Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: XMm7MIRhJ5osWDPzEoNIcXpyu/LDj93KHP9x7G6wfJY=
Subject key identifier: 54:52:45:A7:D2:1C:AD:15:5B:48:04:4D:01:0F:A4:68:23:22:3B:CC
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 01A0E92DBA3BE16FD3539B7D73D46E999E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0DA8
Signing time: Mon 28 Sep 2026 18:01:23 +0000
Manifest this update: Mon 28 Sep 2026 18:01:23 +0000
Manifest next update: Tue 29 Sep 2026 18:01:23 +0000
Files and hashes: 1: 0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa (hash: k/rzNKop48uQMb7AE0nMU7aM7Ne9RnAWwxkHE7UZejk=)
2: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: gO79MUpR1M1WgYcdMCwWJkr13Pf/dc6VLZDtuqjha1s=)
3: KRcyCCYfWjqOexCvOzIazT3vyF0.roa (hash: Xflkf+SBr0N9aoeaiAaOKwpAiGgoQ6BSyRkyGn+zEmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:ba:3b:e1:6f:d3:53:9b:7d:73:d4:6e:99:9e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Sep 28 18:01:23 2026 GMT
Not After : Sep 29 18:01:23 2026 GMT
Subject: CN=545245a7d21cad155b48044d010fa46823223bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:a3:08:55:cb:94:a9:af:ed:84:99:8b:d3:
e6:a2:e9:bd:87:69:7a:48:85:a5:c0:49:63:fb:fa:
ef:78:ff:d5:04:35:17:fd:c7:ee:35:92:a4:01:31:
16:e7:87:2d:42:71:17:49:b7:73:7c:eb:36:b7:a3:
36:5c:59:a7:5f:da:95:4a:bb:8d:ad:cc:77:fe:37:
bc:04:97:97:4b:e9:16:1c:e8:df:50:5e:af:9a:17:
f0:1b:b9:b4:57:a1:29:8b:b8:3b:39:d4:b0:6e:49:
bc:73:01:d2:58:af:4b:0a:8a:57:ed:c1:c7:14:68:
78:38:d4:83:b9:ce:ae:e8:fa:12:fa:7e:41:14:b6:
3f:b4:2c:c9:94:8c:f1:ee:f0:fa:b7:af:1d:bb:59:
bc:20:c7:cd:c2:48:9e:0e:7f:fe:cd:a1:93:ed:52:
fc:e3:5e:8e:d6:8c:6c:11:7a:ff:78:65:86:93:a7:
f8:fa:b4:0c:a9:99:b1:b8:67:ec:59:31:a9:19:ef:
5d:d4:cb:1d:cd:58:98:c1:1a:2c:3c:5c:e5:d9:d5:
04:f4:1b:f6:c7:0e:4f:4d:53:75:58:b1:76:61:51:
ab:4b:9a:d3:ac:e4:0c:8e:bc:fc:a7:30:4b:ad:eb:
2e:bd:52:bf:60:0f:01:3b:ea:0b:40:db:94:b0:63:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:52:45:A7:D2:1C:AD:15:5B:48:04:4D:01:0F:A4:68:23:22:3B:CC
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e4:55:b4:fa:bd:26:20:16:21:ce:8f:43:52:7f:3d:2c:e7:
64:60:ea:b9:4f:f0:1a:96:27:62:97:87:73:e9:7d:b2:b7:83:
e8:cc:7d:26:a2:db:cb:f2:04:c7:8c:2b:46:d9:0e:c5:0f:ed:
e8:21:fa:54:63:f2:ec:50:f7:e0:49:52:d3:7a:09:f7:b4:b1:
59:d8:14:09:69:58:22:99:32:55:83:33:3c:bd:93:b8:f5:93:
dd:4f:7f:f8:6b:82:1f:a6:39:5b:4f:66:a6:d1:58:be:7e:99:
ae:a1:80:d3:a7:5c:2a:16:52:50:bb:65:1a:02:bc:b3:23:24:
11:10:07:95:74:76:e7:05:69:fa:b7:7d:81:32:99:ce:5d:87:
87:55:8a:ed:6f:38:d5:b5:39:ed:a5:05:32:35:30:12:8a:cf:
e0:28:24:9f:90:a8:4f:94:60:df:e3:4d:b9:88:9f:49:be:8d:
7a:a3:89:9c:3e:68:2a:9d:44:04:8f:42:c4:dc:d1:ff:72:0c:
89:63:38:a3:04:13:9c:7c:21:83:4d:14:b5:d8:0f:be:4d:dd:
57:05:e7:3d:03:52:4a:df:5d:58:5e:8d:b9:da:1e:de:75:d6:
a6:f0:d5:a4:64:e8:4c:a0:e6:a7:ab:12:87:2c:55:c2:55:b5:
7c:94:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:54:28 2026 by rpki-client