Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: XlUQiO8JKpmFxHJ6Qa+2IdXZk7X8lwdgkndqnnCgFHo=
Subject key identifier: BC:0D:DD:56:E8:09:1B:C8:13:39:F2:58:A5:B2:6B:BD:1E:FF:88:35
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 01A0D15C1857F06DC60507CA7FC0E1479DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 1A01
Signing time: Thu 24 Sep 2026 03:01:08 +0000
Manifest this update: Thu 24 Sep 2026 03:01:08 +0000
Manifest next update: Fri 25 Sep 2026 03:01:08 +0000
Files and hashes: 1: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (hash: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: AssOVxsMLGF4omFwK5o+jJEBPxvGLAz/rY8pSt4MFVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:18:57:f0:6d:c6:05:07:ca:7f:c0:e1:47:9d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Sep 24 03:01:08 2026 GMT
Not After : Sep 25 03:01:08 2026 GMT
Subject: CN=bc0ddd56e8091bc81339f258a5b26bbd1eff8835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:58:07:88:1e:93:de:10:6a:f1:a4:92:66:
c2:93:64:e5:5a:19:0f:9f:3e:e7:dc:72:6f:f5:07:
ee:42:00:8c:75:90:c4:c6:98:c9:f6:b1:15:c3:90:
19:da:ce:32:a3:d2:cf:b8:56:b7:10:5c:42:ed:22:
c2:4c:5c:05:f3:d2:7a:b9:37:78:c6:1c:0f:2b:80:
33:de:73:31:06:18:72:8a:7f:e5:44:80:69:b7:02:
b8:44:46:b3:66:3d:6c:8a:15:b3:de:91:f4:6e:5d:
36:93:b3:ce:f8:c6:a0:5e:6f:03:bc:a2:04:82:96:
b3:c6:53:a1:2e:54:0d:dd:28:22:e0:a5:c1:a3:bc:
07:69:ef:78:77:bf:d9:11:26:09:eb:1a:93:1c:80:
af:5b:39:2b:65:0d:fa:7f:f4:dc:d3:5d:47:6c:36:
61:1e:5f:98:02:90:1e:be:09:b8:23:b9:a8:9b:a1:
32:32:e9:df:46:f7:d0:84:15:97:5d:f7:28:6c:8e:
55:db:b9:4d:b1:c5:8a:33:74:2d:57:76:23:5e:10:
c8:32:0a:0c:d9:28:ea:2f:ae:49:a4:e2:70:75:45:
b0:62:3c:87:90:59:9a:bd:5f:d9:e9:3f:34:8f:25:
b0:06:fe:9d:7a:32:26:d3:49:70:0f:4f:80:3e:84:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0D:DD:56:E8:09:1B:C8:13:39:F2:58:A5:B2:6B:BD:1E:FF:88:35
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ad:9d:51:13:cd:51:53:6d:79:a6:df:b7:6f:cd:e3:e4:89:
3c:42:8a:9c:82:37:b4:61:08:45:11:7f:b6:78:bf:e0:6e:e7:
a0:85:9d:03:7e:89:7c:6e:1d:95:6c:43:bd:77:a6:31:45:9d:
62:8b:7f:b0:f2:66:d4:f7:60:60:ac:7d:84:dd:24:02:3c:97:
70:0c:7a:57:5a:d3:98:4e:f6:60:65:74:3d:7a:d9:7f:3e:52:
63:a2:d6:22:d4:f3:39:1e:4f:48:16:cc:3c:7a:b5:44:62:5a:
d9:cb:30:67:34:00:3a:3d:77:62:36:6d:45:70:31:61:88:46:
55:94:2d:24:9c:95:05:57:4e:90:e2:1b:5b:48:4f:b5:e6:34:
e2:33:07:43:8e:70:f4:07:dc:6e:e2:c1:28:75:02:62:bd:05:
f9:c8:65:79:18:a4:0a:8f:14:f2:93:d8:09:6e:36:19:fc:72:
41:67:e1:59:1a:9e:7f:68:48:9d:8c:d7:55:25:71:97:0f:78:
7a:27:55:fb:5e:33:55:02:3d:cd:16:cc:25:c3:0c:05:63:da:
33:20:67:6a:40:d7:6a:fd:d9:dd:61:85:0b:1c:1f:2b:61:2b:
ba:49:55:fa:4e:e9:b8:20:2b:e3:a9:18:9b:15:e7:25:ca:b0:
05:1f:10:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:38:36 2026 by rpki-client