Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier: AEFlnT7MBfhUU2JNX8upJBOrOAKmPwYNXLns7T7XZ5o=
Subject key identifier: 3E:1B:64:B4:FF:70:A9:F6:40:0E:79:4A:41:DF:3E:43:F7:53:31:C7
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 01A12A31B2972BF99D837B5E3C4C1BC2D05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number: 1AB5
Signing time: Sun 11 Oct 2026 09:01:01 +0000
Manifest this update: Sun 11 Oct 2026 09:01:01 +0000
Manifest next update: Mon 12 Oct 2026 09:01:01 +0000
Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: lCxMja5vIklv3co8L3kuVpUiN71yd5JxK0NL2+GBvqE=)
2: lc3C3wc32zcnHrU1F3n1Adhu2_g.roa (hash: 799Y5VOF1laQ/F9V5y2xMZ9oXgKkk02hVDbVY//MZDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:b2:97:2b:f9:9d:83:7b:5e:3c:4c:1b:c2:d0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Oct 11 09:01:01 2026 GMT
Not After : Oct 12 09:01:01 2026 GMT
Subject: CN=3e1b64b4ff70a9f6400e794a41df3e43f75331c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:2b:cd:be:f6:1d:79:27:51:73:ea:a5:1b:
a7:03:cb:3a:de:b9:cd:77:15:e5:76:4a:ab:38:fa:
1c:56:e9:ce:b7:e0:a4:07:39:1d:cb:9a:5d:23:83:
11:8a:99:24:c6:20:13:92:fc:9b:2f:cf:cd:71:05:
5b:ec:1e:13:44:54:58:54:ea:12:ae:ed:b8:6d:46:
74:18:7f:97:c3:c0:61:11:83:c9:40:3e:a3:e9:51:
24:a0:60:43:dd:07:74:1a:a5:6e:08:18:f4:68:16:
de:c6:5d:61:ad:59:4b:2f:02:56:a6:74:12:17:23:
88:0a:ee:c3:35:dd:32:c3:ee:60:d4:55:99:a8:cd:
35:6d:1f:16:0c:2a:9f:a9:78:ae:53:54:11:78:44:
70:4c:c3:c8:09:50:41:f0:46:2e:5c:92:8e:9c:3e:
b4:d1:66:ff:33:89:e3:5e:19:9e:84:ca:0f:bf:de:
ed:90:fd:08:05:8a:81:c9:d2:5b:4a:a3:5c:f4:00:
a6:ca:7f:89:c3:db:72:ea:3a:36:97:8e:58:0e:1b:
f1:56:f0:0a:5c:eb:6d:d6:1d:d4:9f:e8:c4:ac:8d:
1a:39:ab:09:33:ce:e1:52:35:09:e6:98:ed:25:28:
44:d7:73:49:ba:86:d3:18:b8:7f:ef:d7:67:eb:1a:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1B:64:B4:FF:70:A9:F6:40:0E:79:4A:41:DF:3E:43:F7:53:31:C7
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:89:46:d4:2b:72:83:10:f7:39:35:e8:73:20:eb:b1:70:7e:
c3:92:1b:fe:31:de:62:f8:00:7d:cf:ed:58:7c:b2:fd:25:d5:
38:41:55:7f:77:3f:9b:e2:cf:04:12:07:18:79:b3:90:59:f1:
58:a0:b5:c7:45:75:cc:24:7a:5e:e8:39:fe:5e:f4:4d:da:f8:
26:e7:ed:b4:8b:d3:a1:30:ad:74:41:51:c1:2f:ff:6d:c7:8b:
d6:20:a6:ee:54:df:88:9c:c9:e2:03:6b:1c:09:ea:e6:c6:32:
bf:80:23:5a:1f:53:80:d6:36:cf:f5:79:d5:16:25:42:86:bb:
73:39:76:b8:4a:15:5a:6c:16:52:28:c2:eb:e8:ca:9f:ce:61:
3f:11:b9:e6:3e:e3:20:74:e5:e9:65:b4:25:fe:14:f3:0e:58:
12:5b:39:56:95:6f:38:35:8c:4e:fb:26:27:91:6d:2e:4d:0f:
84:0f:7c:00:c0:78:6a:19:bb:91:f6:f0:69:ad:1a:2c:d3:9c:
3d:03:06:b0:8f:be:6c:ed:f8:bc:0a:45:fa:d6:4c:a1:8b:7b:
3e:40:1b:b3:28:3f:82:ca:0b:cc:87:b3:a3:9b:d0:a8:b0:7f:
73:58:fd:2b:64:5f:70:d9:53:07:f2:46:a7:12:e7:63:81:f9:
c7:96:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:20:13 2026 by rpki-client