Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
File: r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft (raw, json)
Hash identifier: F0Da+IULSTHKRo5uBlWNblLoB9jIS9hSt8U2xWMuwxA=
Subject key identifier: 9B:34:DF:8F:C8:31:F5:80:A0:40:1C:AF:30:1D:D7:16:AC:23:3D:F5
Authority key identifier: AF:DE:C6:E1:96:38:FE:AE:5C:24:BA:C3:39:2A:AD:D2:9D:09:A1:0B
Certificate issuer: /CN=afdec6e19638feae5c24bac3392aadd29d09a10b
Certificate serial: 01A0E1749ED2CA65DFA734FE6D3082CC72F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r97G4ZY4_q5cJLrDOSqt0p0JoQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:51 +0000
Manifest this update: Sun 27 Sep 2026 06:01:51 +0000
Manifest next update: Mon 28 Sep 2026 06:01:51 +0000
Files and hashes: 1: d0YkCPdnCyaNIksA2mKdrGoNCqk.asa (hash: zX6hSb7dbU0ZGqZxmFYD03Uuu0hUFOMksbh8I/RIpYE=)
2: r97G4ZY4_q5cJLrDOSqt0p0JoQs.crl (hash: WnryQk/QF5Ks/W5JXP9JntJhb3AMbqPDzkaKpBRTZxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r97G4ZY4_q5cJLrDOSqt0p0JoQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:9e:d2:ca:65:df:a7:34:fe:6d:30:82:cc:72:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdec6e19638feae5c24bac3392aadd29d09a10b
Validity
Not Before: Sep 27 06:01:51 2026 GMT
Not After : Sep 28 06:01:51 2026 GMT
Subject: CN=9b34df8fc831f580a0401caf301dd716ac233df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:cb:2f:30:63:8f:28:83:14:72:19:d6:32:
c5:e0:bf:fe:43:09:38:d1:7f:00:73:e5:32:fc:6b:
25:47:d0:64:3d:5c:b7:8d:c6:aa:d8:b3:e2:b3:25:
2e:a1:ea:0f:62:82:d4:d2:15:23:25:55:20:71:fa:
13:32:99:3e:ae:1b:70:b8:fb:d6:7d:c6:aa:8a:dd:
5f:33:8f:8e:93:b3:72:e2:b6:e1:ac:7a:09:33:aa:
5e:d2:e6:37:fd:25:ab:80:10:57:cf:81:f4:e4:16:
0f:6d:3a:77:c3:af:a9:36:50:17:f7:18:1a:a1:9a:
e5:a7:5c:8b:e2:c6:b3:5e:29:2e:6e:99:7c:d4:70:
d0:d4:ec:49:ce:01:a2:b3:af:ea:6e:26:0a:bc:c3:
cf:43:a8:b5:9c:0c:bb:43:29:ae:b8:d3:93:9e:c3:
3c:fe:f1:32:1b:8c:96:3c:8c:44:23:0d:93:39:88:
7b:a3:d6:d4:53:14:55:18:02:07:4c:19:7f:8c:60:
6c:39:e7:ba:83:a7:3f:db:a3:af:2b:d7:28:6f:c6:
fd:f2:7d:9c:1f:f2:90:f1:a7:cb:41:e6:47:6a:e3:
c7:ca:fa:95:4a:9a:0d:6b:af:46:46:dc:b4:34:a4:
16:e9:95:42:e3:a3:b0:36:d1:52:ad:35:a6:e2:dd:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:34:DF:8F:C8:31:F5:80:A0:40:1C:AF:30:1D:D7:16:AC:23:3D:F5
X509v3 Authority Key Identifier:
keyid:AF:DE:C6:E1:96:38:FE:AE:5C:24:BA:C3:39:2A:AD:D2:9D:09:A1:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r97G4ZY4_q5cJLrDOSqt0p0JoQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6e:4c:3c:ca:c4:13:90:b4:08:10:cf:76:04:5d:e5:36:1c:
87:e0:0c:87:ca:0e:58:72:e7:42:38:eb:d4:99:3a:27:3e:73:
2f:f0:29:f4:93:fc:cb:ec:a0:bd:c3:e6:fe:96:40:7d:05:18:
7b:a6:04:8a:b4:93:2f:bf:00:1d:65:14:d0:1c:85:f3:2b:15:
52:21:df:64:3d:23:85:52:24:e9:5c:55:ee:6f:bd:0f:21:5d:
f0:42:53:a0:49:6e:ab:0c:5c:d7:22:9f:61:83:2a:1b:0e:31:
0a:a2:cc:5d:71:de:2e:e1:90:d2:5a:98:34:f9:16:1d:50:57:
3c:ad:f6:d0:a6:3b:62:e9:69:29:c4:c5:1a:04:d1:b5:d8:90:
c6:dd:22:88:04:23:9d:1b:39:38:0e:32:0a:54:63:09:cf:5e:
36:9f:36:35:a6:f0:ae:dc:48:da:54:68:e6:68:db:d8:3a:9f:
7d:0e:dc:4b:e3:00:55:23:a0:f7:e3:19:71:65:ca:87:a2:87:
e4:2a:ab:80:a6:29:c4:7e:88:7c:13:87:ae:1f:dc:6b:ba:75:
06:18:f5:5f:33:30:42:c8:73:b6:19:a4:ab:45:fb:8b:ed:76:
66:86:c5:1e:83:8a:f2:19:48:c8:cb:67:8a:5e:4c:59:b3:0e:
ab:04:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:58:31 2026 by rpki-client