Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: vKBOso2XEa8JVWbsrRrOIapdY6omgy+BXPB6EzxeRvI=
Subject key identifier: 34:8E:4F:1E:42:74:89:DE:DF:9B:08:CD:BD:2E:79:F1:1C:23:DA:78
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 01A0D192A866C41EC56A943DEC2D3962C884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 04:00:44 +0000
Manifest this update: Thu 24 Sep 2026 04:00:44 +0000
Manifest next update: Fri 25 Sep 2026 04:00:44 +0000
Files and hashes: 1: 4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa (hash: m7wSLBG3yMM59qxFhuh+wuLPCbDahbo3ByN0pwy2TGw=)
2: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: /GmT9tO/XCX8b0wY0SmwPjTAKfKlQUuPjpsd8tdIJts=)
3: d6fj2hsf73awFuJ9_OrVwzH3RUU.roa (hash: q5EEFAAUQDhZrlGyPfpObbd8Uk9pSouDXHiB9RSx/i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:a8:66:c4:1e:c5:6a:94:3d:ec:2d:39:62:c8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Sep 24 04:00:44 2026 GMT
Not After : Sep 25 04:00:44 2026 GMT
Subject: CN=348e4f1e427489dedf9b08cdbd2e79f11c23da78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:86:70:61:48:df:3a:2c:d2:f9:2d:aa:b9:
bc:dc:a8:1c:74:a7:81:55:9c:b0:d4:e6:6a:1f:00:
2b:f7:b3:f0:68:16:cb:5b:cf:bb:d7:6b:bc:6b:50:
2c:3a:42:4a:0e:e3:a1:4e:b3:8e:04:33:02:67:69:
60:61:16:40:92:e7:92:67:3d:63:b3:9c:e8:4f:11:
06:2e:c9:6a:da:71:d2:e9:95:06:0c:e4:5d:29:f4:
ea:2f:01:46:24:cd:30:f0:5b:6d:7a:26:f4:66:90:
e7:df:4d:5d:3f:f8:05:24:93:85:47:22:1d:d4:d8:
7b:01:3c:42:12:9d:a3:18:5f:77:05:98:d9:cf:cd:
e5:da:28:81:aa:ef:db:f6:df:83:c5:98:93:93:8b:
b3:cd:bd:aa:88:af:38:34:8e:8b:f8:38:54:28:18:
09:4f:a6:75:86:83:ca:71:e7:94:dc:c5:a7:68:30:
b8:4d:d7:4f:3c:a9:2a:b8:0a:f2:11:8d:62:9b:c0:
83:41:c6:a6:55:d4:e5:ed:f1:a9:74:21:81:f9:d7:
5d:da:b6:59:7d:9d:9a:bd:2e:fe:87:92:ca:3f:cf:
5a:44:ec:c7:40:b4:d5:6a:97:fa:a7:46:b9:08:83:
cd:b6:ad:99:c1:1c:1c:9a:1e:1d:ba:a4:2c:2b:58:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8E:4F:1E:42:74:89:DE:DF:9B:08:CD:BD:2E:79:F1:1C:23:DA:78
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:db:6b:17:ed:94:8a:69:9c:ef:a2:cc:04:e8:c3:ca:91:b4:
de:3d:23:bf:84:6e:d8:68:e5:38:5b:4a:7b:9f:64:e4:65:67:
cc:46:83:74:2c:78:49:1d:ff:a5:67:45:01:fc:3d:9d:6a:dd:
a6:b8:dc:6e:79:bb:f4:7a:5f:95:2e:b5:2b:3b:a7:bb:02:f7:
b3:64:73:fe:c2:e2:80:b9:10:75:de:62:7f:86:b8:14:5f:a1:
f0:79:b5:c6:6f:4c:46:ca:f8:83:84:e8:17:35:15:02:40:1d:
cb:ea:58:b4:97:72:8e:ef:81:73:f0:b4:fe:2b:c3:81:ee:58:
eb:56:64:f3:80:d7:13:dd:1d:fa:5f:8e:50:b0:95:03:86:76:
5c:d8:20:a2:19:fd:05:f3:73:5b:6d:c1:f1:60:98:0a:2f:a2:
21:89:b2:bd:04:9f:6b:8d:69:43:5d:d4:41:80:59:ab:62:65:
70:4d:3a:53:74:53:9f:b6:a2:75:d4:ff:4d:27:aa:2d:eb:7e:
bc:bd:a3:4a:05:93:ec:5c:85:9f:ec:3b:ff:68:4a:3e:fc:8e:
5a:32:35:cf:e8:2f:bc:56:1a:c5:23:d3:16:91:6d:82:88:6e:
9e:f2:10:32:61:f5:0f:11:88:09:bb:f8:51:86:ae:52:12:39:
1d:16:5f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:14:43 2026 by rpki-client