Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: dOJYd+jiIdhQbXcIFtq4UFopEYoVcaNSyN43JdU0bME=
Subject key identifier: 55:8F:26:7B:F1:13:96:E1:2D:DD:97:21:F6:23:FA:ED:5A:B6:0B:97
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 01A1DEDEC08CC4A47F1E4A72D10E1242E49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 1B13
Signing time: Sun 15 Nov 2026 11:01:42 +0000
Manifest this update: Sun 15 Nov 2026 11:01:42 +0000
Manifest next update: Mon 16 Nov 2026 11:01:42 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: JkQCXDDikQ9dQ9s7+aB66rCv9R+nFc8hvVp6mxyb8b4=)
4: CBb_QUmnyPXNyR2rB5w8NXHg72U.roa (hash: bD1I4HJtFjaX/Nr5+DpgVpAOzK/Hlp8fWNP0ho2Ow6s=)
5: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
6: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
7: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:c0:8c:c4:a4:7f:1e:4a:72:d1:0e:12:42:e4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Nov 15 11:01:42 2026 GMT
Not After : Nov 16 11:01:42 2026 GMT
Subject: CN=558f267bf11396e12ddd9721f623faed5ab60b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2d:27:4e:32:7b:ec:32:1e:bd:4a:41:a9:11:
04:5b:ce:bd:37:a5:d5:82:6c:56:68:b3:d7:90:84:
ef:e9:bc:ec:03:f5:06:69:48:8c:fb:65:97:80:d6:
13:a5:bd:ea:01:9e:23:f2:b3:9d:13:7a:40:08:6a:
fb:da:6e:8d:2c:35:83:08:5c:f7:8f:49:7d:ba:e4:
45:52:12:a8:c7:10:02:0a:9f:96:24:bc:df:02:83:
4e:65:c9:5b:1b:52:8d:7b:f5:5d:3e:b5:cd:cc:67:
31:d3:3c:48:48:71:2d:c6:2e:17:51:e4:e5:a9:37:
1a:a1:97:1a:ac:02:70:00:33:d2:ac:b3:ec:8c:bb:
96:c0:5b:2a:2a:2a:ac:c1:6c:d4:6d:2e:f6:29:66:
a9:3e:3d:67:89:e8:23:71:5f:2c:56:bb:62:f5:64:
51:c4:28:77:79:5e:36:f6:cd:ae:9f:d2:5d:a3:e6:
e5:c3:8a:6d:ce:fc:df:5b:3c:a4:d1:d3:e0:3f:31:
f5:d3:08:d0:7f:98:e2:4d:39:06:3c:2d:0d:e5:9e:
f8:4e:7d:8b:b4:19:8a:f1:c7:22:5b:cf:83:31:7b:
c5:27:14:2e:6f:2a:f1:9a:62:6b:a3:1d:fb:b8:1c:
a0:db:74:10:dc:dd:d4:28:0e:5d:9e:7d:5f:26:83:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8F:26:7B:F1:13:96:E1:2D:DD:97:21:F6:23:FA:ED:5A:B6:0B:97
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:23:75:c5:32:ba:e2:d1:c8:08:cf:38:5e:89:11:b4:52:08:
9f:01:31:cd:94:6a:71:0c:01:28:de:cb:4c:21:9b:12:85:22:
32:6b:8c:75:a9:43:da:ea:b4:03:77:f1:08:45:ad:fd:38:75:
a8:13:3c:0b:9a:80:5b:54:50:98:b7:0f:16:72:41:0d:67:e8:
e6:2c:74:c9:0a:25:31:79:1a:f0:14:51:c0:5d:6f:79:07:dd:
b3:4c:86:45:70:68:d3:3f:a8:e3:71:42:a6:88:4f:27:5c:c7:
9f:f1:6d:b7:3d:0c:65:7f:b9:09:e5:5c:28:36:e6:55:bb:80:
5e:aa:0e:ff:20:d7:69:93:91:38:b8:f5:97:8d:0d:e6:26:08:
34:af:38:f2:52:41:ea:01:0e:bc:de:30:3d:8d:fd:50:b0:ce:
69:63:91:16:74:38:f6:82:e1:df:09:d6:16:d8:b3:18:ec:69:
41:e7:ca:29:bd:a7:31:19:d4:e9:dc:1a:a5:ba:49:9e:eb:65:
18:7a:4a:e0:48:a1:7e:1f:84:34:e8:de:47:87:12:60:bd:93:
67:38:0b:56:fa:81:f4:5f:b1:97:07:2a:da:07:f2:1e:36:9a:
d4:e5:eb:c4:42:85:7a:0d:cc:11:68:a6:b6:ed:82:8e:ae:69:
7b:86:0e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:19:35 2026 by rpki-client