56:c8:c3:50:bc:0a:92:cd:e8:7a:9f:91:4b:b1:
8a:27:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:26:39 2026 by rpki-client