Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: cXl5gK8FHGsxJieeW3NT+IOnldIDFsrYmP9FR525Mjk=
Subject key identifier: 23:BC:8C:05:30:A6:AB:97:38:5E:16:37:27:65:65:59:70:57:87:77
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 01A0D26EA71C86D5FC8A5EB60C77D3B48F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 1139
Signing time: Thu 24 Sep 2026 08:01:02 +0000
Manifest this update: Thu 24 Sep 2026 08:01:02 +0000
Manifest next update: Fri 25 Sep 2026 08:01:02 +0000
Files and hashes: 1: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (hash: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8=)
2: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: Mkvb2WO9tMnqroHeZxVpKcRaU18SuIDhIN3BMHiLAQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:a7:1c:86:d5:fc:8a:5e:b6:0c:77:d3:b4:8f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Sep 24 08:01:02 2026 GMT
Not After : Sep 25 08:01:02 2026 GMT
Subject: CN=23bc8c0530a6ab97385e16372765655970578777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:93:88:8f:1e:c4:57:af:89:d9:39:08:a5:19:
c9:92:09:d1:5d:87:98:ae:69:c0:db:5a:eb:a1:fd:
12:ba:e5:3d:fc:87:4a:5f:2f:c4:c0:10:8d:30:d3:
fd:f8:ff:a1:dc:dd:db:9c:c5:43:43:07:5c:09:51:
96:1b:60:95:df:01:11:6d:a7:08:f9:2c:79:12:33:
7f:a0:90:0a:ab:7d:04:0d:c1:a1:1b:e3:4f:8d:a6:
9a:19:17:2f:6a:5f:8b:df:b9:af:ee:5e:d8:5f:f0:
88:66:c5:71:e0:cc:46:43:a1:28:0d:54:07:7c:88:
fd:64:a7:0d:dd:ef:63:79:eb:3a:ec:4c:eb:18:31:
0f:f5:11:6f:13:b2:f1:d2:1c:50:a4:56:20:55:08:
e4:df:4e:27:c5:1e:4a:99:22:71:79:51:f9:b2:a4:
7b:fc:c5:ae:99:25:42:a9:88:06:f0:82:b4:b3:a6:
06:9e:86:ca:b4:31:94:fe:5c:dc:5f:30:a7:c1:db:
04:91:5f:f6:ca:54:38:a0:30:74:80:85:1f:02:6c:
64:31:d0:6e:33:90:09:84:45:bc:61:c3:cc:65:2d:
ff:75:8b:ef:ba:5b:47:c1:31:8a:ee:9b:d2:43:4b:
8e:f7:75:c6:de:d0:df:04:49:c4:d9:25:c6:5d:8a:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BC:8C:05:30:A6:AB:97:38:5E:16:37:27:65:65:59:70:57:87:77
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d9:f0:cb:de:72:37:13:49:02:57:b1:87:2f:96:f9:2e:33:
d1:04:18:cd:24:79:9c:50:7a:af:55:fc:33:47:1d:8f:03:2c:
f3:86:ee:8b:46:da:20:cd:a6:85:01:e3:87:ce:f8:26:49:e7:
6d:6c:6c:36:e3:f9:90:55:42:d4:d8:c1:7d:81:07:e9:c8:32:
d5:1e:31:0b:c1:54:16:cc:fe:68:5f:24:07:2a:39:28:af:1c:
12:5e:a7:65:03:3e:24:9a:32:a2:8f:96:97:56:5a:22:54:cf:
12:02:24:36:c0:13:97:b6:a6:a3:08:74:d5:64:54:57:01:1c:
c4:15:9c:da:5e:f9:83:3b:43:4b:7a:be:ec:cf:29:c1:90:e9:
ba:23:2b:5c:33:a7:37:a1:1f:b3:d4:9b:e9:dc:b2:fe:b9:17:
aa:9b:2b:75:ab:78:36:4a:b8:dc:d3:ac:46:43:a5:61:93:ad:
f3:33:5f:3a:16:f0:e4:dd:65:f7:46:7d:92:f8:3a:74:a4:68:
05:d0:ac:30:6f:40:43:04:66:09:cd:52:bb:d5:41:6b:27:12:
d6:76:b5:fd:58:3b:fd:d3:18:da:d1:4c:a6:d1:b2:bf:67:e6:
de:ea:fe:fb:8e:a0:b8:64:d9:2c:c2:c1:0d:55:ee:04:6e:4a:
2f:81:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:15:40 2026 by rpki-client