Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: lZwQG7ok68N7U9Lq5llUxPKFlBCrWS4mUT/IzteAh7A=
Subject key identifier: AA:4F:93:5B:FD:DF:16:3E:5D:6D:A3:9E:D0:3B:B6:DC:6C:58:65:75
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 01A1DE712C1B91706DE7CA528C9E7CD645DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 1191
Signing time: Sun 15 Nov 2026 09:02:00 +0000
Manifest this update: Sun 15 Nov 2026 09:02:00 +0000
Manifest next update: Mon 16 Nov 2026 09:02:00 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: EfXvsjnsLQIFZnGoIgWvTSes9fa8DNO/HZaG+lHeJI0=)
2: TgwXo42orCf9sT1fT8jrPa56jeU.roa (hash: GfcY69aJuiib4Ntp1/VS83/ai4i4eQHgc9DzBgB534U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:2c:1b:91:70:6d:e7:ca:52:8c:9e:7c:d6:45:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Nov 15 09:02:00 2026 GMT
Not After : Nov 16 09:02:00 2026 GMT
Subject: CN=aa4f935bfddf163e5d6da39ed03bb6dc6c586575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:32:cd:de:c9:71:17:b1:a5:92:2f:59:28:
99:b5:f2:f3:65:e3:94:84:f6:d7:54:f7:71:00:c7:
2e:68:dd:31:3d:01:5a:b9:0b:6b:29:bf:28:12:a3:
99:b3:47:43:f2:a5:bf:9b:cc:1f:91:21:6d:0e:13:
c2:64:94:07:ca:09:96:ee:fb:b5:f2:f6:86:03:60:
15:cf:de:23:93:18:1c:77:8b:40:15:1f:26:68:1a:
9d:5e:35:3a:41:00:f8:30:b4:8e:6f:f9:a8:c0:1e:
96:6c:1e:88:05:0f:a0:8f:0b:83:e5:40:37:ff:1a:
ea:3b:9f:a0:26:78:32:0c:5c:5e:de:52:a7:1f:78:
cd:eb:09:cb:54:6e:29:c0:77:6a:0d:31:2e:4a:24:
5d:ca:ae:35:47:1a:19:fb:eb:a8:bb:52:da:b2:97:
06:33:12:49:06:07:27:9e:60:d8:10:70:12:86:b8:
87:0b:72:09:f0:7a:66:17:5c:9e:f0:18:ae:d7:74:
38:13:7b:ea:d6:2a:00:28:b3:c3:47:6c:5e:d0:64:
1d:7d:5e:d7:62:06:94:8b:12:8f:fb:d0:d1:9f:42:
34:77:90:7c:79:ea:af:b8:b4:6f:74:d8:d8:a1:d9:
12:4b:c3:13:7b:be:ac:9b:ec:0f:8d:41:e0:54:c8:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4F:93:5B:FD:DF:16:3E:5D:6D:A3:9E:D0:3B:B6:DC:6C:58:65:75
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:56:af:12:7e:f1:c2:78:9f:dc:8d:cb:9e:73:24:46:f5:75:
d2:28:94:ab:b2:92:34:73:32:a9:cd:39:12:a0:23:42:6a:9c:
1e:bf:5a:57:6e:0d:3c:88:b4:e7:74:df:e6:7c:37:51:39:45:
40:60:80:48:d6:8e:7b:e1:25:13:60:c7:69:cc:cc:cb:43:93:
18:33:53:a4:9e:de:f5:f1:8b:63:2d:ff:97:52:bc:89:24:80:
e7:40:0e:8b:74:e9:f0:90:57:8e:aa:8c:59:0a:e5:5d:da:84:
2f:aa:db:fb:31:a0:36:75:b2:27:5f:24:4d:ec:e0:7b:94:94:
f6:4e:21:ed:d4:f0:73:16:7b:87:bb:93:3b:3a:ff:2a:2b:dc:
91:e2:17:50:e1:a8:0c:d6:24:e9:b3:e0:3d:29:fc:4e:96:6c:
34:6c:55:36:f1:bc:bc:12:fa:fa:f9:60:0c:8b:7d:44:53:96:
78:18:99:19:0c:c7:9f:ae:17:08:d1:48:de:8e:df:0b:24:2e:
c7:6f:58:51:f8:32:84:ca:22:44:47:b4:dc:9e:bc:b7:04:d0:
14:0a:f5:76:88:13:a2:7f:37:ef:6b:ca:f3:93:e2:30:2d:36:
42:49:aa:13:74:e1:b4:04:f3:7e:b0:63:97:a9:7a:1a:f5:ae:
05:c3:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:38 2026 by rpki-client