Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
File: 891MdxfPacsnmpvjhwzh1ViI6BI.mft (raw, json)
Hash identifier: nYouI4XYC05M8acsOw2wM0D97IuuzkqbrfRr33bktJg=
Subject key identifier: 53:DF:8D:82:71:34:E3:E6:97:CF:F9:03:F4:C8:B7:A8:2C:B5:EC:25
Authority key identifier: F3:DD:4C:77:17:CF:69:CB:27:9A:9B:E3:87:0C:E1:D5:58:88:E8:12
Certificate issuer: /CN=f3dd4c7717cf69cb279a9be3870ce1d55888e812
Certificate serial: 01A0E17429D58C68BBC6A12330E091BB050A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:21 +0000
Manifest this update: Sun 27 Sep 2026 06:01:21 +0000
Manifest next update: Mon 28 Sep 2026 06:01:21 +0000
Files and hashes: 1: 891MdxfPacsnmpvjhwzh1ViI6BI.crl (hash: j52ztvUVtPMbcjNVUIsP7WrPGBI/9jPT/zlsQCID7rc=)
2: DaMYvuVk4VxbeiY5886TRjR80-c.roa (hash: D4FeXaKBovPda7PA/y7sGSV1DU6UbX4cAmo6Backls8=)
3: lyXkg79P2FE1dqoSHDtkOfaKYYE.roa (hash: cbRt0iwVvDFLlG9nHuLjCQUjtgic0aVsU0+cAtoJ9AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:29:d5:8c:68:bb:c6:a1:23:30:e0:91:bb:05:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3dd4c7717cf69cb279a9be3870ce1d55888e812
Validity
Not Before: Sep 27 06:01:21 2026 GMT
Not After : Sep 28 06:01:21 2026 GMT
Subject: CN=53df8d827134e3e697cff903f4c8b7a82cb5ec25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:dd:31:26:5e:7b:e4:c8:d1:c4:7b:02:9f:
74:cf:14:d8:34:12:e9:dd:33:ca:70:20:b2:74:34:
2e:66:67:a0:38:a0:65:fe:fc:08:41:3a:e0:a1:ea:
2b:8e:f9:0e:a7:82:56:7c:49:f4:d2:b4:21:c8:22:
66:f9:12:2f:2e:d0:06:37:81:82:a4:df:ca:b1:96:
ae:d3:d3:60:08:cf:87:4f:e5:0c:1d:74:e6:6e:59:
37:b8:c6:45:4e:07:dc:90:41:aa:20:bf:9f:e2:59:
92:82:d8:50:cf:83:e4:04:4d:87:1f:92:c2:a8:8e:
7c:e0:67:47:d4:91:f0:6a:c8:72:b8:0f:0f:ad:81:
6f:54:04:ad:35:66:65:43:fe:15:dd:a4:49:4e:ea:
33:6a:7c:b2:94:7c:5f:48:d7:69:af:90:1b:4c:9b:
9c:5a:8a:24:5c:74:2a:73:e7:b5:1e:2c:ca:36:2a:
ac:6f:0c:9b:14:58:e0:a5:d5:91:04:21:10:b5:4f:
79:62:c0:08:64:37:05:95:c1:01:3c:63:1f:13:72:
93:e9:0c:c1:34:71:f3:86:16:f5:c1:fd:db:81:5a:
dc:df:50:df:bf:25:97:04:79:df:01:e3:2d:30:e5:
3a:07:a7:f2:b4:a0:f0:31:32:69:ff:f6:ac:e6:e2:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DF:8D:82:71:34:E3:E6:97:CF:F9:03:F4:C8:B7:A8:2C:B5:EC:25
X509v3 Authority Key Identifier:
keyid:F3:DD:4C:77:17:CF:69:CB:27:9A:9B:E3:87:0C:E1:D5:58:88:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9e:d2:eb:54:7c:65:78:5c:46:76:1d:93:57:1c:78:49:51:
2b:fd:f6:ff:b1:89:1e:e3:ef:39:71:32:03:da:50:26:61:32:
35:70:71:9b:09:43:04:da:73:b4:9d:48:a7:5a:0a:59:a3:42:
d2:23:5a:4b:5e:22:b3:b0:bf:a5:96:1b:a2:0d:a7:4c:6f:fb:
ec:e3:bc:91:bd:92:52:56:dd:26:be:0d:ba:75:10:c2:05:8c:
e8:b0:60:f9:77:32:36:dd:a4:69:fb:c7:47:4c:75:39:4f:e6:
0a:f7:d2:f3:d6:ff:2f:ab:86:7f:62:06:45:19:ae:d1:50:18:
8e:40:da:64:59:a6:48:7a:58:46:9b:97:3b:0d:57:28:a4:8f:
f9:27:e6:d3:b2:42:ca:a8:91:8e:ba:f9:48:8e:d2:f3:8b:a6:
48:5e:41:dd:37:b9:73:fe:d0:31:38:bc:65:43:06:3f:af:f5:
b7:a9:39:b9:a3:ba:5b:1d:8d:93:de:07:50:d6:80:e8:97:6b:
2a:87:96:41:5a:4b:1f:ee:b2:5e:44:b1:5e:d3:2f:ef:f9:1e:
e1:b9:2a:0d:24:5c:50:f0:8f:3a:a0:86:10:a4:e1:d6:1e:a0:
63:70:7b:a6:92:1c:9f:87:f6:90:3b:d6:22:03:23:17:07:48:
20:0a:5a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:35:37 2026 by rpki-client