Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.mft
File: rfvxCf18BDkHbEGsADQUWxjyupU.mft (raw, json)
Hash identifier: u5aDkJeoXgP72OvNzc0lsGAWjTyIg50pRcjrRekJF4I=
Subject key identifier: 35:B4:9A:13:53:28:36:B3:A1:A7:65:0B:E7:39:3B:2E:27:15:01:35
Authority key identifier: AD:FB:F1:09:FD:7C:04:39:07:6C:41:AC:00:34:14:5B:18:F2:BA:95
Certificate issuer: /CN=adfbf109fd7c0439076c41ac0034145b18f2ba95
Certificate serial: 01A0D1C998874204CA5534CEC5274C310EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfvxCf18BDkHbEGsADQUWxjyupU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.mft
Manifest number: 0A
Signing time: Thu 24 Sep 2026 05:00:44 +0000
Manifest this update: Thu 24 Sep 2026 05:00:44 +0000
Manifest next update: Fri 25 Sep 2026 05:00:44 +0000
Files and hashes: 1: T4C3ngZ0kiOERSm8KIUL6SFIVCw.roa (hash: tZwjPSBZgMqEIOo7Vw/0mMnq5X49xxkO30FWElQAEqs=)
2: rfvxCf18BDkHbEGsADQUWxjyupU.crl (hash: Vmcyv3WgE9m+JQBkBm8fX2ueijyv0xEX3NhYzdxXxHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfvxCf18BDkHbEGsADQUWxjyupU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:98:87:42:04:ca:55:34:ce:c5:27:4c:31:0e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfbf109fd7c0439076c41ac0034145b18f2ba95
Validity
Not Before: Sep 24 05:00:44 2026 GMT
Not After : Sep 25 05:00:44 2026 GMT
Subject: CN=35b49a13532836b3a1a7650be7393b2e27150135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:08:d4:20:b6:a9:1d:51:ea:00:6c:e9:19:
95:de:26:6d:b8:10:e9:44:87:0d:50:fe:55:96:96:
02:32:33:47:2c:a9:c7:96:19:7a:eb:1f:62:f8:be:
25:ce:9a:f7:6c:aa:f6:e3:e2:f5:51:f6:b4:a9:85:
3a:42:7c:97:90:26:45:5a:fc:1d:e0:27:06:2f:0b:
dc:43:2f:d2:c8:e5:a4:b2:a0:11:9e:9b:a0:2d:7e:
0a:72:1e:77:83:6a:c1:f7:56:cb:9d:8b:51:c3:ff:
77:de:64:01:6d:3b:bd:4a:33:b7:93:f5:0c:96:ca:
92:13:cd:43:4a:0e:6e:a2:e1:b7:8a:f4:e2:97:84:
0f:31:9c:d6:bc:fb:92:ac:34:db:31:b7:75:d2:8d:
8e:9c:34:77:ef:a2:78:4e:4a:4b:c4:2c:d4:e0:6a:
0b:3a:81:c9:ca:88:20:da:0a:02:4b:76:76:fe:74:
9f:c3:a4:d6:aa:5b:0f:ad:f7:0a:44:b5:4b:1f:ab:
b2:a3:a3:49:8d:b8:d7:a5:4d:b3:40:c6:66:40:2e:
44:07:ae:20:77:0e:1f:23:c4:16:6a:be:89:71:56:
c3:4b:7b:05:59:69:7e:01:a6:41:d0:84:a5:7b:0e:
5f:6d:b7:06:b2:8a:ba:44:e1:a8:2f:b2:19:a2:56:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B4:9A:13:53:28:36:B3:A1:A7:65:0B:E7:39:3B:2E:27:15:01:35
X509v3 Authority Key Identifier:
keyid:AD:FB:F1:09:FD:7C:04:39:07:6C:41:AC:00:34:14:5B:18:F2:BA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfvxCf18BDkHbEGsADQUWxjyupU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e0:14:bd:d9:9b:8e:e3:75:80:45:ef:12:23:86:c6:7b:cb:
c9:ae:2d:97:f5:f6:3b:cc:01:65:a8:0f:1e:13:64:5c:b6:75:
2d:e4:5a:db:1f:db:b5:6b:d5:b0:27:25:3c:41:f9:f1:d9:aa:
86:fb:97:96:7c:e2:c3:9c:0a:fe:f3:db:e8:21:ce:f3:92:76:
1e:2c:b8:c3:a1:00:cb:b2:89:d2:4d:1e:e1:e9:b6:40:15:de:
fc:86:35:b6:e1:f6:42:1d:17:bb:1b:b1:c6:55:9e:79:a4:cb:
ec:28:73:d9:1b:72:71:e1:bb:ab:fa:33:b3:88:4e:ce:8d:0c:
6d:a5:1c:6e:0a:f6:03:3b:d8:52:83:b5:bb:34:d4:ce:b3:c2:
e8:b4:cb:4a:6a:17:87:d4:ba:92:b4:30:16:8e:38:a1:51:88:
d0:f4:1f:1a:79:b9:bd:19:c4:17:10:7e:c7:c9:45:73:f8:47:
cd:a9:1f:ff:d8:93:33:88:85:ab:49:ab:e9:f8:26:25:0d:60:
d7:45:ba:05:51:ce:d2:8f:86:fa:cc:ab:c5:29:c6:dc:40:ed:
c7:0d:33:cb:73:cd:89:3d:db:d2:9c:29:8e:60:1e:b1:e0:54:
69:31:50:8c:db:76:00:55:b0:a0:6b:25:62:05:78:f0:47:27:
10:4d:96:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:08:58 2026 by rpki-client