Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier: gn+8snyLInb5codxu7RwFtImNx6xiglPuH8ConRDE6s=
Subject key identifier: F9:5A:13:FA:F1:00:18:83:CD:7D:12:13:7D:14:97:12:51:51:E4:A4
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 01A0D8044DD6BF3B0A0CD2D1E2EFAC3186E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number: 1A84
Signing time: Fri 25 Sep 2026 10:02:35 +0000
Manifest this update: Fri 25 Sep 2026 10:02:35 +0000
Manifest next update: Sat 26 Sep 2026 10:02:35 +0000
Files and hashes: 1: 01ZkvNgWiFr2Xle1lgNBaYZj-X8.roa (hash: krV70iW09YOJwAzEmvYrpBPuNGdijVHEbPaa0HE/jsM=)
2: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: sqxkLHvFMATeOk/sCtUGeL/w0MKcPVl2nJZ5N+UTzuM=)
3: EboQ4nMXI48WwaHSZ15OkVHDyAI.roa (hash: SI3+ap2GxZORyWEjQakTcPIlhvRATeVhJTKd2WR2ixc=)
4: NhoyBtL4_EbM4LnhezBm7A7x9Ec.asa (hash: ThECBnq44tZrd+D7jmjuY22cwzC7GOh+N6/FENYMXvc=)
5: OYpCQdK7lNSRzIdlHHMMZTxhha0.roa (hash: hLxZ48pmO0NghpmoI7b6iic2RgENYFKFAU8pL6U0sxU=)
6: d9HTRu6eOaOYuXd9b7iVCEDddPQ.asa (hash: /iCij5LL4WBtNjhwsh6zV4snLZdM7CyjGzuB4jg4Zsg=)
7: xNSFqM7-0qNODofNrUEn4XQu4ME.roa (hash: raRCbVzrGPXhNpKnAVtwuinosdft0bdaQidRsp21paQ=)
8: xffyY7RBwYFFWdto18bFCIkAi6M.roa (hash: /wOHBg089w6pbrnt+9vXF4Wu2NJ5CjjnhokCvpVnwN4=)
9: zFoXsQ5TqoX8H4OJg8gshkGDSoY.roa (hash: 1/lNAIoklxBbYzhTd9H1F8HgznVYVdAzulj82IXbCic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:4d:d6:bf:3b:0a:0c:d2:d1:e2:ef:ac:31:86:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Sep 25 10:02:35 2026 GMT
Not After : Sep 26 10:02:35 2026 GMT
Subject: CN=f95a13faf1001883cd7d12137d1497125151e4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:77:55:45:1a:76:99:f2:c9:63:42:3c:e7:
3d:e1:ba:d9:26:ec:f1:a1:a5:dd:42:4b:a5:d7:e9:
ba:ed:b3:77:c6:99:d0:da:ac:09:44:d9:4d:aa:1a:
87:73:c0:9a:df:65:56:46:8c:62:84:bf:9c:60:0c:
11:c6:61:1e:7c:84:dd:ac:7f:04:6f:f1:81:71:30:
ce:b9:1c:ee:96:cd:ab:a7:f3:64:90:1b:dd:70:ce:
26:63:0b:66:f9:19:3a:91:fd:0f:af:dd:30:dd:03:
6f:aa:cb:5f:39:2a:0b:f3:77:90:7b:90:b9:20:ee:
dc:5f:a7:28:37:92:31:8e:49:1a:7a:13:42:64:6d:
49:63:ac:56:c2:8f:c5:89:66:8f:4d:31:3c:34:a5:
f4:50:6b:29:d9:0b:b5:06:61:da:fb:c2:1a:f1:4d:
f4:e6:83:cf:5d:4b:a2:c2:e4:1b:4a:c7:96:d5:9f:
77:aa:e2:be:25:77:89:12:34:42:f9:d3:14:ce:41:
62:11:e1:a9:e5:d9:58:46:cd:b5:9a:c5:0f:94:1c:
11:56:04:c9:15:7d:a1:b1:e0:96:6d:93:56:e8:bd:
c5:b3:fe:d5:5e:78:de:35:d1:d4:98:fb:87:51:49:
bb:50:07:6e:be:4e:e6:93:c2:83:27:76:1d:6d:8a:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5A:13:FA:F1:00:18:83:CD:7D:12:13:7D:14:97:12:51:51:E4:A4
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:12:c2:35:d5:50:57:9f:7b:24:6d:bb:47:14:b9:6b:3e:e2:
24:c0:aa:c2:9b:e8:eb:ee:04:47:0d:4d:12:f2:52:85:aa:83:
51:fc:cd:7a:37:f0:43:9d:88:42:b7:f7:3b:04:c4:4c:e2:6b:
aa:f2:f1:86:5e:47:5d:9c:e1:58:92:6c:74:4b:1b:94:ee:0f:
59:e7:a7:47:3d:ce:41:eb:44:8d:9b:0b:62:2e:0d:2a:c8:ab:
67:bc:80:3d:c0:c4:37:9a:b4:7c:1a:5a:b2:8d:a7:36:f3:ff:
1a:f4:ad:70:97:e8:fe:df:82:28:75:3c:56:f1:56:e5:9e:53:
c5:37:d0:fc:c0:f3:6c:f9:00:67:8d:33:c5:a4:06:fa:e2:53:
5b:e8:55:fc:1b:7f:16:a6:b6:ba:c4:67:de:bc:28:bc:5a:08:
65:5c:1d:9f:9b:40:bc:43:71:b7:6d:2a:f1:a8:7c:f9:27:37:
6c:f2:ee:71:1e:37:0e:31:5a:aa:f4:78:4e:a7:00:8e:44:e2:
62:60:ce:a8:84:b8:56:f5:99:eb:2c:c6:66:f4:1d:57:e6:0a:
66:33:df:44:5d:9a:83:e1:bb:9c:fe:de:b2:b7:0a:ba:77:e0:
21:7f:4f:11:75:17:fa:ee:6f:a8:a5:bf:0d:c7:ac:a4:91:77:
03:aa:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:29:28 2026 by rpki-client