Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: 7zisYiEaDSwy9S+4XQWyTUzENL8jkcylDar0Uu2c6dQ=
Subject key identifier: 0C:59:D8:E4:D0:9B:5D:B4:1F:27:1B:11:FB:6F:68:F6:78:8C:8F:3B
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 01A0DD97476EFE1BE98540462FB4AAEA98F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 12:01:13 +0000
Manifest this update: Sat 26 Sep 2026 12:01:13 +0000
Manifest next update: Sun 27 Sep 2026 12:01:13 +0000
Files and hashes: 1: BvnR5KCMhsoLCz2hSAnbNfkHGk0.roa (hash: hDwrjYY17s8gLiCt6EYouA8sleyAadnkSLPmIcLH8nw=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: l20Lotcg8aKjM03mQTJyocdALtNSa9jCbjQ2wpy7Z/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:47:6e:fe:1b:e9:85:40:46:2f:b4:aa:ea:98:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Sep 26 12:01:13 2026 GMT
Not After : Sep 27 12:01:13 2026 GMT
Subject: CN=0c59d8e4d09b5db41f271b11fb6f68f6788c8f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:fa:e7:97:31:28:c0:03:51:ff:6f:d3:27:
a9:db:0a:c8:43:ea:87:a4:11:20:0f:71:26:9f:6e:
27:89:4e:dc:a7:d8:65:45:18:a7:8c:fa:e4:d9:cc:
7b:da:04:8e:40:6b:cd:09:4d:66:69:ef:75:0f:37:
50:60:34:6f:59:ca:d7:dd:6e:0c:8a:5f:5d:b9:d5:
6c:3a:73:23:fe:fd:51:71:46:d9:b8:28:87:06:24:
8a:99:ab:b2:75:94:25:f5:ae:b5:a2:cf:30:5d:da:
48:3b:08:1f:47:8e:c0:e8:b9:2a:17:e2:75:da:c0:
64:5f:6a:a2:8a:9a:1c:2d:7a:97:1e:82:cc:13:76:
fa:81:ac:f0:6f:91:7b:d4:21:80:e0:d1:e8:bb:12:
b9:1c:9b:de:43:e7:09:89:1f:af:23:92:ee:39:36:
e7:2a:3a:ec:88:2f:28:24:b1:63:a7:9e:67:99:9d:
93:00:49:9b:27:45:92:5c:a5:4c:b3:89:f6:68:c7:
b6:dd:19:92:b1:32:1e:31:99:d4:65:8e:b0:73:26:
6e:48:95:4b:96:bc:fc:ff:74:c2:7f:28:90:53:17:
91:40:3f:70:28:86:3f:a1:8c:d3:ab:c7:42:dd:ea:
31:55:da:ea:2a:7f:1f:72:e1:c3:9f:1f:35:fa:57:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:D8:E4:D0:9B:5D:B4:1F:27:1B:11:FB:6F:68:F6:78:8C:8F:3B
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b5:5b:e8:31:71:71:45:92:2d:f4:62:db:ad:6c:97:fe:40:
2a:b6:8c:7c:cf:8c:83:7f:30:1a:f6:2a:87:36:d0:d8:95:74:
03:52:a4:1e:7f:9b:41:c0:40:52:e7:61:fa:0f:26:d5:30:f7:
28:13:6b:63:2c:68:f6:1d:35:3c:c4:c4:ab:03:fc:bf:4c:3d:
2b:da:29:70:1d:33:f5:3f:12:44:04:52:2d:55:54:de:d2:10:
f3:eb:e5:05:42:b0:fd:0f:3d:27:24:d6:3d:25:87:a6:36:2a:
6d:86:83:a5:fd:59:89:5c:c8:82:37:51:f8:d9:45:6e:b6:58:
34:4b:9c:d0:0f:a9:63:4f:c1:56:92:57:f7:ac:47:f3:d8:86:
be:90:25:7c:91:0b:2f:1a:46:d6:a4:a8:85:87:73:82:37:e2:
da:8a:3a:83:a4:6f:17:63:f1:4e:0c:38:03:06:e1:7d:78:39:
1c:d4:df:43:ca:f8:72:eb:04:15:81:0e:47:a3:8f:d9:5a:6c:
aa:3a:ff:0a:91:2f:52:41:c0:16:06:f0:2e:ee:1d:99:23:d9:
e4:05:13:8c:51:d8:fb:8d:81:4e:dd:0f:1f:c1:08:64:ce:30:
ba:00:30:a8:2b:24:d4:76:74:8e:a7:b4:04:6e:ab:c5:7c:b9:
42:ef:84:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:27:56 2026 by rpki-client