Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: xzYvOIOt+qKJy43+YLUglBTfQ6mCYdfglG3v1xRLC8s=
Subject key identifier: DC:26:3B:34:0C:8F:C7:BD:3B:75:B9:9A:34:5C:EA:B7:A1:E0:F9:47
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 01A1DACAE02E911C42D60942B32A042BAEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0F1F
Signing time: Sat 14 Nov 2026 16:01:31 +0000
Manifest this update: Sat 14 Nov 2026 16:01:31 +0000
Manifest next update: Sun 15 Nov 2026 16:01:31 +0000
Files and hashes: 1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: 3U4iB5oXD4mz0zGr8w0pby2ClsJ+y3CetQoJq5rYZH0=)
2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:e0:2e:91:1c:42:d6:09:42:b3:2a:04:2b:ae:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Nov 14 16:01:31 2026 GMT
Not After : Nov 15 16:01:31 2026 GMT
Subject: CN=dc263b340c8fc7bd3b75b99a345ceab7a1e0f947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:cb:da:20:1a:4d:4d:aa:1c:3d:0b:b7:9d:
ae:32:74:2a:98:37:bf:06:79:bc:8a:d5:bf:6c:72:
78:36:93:76:bd:bd:f1:47:4a:e3:f5:a5:4f:74:88:
3c:b1:64:1f:18:d3:32:d7:f4:63:c8:66:88:d5:59:
a9:5e:8a:b2:cc:c6:8a:db:3e:a6:ae:87:75:35:d1:
f4:86:6f:d6:a8:14:4f:63:5a:3b:e8:b4:00:49:79:
3f:99:16:57:61:2b:7e:2c:ff:99:d8:b6:99:98:68:
60:73:ab:6b:a1:17:de:07:1e:ce:be:ca:ec:81:b5:
7b:18:35:5c:55:08:70:1c:bf:58:6a:4f:d0:c7:1c:
c4:72:53:b7:8a:38:d2:6b:e3:fe:e5:18:44:2e:02:
76:c1:d3:a6:3a:6b:6d:fa:3c:2d:3f:39:83:1b:df:
91:41:78:1f:d0:5c:46:e1:9e:fd:61:7d:87:95:1f:
22:54:f9:a8:cb:63:95:cb:52:32:88:bf:be:d1:6f:
b3:c3:a5:5c:07:87:82:64:64:a6:bd:7f:f7:c4:cd:
95:32:af:67:21:a6:12:d4:84:f0:d0:8c:e1:e2:fb:
a4:3e:68:c4:a0:48:2b:d4:2d:6e:6c:42:ea:bd:c4:
69:ec:d2:cd:4d:67:e9:76:1b:10:96:90:ba:fe:b7:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:26:3B:34:0C:8F:C7:BD:3B:75:B9:9A:34:5C:EA:B7:A1:E0:F9:47
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:47:87:4a:16:46:30:8a:af:ae:9e:39:f4:4c:f8:f3:77:08:
7a:53:eb:54:04:f3:76:d8:aa:68:d2:e7:03:f0:61:0c:3e:9a:
40:d1:e3:3c:8f:dc:42:01:c4:ec:89:af:a9:1f:76:6e:b4:f6:
b6:5c:c1:62:34:93:49:c8:fd:38:63:32:7f:20:af:31:2c:5b:
ed:65:b9:97:ef:f9:ad:b9:6d:e2:c4:8f:0f:8d:9e:6b:b4:76:
0a:8e:33:41:6c:75:2c:0a:ab:31:68:e4:a3:99:28:bf:4a:37:
91:4b:17:8f:71:b4:a6:ee:cf:e3:1b:a8:63:67:51:44:62:21:
2c:52:89:29:95:be:a0:77:0c:07:ee:c7:b7:5a:f6:6b:41:4d:
b8:8a:43:74:00:21:99:20:d8:4e:1e:70:f3:a7:4c:64:62:fb:
f9:48:b9:15:c1:fe:a0:28:60:43:bf:30:6b:8a:03:ac:dd:6c:
c0:ce:a2:54:a0:84:2e:22:c2:9e:26:e1:7b:18:98:6a:39:6b:
86:0c:ae:fc:62:68:26:f9:65:de:4e:08:cf:f6:c5:04:70:d3:
8a:46:65:0f:8a:a8:62:01:a5:2c:1d:c2:ea:33:9c:7e:35:89:
d9:29:55:2c:45:df:8f:df:eb:e4:95:81:a1:cd:6f:45:af:72:
2c:00:6b:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHayuAukRxC1glCsyoEK66tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NDUxYWYxMTEyMGQ4ZmE4OThjYjYyMTJjZWE4Y2E2MWRj
NTliOTIwHhcNMjYxMTE0MTYwMTMxWhcNMjYxMTE1MTYwMTMxWjAzMTEwLwYDVQQD
EyhkYzI2M2IzNDBjOGZjN2JkM2I3NWI5OWEzNDVjZWFiN2ExZTBmOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW3L2iAaTU2qHD0Lt52uMnQqmDe/
Bnm8itW/bHJ4NpN2vb3xR0rj9aVPdIg8sWQfGNMy1/RjyGaI1VmpXoqyzMaK2z6m
rod1NdH0hm/WqBRPY1o76LQASXk/mRZXYSt+LP+Z2LaZmGhgc6troRfeBx7Ovsrs
gbV7GDVcVQhwHL9Yak/QxxzEclO3ijjSa+P+5RhELgJ2wdOmOmtt+jwtPzmDG9+R
QXgf0FxG4Z79YX2HlR8iVPmoy2OVy1IyiL++0W+zw6VcB4eCZGSmvX/3xM2VMq9n
IaYS1ITw0Izh4vukPmjEoEgr1C1ubELqvcRp7NLNTWfpdhsQlpC6/rd6AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwmOzQMj8e9O3W5mjRc6reh4PlHMB8GA1UdIwQY
MBaAFPZFGvERINj6iYy2ISzqjKYdxZuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEt
YTg2YTdhZjM2OGRhLzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEtYTg2YTdhZjM2OGRh
LzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUeHShZG
MIqvrp459Ez483cIelPrVATzdtiqaNLnA/BhDD6aQNHjPI/cQgHE7ImvqR92brT2
tlzBYjSTScj9OGMyfyCvMSxb7WW5l+/5rblt4sSPD42ea7R2Co4zQWx1LAqrMWjk
o5kov0o3kUsXj3G0pu7P4xuoY2dRRGIhLFKJKZW+oHcMB+7Ht1r2a0FNuIpDdAAh
mSDYTh5w86dMZGL7+Ui5FcH+oChgQ78wa4oDrN1swM6iVKCELiLCnibhexiYajlr
hgyu/GJoJvll3k4Iz/bFBHDTikZlD4qoYgGlLB3C6jOcfjWJ2SlVLEXfj9/r5JWB
oc1vRa9yLABrsA==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:27 2026 by rpki-client