Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: VNrQnhi8Re+c/mRuaYNEKSsAbGkp+ujWjpz6oFroESw=
Subject key identifier: 11:6F:E1:6A:00:C0:B1:B7:00:D0:CC:E5:0B:46:CF:1E:DB:C3:DC:AA
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 01A0D07F7223ADE1FEC40B4673186F039D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 1A87
Signing time: Wed 23 Sep 2026 23:00:08 +0000
Manifest this update: Wed 23 Sep 2026 23:00:08 +0000
Manifest next update: Thu 24 Sep 2026 23:00:08 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: qAnFeHEK0j06dBEw7mEXhKH5JVFB81JMx52NOve8914=)
4: CBb_QUmnyPXNyR2rB5w8NXHg72U.roa (hash: bD1I4HJtFjaX/Nr5+DpgVpAOzK/Hlp8fWNP0ho2Ow6s=)
5: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
6: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
7: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:72:23:ad:e1:fe:c4:0b:46:73:18:6f:03:9d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Sep 23 23:00:08 2026 GMT
Not After : Sep 24 23:00:08 2026 GMT
Subject: CN=116fe16a00c0b1b700d0cce50b46cf1edbc3dcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9c:d8:ec:ec:a5:1b:ef:d1:5e:7b:3f:ae:75:
b3:d7:ec:0b:bc:d5:63:fc:91:7d:4a:c0:53:70:7d:
b0:62:40:0a:02:7c:fb:13:8a:fa:f6:af:bd:b9:e1:
54:8a:df:c8:54:6f:60:04:79:7f:3a:ed:e0:0c:aa:
b1:88:89:79:34:5b:67:74:47:c4:f5:a0:15:74:ed:
fc:9d:39:10:f7:68:29:c1:8d:4a:43:1e:72:6b:43:
8d:94:71:f8:cb:e6:1d:47:5a:32:c1:5e:d7:25:40:
7e:ce:34:18:02:ea:ee:78:0a:3e:cc:8b:22:6b:ca:
56:7f:33:90:8f:cb:4c:2a:42:ed:be:9f:b3:5e:26:
a0:0b:82:37:30:88:4c:b6:12:ed:7d:2f:de:64:90:
11:9d:63:74:8b:21:09:3e:bf:f1:a5:a8:d9:58:bd:
4a:10:e3:81:a6:a9:e2:02:d1:25:dd:39:4a:10:35:
5e:74:77:3e:1d:d7:6b:12:22:8f:6f:7e:c5:9f:4b:
26:fc:e9:34:ff:73:f6:a1:05:af:44:52:84:ba:8f:
22:eb:35:7e:05:e0:1e:54:56:88:02:ef:a5:8f:fb:
06:c4:0c:d9:78:fd:c6:e4:80:04:93:68:e6:b3:72:
7a:a0:fe:75:ed:af:2a:12:76:f7:db:82:95:ac:d2:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6F:E1:6A:00:C0:B1:B7:00:D0:CC:E5:0B:46:CF:1E:DB:C3:DC:AA
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a5:e2:d6:2d:5d:8b:42:1e:7d:a3:94:be:58:b1:5f:ea:95:
a2:b8:e9:e2:c8:d8:c7:6d:ec:20:20:c5:f9:3d:ed:eb:92:85:
67:5c:61:a1:0e:39:47:f3:fd:af:59:38:cb:a3:83:eb:de:ff:
7f:50:38:9a:86:43:fb:13:b9:7e:9b:0b:54:c3:65:15:74:94:
2d:a0:bd:2f:57:ca:9e:98:a3:46:86:d7:56:d6:d6:99:d7:66:
0e:98:9c:ed:cb:09:ca:f6:85:6c:c6:14:b9:61:f3:36:dd:de:
64:0f:07:d8:24:9d:3e:b6:3b:68:7f:7f:b8:48:a7:34:e4:e7:
b0:12:25:8c:b0:4d:5e:91:8e:b5:74:6c:4f:9a:0e:f4:29:c2:
1d:2a:b7:24:49:40:4c:81:8d:3e:4d:1a:aa:fe:8c:ed:ca:60:
3e:9f:c7:68:cb:b0:c0:3b:e5:b5:b7:ea:69:4b:e7:f8:c9:bb:
33:cf:8a:90:6f:82:69:09:d8:55:95:cb:dc:58:e4:94:a4:8b:
02:65:30:7b:89:d4:c1:74:f6:ec:d4:32:ea:da:84:0b:87:f1:
dd:fa:c0:fe:7d:07:33:51:5e:2c:92:34:20:ab:21:94:3a:e7:
30:77:f7:72:dd:26:57:11:93:b3:4d:32:df:38:e9:3c:96:de:
59:2d:d0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:48:29 2026 by rpki-client