Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: LMH7P0MohQYGJPB4hZxH43UiYKUPCG2MnqFRkL6dcdA=
Subject key identifier: 29:4F:92:18:E0:F5:12:4C:C9:86:8B:8A:A1:44:7E:03:51:A7:BB:11
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 01A0D34A7A40CC1BE4C0BDE52A1763951A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 12:01:08 +0000
Manifest this update: Thu 24 Sep 2026 12:01:08 +0000
Manifest next update: Fri 25 Sep 2026 12:01:08 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: duZi0yJ7uhbKNZYgfmTmeiXmYLWnwZMk+4HOQ3jfLzQ=)
2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:7a:40:cc:1b:e4:c0:bd:e5:2a:17:63:95:1a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Sep 24 12:01:08 2026 GMT
Not After : Sep 25 12:01:08 2026 GMT
Subject: CN=294f9218e0f5124cc9868b8aa1447e0351a7bb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:7e:21:bb:05:4a:42:cd:dc:9d:2d:2e:25:
c4:52:29:3b:b1:ef:ff:77:93:6d:ce:11:83:de:42:
bb:40:5d:1f:75:95:55:e0:85:3b:77:5f:1e:bc:1e:
9f:6c:09:91:f6:36:d1:0d:54:ba:c0:e9:77:10:7c:
fd:06:ad:c2:69:04:26:c0:e3:8c:d3:fe:43:9f:b9:
56:53:3b:da:9f:d9:f2:72:47:da:88:69:13:81:a7:
44:a9:36:c0:5a:18:a7:a2:39:f1:4d:71:fd:2e:61:
d5:75:0c:cb:98:f7:1b:74:3a:8b:24:c0:19:05:27:
b4:02:b0:7b:68:6c:b8:d6:de:5d:26:42:05:ef:31:
e7:2c:83:cc:78:0a:69:ab:58:7c:52:61:a7:e9:c0:
98:28:e1:f6:dd:50:7c:f5:28:77:ba:b6:5c:e4:9f:
5b:49:4e:80:ea:23:52:13:d5:9b:5d:28:6f:17:f3:
c9:85:b2:ea:1e:f7:15:9f:ef:78:fa:c0:51:a5:c8:
38:a1:44:3c:b0:20:af:1b:31:4f:96:26:f2:e3:5f:
bb:46:4a:ac:01:10:2b:4e:48:be:a5:57:e5:b8:66:
ed:c7:c8:7c:d2:da:92:23:f2:6e:d9:07:41:8e:23:
1a:d7:74:30:db:c4:e7:80:26:f0:4d:db:b5:2f:2a:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4F:92:18:E0:F5:12:4C:C9:86:8B:8A:A1:44:7E:03:51:A7:BB:11
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:af:f3:6a:e4:ba:7e:af:05:6d:90:8f:7b:f3:85:f2:f6:6d:
3f:80:94:78:e6:a3:aa:d8:d0:c9:82:4b:0a:1f:38:81:96:f6:
a3:8d:04:02:ae:12:4f:61:d6:8c:69:8e:62:9f:f0:e4:4a:a0:
95:2f:35:7d:fc:13:de:70:e2:68:e0:ea:0e:a6:73:b8:1b:45:
63:c7:49:29:69:b5:bb:0d:6a:f9:fb:88:50:03:b1:03:c8:1f:
49:fc:13:44:e0:41:9a:f5:bc:33:bc:53:5e:8a:2e:b9:e8:f9:
ee:71:42:ee:2c:05:85:dc:29:0b:8e:93:e7:05:76:c1:5c:73:
07:5c:89:be:c3:02:74:b0:69:18:6e:3c:0d:36:10:35:00:9a:
73:48:76:7e:8b:51:c2:0e:fa:f6:81:1a:01:41:2d:83:6e:29:
94:9d:93:c4:70:20:42:2a:6c:21:3b:7a:c4:cc:a1:94:5c:ff:
ce:0d:b7:84:25:a9:78:e9:a9:c9:f5:fe:3d:14:a8:cb:f5:4f:
1a:72:4f:e3:73:03:34:ba:a9:f4:f7:0e:f8:3a:40:41:2f:7a:
e4:51:c7:7f:ed:f8:cd:7e:76:7c:b4:ec:50:c0:fd:70:9b:c8:
cd:ac:7a:6f:b8:4a:38:4b:8c:04:27:53:93:ab:02:50:56:c9:
be:5d:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:20:49 2026 by rpki-client