Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/0-vFFsycPFpWzWuS0K37NUFAMSE.mft
File: 0-vFFsycPFpWzWuS0K37NUFAMSE.mft (raw, json)
Hash identifier: 2b7B5EKWgHrmxLDi65lnR8NVKGWvrUtCOYmtA3jg1sk=
Subject key identifier: 58:34:A5:77:1F:B1:A1:99:DC:35:00:61:1A:3A:46:FD:58:AD:68:41
Authority key identifier: D3:EB:C5:16:CC:9C:3C:5A:56:CD:6B:92:D0:AD:FB:35:41:40:31:21
Certificate issuer: /CN=d3ebc516cc9c3c5a56cd6b92d0adfb3541403121
Certificate serial: 01A0E8535D53159740BB22635F6D1531EA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-vFFsycPFpWzWuS0K37NUFAMSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/0-vFFsycPFpWzWuS0K37NUFAMSE.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 14:02:52 +0000
Manifest this update: Mon 28 Sep 2026 14:02:52 +0000
Manifest next update: Tue 29 Sep 2026 14:02:52 +0000
Files and hashes: 1: 0-vFFsycPFpWzWuS0K37NUFAMSE.crl (hash: Vftf90FJXugLyNfKlytXpUHLjFFA3YL98OZJ/hYtdUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/0-vFFsycPFpWzWuS0K37NUFAMSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/0-vFFsycPFpWzWuS0K37NUFAMSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-vFFsycPFpWzWuS0K37NUFAMSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:5d:53:15:97:40:bb:22:63:5f:6d:15:31:ea:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ebc516cc9c3c5a56cd6b92d0adfb3541403121
Validity
Not Before: Sep 28 14:02:52 2026 GMT
Not After : Sep 29 14:02:52 2026 GMT
Subject: CN=5834a5771fb1a199dc3500611a3a46fd58ad6841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:9d:09:81:41:52:f1:2d:b3:a9:06:aa:4e:
13:3a:82:0a:2a:51:da:04:91:5d:a1:2c:8f:32:86:
61:2c:80:2b:1c:5d:fd:72:6a:bf:d4:0c:4a:4a:46:
e7:27:0e:19:63:4c:28:6b:26:98:b4:d9:1b:1e:1a:
94:8c:70:fc:b8:12:a6:17:23:8b:00:25:5c:b2:fe:
7e:5a:91:a3:0b:87:5a:76:55:26:56:04:dc:86:2e:
3f:ac:95:52:5d:0d:71:39:55:e3:ba:a3:99:e2:68:
74:99:87:ca:c6:63:14:e1:08:ba:b3:ac:26:41:7f:
2b:63:3c:4f:c6:4c:30:0d:61:6b:12:17:4b:8a:39:
37:3d:84:ba:51:2a:65:1f:be:3b:9d:d5:9c:d6:bf:
3c:a4:cc:5f:1d:0d:f6:bc:66:b1:37:44:a8:19:cf:
e8:38:4d:46:10:60:78:92:86:94:3d:55:bc:2f:9c:
5f:f8:c0:22:6c:bc:02:26:0a:ea:b8:6e:10:2d:d4:
58:8a:3d:7a:b1:54:70:3b:ef:02:39:cc:80:43:4b:
73:45:d9:62:4a:3d:eb:49:6d:42:0f:38:9c:3b:25:
a8:19:34:d3:a2:33:9d:e6:13:93:ca:c4:af:c0:d2:
61:01:4e:93:dd:43:8c:04:ad:f0:49:0d:57:69:42:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:34:A5:77:1F:B1:A1:99:DC:35:00:61:1A:3A:46:FD:58:AD:68:41
X509v3 Authority Key Identifier:
keyid:D3:EB:C5:16:CC:9C:3C:5A:56:CD:6B:92:D0:AD:FB:35:41:40:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-vFFsycPFpWzWuS0K37NUFAMSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/0-vFFsycPFpWzWuS0K37NUFAMSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/0-vFFsycPFpWzWuS0K37NUFAMSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:36:7f:7b:3d:d9:99:7f:37:6f:a1:5e:52:8d:e1:9f:63:f8:
4f:20:76:17:9e:77:37:71:d1:8b:ae:91:a6:f3:1f:10:c0:49:
ef:46:ed:c6:be:e7:65:9f:6a:01:26:cb:ae:16:2d:ae:c2:b6:
eb:fb:7c:3b:c6:54:64:24:24:ea:f3:08:29:45:14:43:33:4a:
0e:ac:31:29:79:f5:72:53:2a:7a:c2:ec:71:b2:11:79:a7:54:
05:b3:cd:9a:c8:e6:6d:7b:2a:db:f2:67:99:de:f7:9d:db:cc:
62:b0:f6:c6:c8:0d:3c:28:32:50:a0:d5:9a:f2:a4:0c:03:aa:
02:43:18:c7:51:e6:3b:43:bb:fb:a6:0b:40:ab:bb:11:6b:01:
ed:ff:98:86:f6:f5:ca:77:74:00:55:93:c7:8d:ec:10:ad:ae:
00:f1:64:be:51:67:3b:2c:b3:a3:91:4e:39:f0:49:bc:15:92:
2e:64:48:af:9e:1b:cd:f0:e0:50:b4:cb:2c:cd:57:83:13:74:
6e:e7:b1:db:fb:ff:a1:ec:50:85:60:0f:1d:81:07:63:6f:2c:
93:05:0f:76:70:d9:d9:25:15:20:e7:3a:3f:e6:ff:98:cc:38:
ce:62:da:a0:25:43:9c:3f:25:66:67:66:61:2b:4e:fd:a9:8e:
81:af:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:36:03 2026 by rpki-client