Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier: A/x+SSwP8VZv9lZWFcnt8rSfeoN8le9orU20AZGzroc=
Subject key identifier: 70:E3:8B:2A:C7:CF:F3:CC:E1:63:E8:A1:C2:11:5E:B5:88:90:30:47
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 01A0CBC821AA5A74DE0170A66FB5F0C8DAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 01:01:25 +0000
Manifest this update: Wed 23 Sep 2026 01:01:25 +0000
Manifest next update: Thu 24 Sep 2026 01:01:25 +0000
Files and hashes: 1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: hzQk+J+s6+p88LIMK/xr1TtzeqcmaAWlqNxAtw8T3oI=)
2: MYsq3VI7S6Tys8tH6kZ55isv4aM.roa (hash: nLJu9Ca3UL28v4nK9lRnWd7XxYbaE6zulNTp5ZAXAYk=)
3: q_ccM_3Nsf3YIqRvSxwp7j28WKA.roa (hash: bQAdrUPOpax3Tea6DtDpoS5dYyAQRIvDyf7eum/Y1dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c8:21:aa:5a:74:de:01:70:a6:6f:b5:f0:c8:da:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Sep 23 01:01:25 2026 GMT
Not After : Sep 24 01:01:25 2026 GMT
Subject: CN=70e38b2ac7cff3cce163e8a1c2115eb588903047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:75:b4:22:c9:d9:86:67:97:c6:d5:4d:d8:
d4:00:d3:ee:26:e9:c1:e5:63:31:f5:c1:1e:93:f7:
a6:0c:57:95:0b:e5:47:e3:e5:ad:bd:06:82:37:a5:
a3:99:0e:1d:ed:94:2d:3e:cb:91:08:11:6c:27:e1:
68:89:bf:3d:60:8a:e9:fa:4f:59:2b:aa:ed:bc:90:
a1:36:42:67:38:6a:76:f4:e5:89:90:06:fa:df:7b:
2a:14:5b:0d:98:04:1f:f7:03:ab:72:7c:d3:d9:b8:
da:59:8f:3a:3d:0e:0b:ca:44:15:39:f5:38:df:da:
ad:db:70:dd:0b:b8:2e:3f:20:2b:16:cc:89:cb:e2:
18:74:7e:5e:82:67:e9:72:20:e4:41:b3:33:89:ac:
83:b8:3f:33:76:46:4c:b1:63:0f:cb:77:c0:56:23:
20:00:24:1c:10:40:69:04:4e:f4:af:64:f3:5d:b0:
85:63:b8:c6:cc:5a:f1:32:a3:71:fc:90:4a:7a:5d:
10:d5:83:b5:5f:38:ea:ff:d0:77:23:e8:79:cc:e8:
bb:14:be:b2:fd:cb:14:5c:8f:19:d2:e8:22:7e:aa:
62:34:06:09:78:88:34:60:06:36:ae:05:e5:40:9f:
db:56:45:08:ee:4e:1c:1f:32:2b:74:4c:5e:a1:54:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E3:8B:2A:C7:CF:F3:CC:E1:63:E8:A1:C2:11:5E:B5:88:90:30:47
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8e:fa:21:33:4a:5e:4f:be:c1:3c:57:93:ab:7b:5a:50:67:
35:a5:b6:02:94:f8:bf:de:3d:1d:f3:ae:4a:1f:db:21:a7:d2:
e7:63:ac:90:10:b8:9c:2e:57:b5:31:28:8f:9a:2b:01:99:03:
3f:90:27:59:72:a8:34:8e:30:89:cf:f1:43:d8:9b:ca:ae:59:
2d:52:c2:33:95:4e:78:44:69:2e:5a:6e:6c:0b:87:c6:e6:40:
9e:2e:14:e3:bc:d2:2f:74:36:53:d5:23:fa:58:ec:bb:d6:33:
44:1d:c1:12:34:e9:58:21:41:d2:a3:bf:d9:14:96:e8:7e:89:
2c:98:85:58:c3:1c:90:90:a5:03:2a:ff:bd:49:4a:fb:6f:b4:
49:47:3a:f3:de:c3:ef:75:82:bd:c9:8d:3f:f1:1f:99:36:3b:
e0:1b:a3:4e:77:15:ba:fb:ed:90:ac:fd:2d:1f:a8:57:19:88:
1e:b7:81:25:20:c5:4e:9d:e4:8f:db:d0:fc:d0:a4:4c:dc:87:
8b:6e:2c:26:03:cb:32:3b:3e:6c:57:65:a9:93:ba:76:ba:ec:
26:59:86:92:77:84:50:a8:d2:22:4f:97:0e:10:87:b5:98:bf:
ae:c3:82:4f:31:a1:25:fa:14:0c:27:87:de:57:d6:0f:60:f5:
8f:9d:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:51:04 2026 by rpki-client