Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
File: 9uGk5drZ5MwU4BaRDsS2adXjq5w.mft (raw, json)
Hash identifier: 6Nc+E+E+qLnf3JrGQ40gh0YbWeMwUY4J4NicRMXBXkg=
Subject key identifier: BC:96:93:0A:B2:79:89:34:58:8D:AF:23:EE:8F:C5:34:A9:99:AE:57
Authority key identifier: F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
Certificate issuer: /CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Certificate serial: 01A0CAB4AF8819759465284E208A1CD1CE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
Manifest number: 0286
Signing time: Tue 22 Sep 2026 20:00:34 +0000
Manifest this update: Tue 22 Sep 2026 20:00:34 +0000
Manifest next update: Wed 23 Sep 2026 20:00:34 +0000
Files and hashes: 1: 9uGk5drZ5MwU4BaRDsS2adXjq5w.crl (hash: 6nmfgbAdyeSwYG/foNIuk8Zovs3YENpOqpe9cEVrQME=)
2: H_uYynhuG6l8wZqNzHCCCngrv6I.asa (hash: cNBW9xKMdJGhXlb3YQvmEsKCGDZEJR6jaSu58wTwgns=)
3: SRCK7Ufu64KsijFRcRFiAbmnlfM.roa (hash: r3tIqkepOEqyJpInWtiArXc2WfvA20Y21WU/4jD8OPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:af:88:19:75:94:65:28:4e:20:8a:1c:d1:ce:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Validity
Not Before: Sep 22 20:00:34 2026 GMT
Not After : Sep 23 20:00:34 2026 GMT
Subject: CN=bc96930ab2798934588daf23ee8fc534a999ae57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:52:14:df:e8:ab:04:c5:c5:3f:c6:3f:cb:
99:19:1f:19:25:3d:86:e3:24:8b:09:b4:4c:ea:c4:
a9:fa:0c:da:01:56:d8:4f:4e:3f:c1:b5:2a:6a:fb:
35:e5:8b:1a:4b:aa:dd:3b:2e:64:99:98:70:f2:88:
06:7f:39:f4:70:95:cb:d7:d1:17:8b:2f:b6:dd:24:
80:8b:88:d7:1b:bd:23:fd:bb:4f:6e:85:32:cf:08:
f0:d0:b7:f1:f5:63:2b:45:d5:e2:f4:aa:09:2c:e4:
8d:03:d0:f3:17:af:d7:c7:7b:cb:ff:f5:87:1c:66:
1d:e3:23:5d:4a:a7:65:4e:30:db:a8:15:2c:ef:5c:
1a:d0:a2:1b:61:7a:02:73:0e:d5:36:71:3a:65:b1:
46:04:e4:57:98:94:78:af:bf:84:42:d2:25:ce:77:
18:1b:34:00:24:4a:83:6f:bb:36:02:bf:4e:b9:91:
ee:62:84:77:c6:8b:50:a3:09:b2:c4:fd:e1:b2:d1:
19:9d:ab:c8:29:ec:10:0d:e5:fd:96:bf:76:9f:df:
0b:f4:66:7a:7e:d9:63:93:d6:0d:65:f5:6d:17:34:
64:3a:5b:fe:b1:6f:69:d3:cd:01:dc:f9:65:51:7c:
cb:46:ba:19:d8:e3:a3:7b:5d:fb:30:68:3f:7d:f2:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:96:93:0A:B2:79:89:34:58:8D:AF:23:EE:8F:C5:34:A9:99:AE:57
X509v3 Authority Key Identifier:
keyid:F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a7:00:83:86:41:ff:b5:97:65:e7:0e:8b:cd:f0:e7:bd:0c:
60:15:8c:89:95:25:d6:de:ed:55:8d:45:8d:3e:4b:2d:c2:c8:
97:07:a4:96:3b:af:6b:43:46:46:a3:75:48:18:fa:c8:11:02:
96:d5:68:1f:48:5d:b3:55:18:85:95:0e:2c:5c:28:dd:47:c8:
2f:95:98:2e:3e:49:d0:59:55:06:ae:c8:90:43:b3:11:36:a6:
23:c9:0f:40:41:25:d6:ac:ee:fc:ed:d7:f3:50:81:43:02:b5:
99:31:03:19:4e:66:81:a6:6a:bd:63:c7:5f:f5:d7:70:49:0f:
d3:ea:f3:90:31:ec:d1:56:34:60:74:e2:d3:f9:e9:bf:dd:33:
50:ed:81:96:ed:0e:2f:b1:27:5d:fc:29:d7:d7:d3:20:2b:10:
8c:9c:b5:21:4b:f1:ce:08:cd:6b:71:12:95:a8:55:a6:eb:8f:
5c:7f:7b:bf:97:f2:f9:6e:b6:3a:32:87:44:fd:9a:31:f3:2a:
ea:ec:95:39:98:79:6c:a7:be:37:dd:be:1b:22:37:10:9e:97:
ba:07:5b:36:71:c6:b2:f1:e1:07:a9:a8:9e:26:bf:0c:07:16:
48:cf:06:23:c8:66:10:bc:d2:9d:ac:80:e6:f2:4c:dc:f7:ad:
b6:65:a4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:50:39 2026 by rpki-client