Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: TBeRBTNy/pR9isO8V59PqVfmdp1RcIrWZAQE4KIcgOs=
Subject key identifier: 9A:26:BB:DE:7E:E3:3F:75:E9:D9:75:73:0C:E1:E3:7F:A9:1F:82:7E
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 019D25F0FB33ED5F8383FEA2BB16FB48D247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0F52
Signing time: Wed 25 Mar 2026 17:00:43 +0000
Manifest this update: Wed 25 Mar 2026 17:00:43 +0000
Manifest next update: Thu 26 Mar 2026 17:00:43 +0000
Files and hashes: 1: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (hash: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8=)
2: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: PwS4W7HQjn9kUok7IA4QqpaoQiAjw6f3dwmwx+JlpsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:fb:33:ed:5f:83:83:fe:a2:bb:16:fb:48:d2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Mar 25 17:00:43 2026 GMT
Not After : Mar 26 17:00:43 2026 GMT
Subject: CN=9a26bbde7ee33f75e9d975730ce1e37fa91f827e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:cd:1e:e2:2f:a4:44:da:1c:8f:47:c0:6d:
af:8e:b7:7b:1e:2f:36:80:2e:60:f1:f3:5c:99:5b:
a2:e7:2c:8b:d6:74:ff:48:5a:50:e7:ad:68:34:98:
4b:5d:3f:7c:8e:97:9c:e7:94:2c:3e:6c:96:99:86:
8c:33:c5:86:a4:32:b1:d4:19:4b:73:00:5d:e3:3f:
c5:76:5c:2e:aa:d4:a8:8d:db:d1:d5:02:66:fc:97:
42:c6:57:53:14:6c:0a:14:6d:56:1c:91:36:2f:ef:
fd:75:ba:ca:e0:85:ee:c9:98:b7:96:44:ac:67:ea:
5e:56:42:40:fd:e7:a3:c7:01:05:44:ae:e8:38:12:
92:eb:0f:67:70:93:dc:3e:a4:7e:de:21:72:c6:6a:
47:7a:6a:14:a6:a4:72:f3:77:41:cc:1e:df:4e:c3:
82:ca:07:15:9b:5b:ed:6c:d5:df:ce:79:cd:8c:61:
19:34:dd:e1:69:7c:ed:98:2b:90:28:fb:95:13:93:
c8:c4:83:10:16:42:20:7c:77:01:78:f9:c5:57:fb:
fe:46:2b:43:97:d7:3a:11:8d:d9:5c:de:1c:cf:13:
29:ec:2c:09:0d:af:fb:93:25:42:b1:0a:0e:7e:5a:
85:a3:db:96:cb:73:01:6b:9a:93:f1:a2:2a:9d:55:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:26:BB:DE:7E:E3:3F:75:E9:D9:75:73:0C:E1:E3:7F:A9:1F:82:7E
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d1:b5:8c:5b:df:61:18:57:5b:d8:18:ad:69:98:71:ae:9a:
32:20:bb:f7:5d:ef:1b:d1:45:83:49:c9:9e:77:14:9c:d0:d2:
01:b6:8e:fb:88:61:15:22:08:68:a1:6a:7f:81:51:1e:3e:d4:
3c:74:0c:a1:53:bc:03:8e:ba:7a:1e:6d:0f:32:24:09:f3:e8:
2b:58:01:06:0b:79:b8:2d:25:6d:b9:0e:73:fd:7c:4d:76:4f:
e7:6f:c4:41:34:16:9e:b2:19:9a:84:e8:57:4f:b7:bc:d9:7f:
3e:4d:54:bd:4d:82:6b:d5:ae:90:74:e0:2f:70:43:da:f8:08:
95:60:8b:00:b0:66:3f:51:b7:2b:12:9b:83:2f:bb:e0:38:f7:
d0:fa:79:41:ed:85:51:b1:1c:0a:8f:d6:3d:f9:1a:cd:05:8a:
cf:aa:60:a4:8f:cf:91:3b:34:05:7e:e8:86:7a:65:17:46:80:
ec:2e:03:95:4a:9e:3e:44:0c:6f:3c:53:cc:3f:7b:7e:8d:54:
96:a5:03:5d:45:32:3e:0f:3a:70:36:4f:f5:8a:b7:a0:65:b2:
41:bf:94:fd:56:00:10:06:2d:de:b1:80:57:cf:8e:b2:ac:e0:
cd:e7:0a:f3:f5:a5:5e:73:43:c5:5e:cf:91:40:2e:62:12:12:
db:50:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:11 2026 by rpki-client