Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: 0wS4g1yDUJxQfGs65mc6JlAbCi4TlwZ4Gq7Dp6zCfzs=
Subject key identifier: BF:44:C5:45:8C:1C:3D:96:7A:51:13:53:D3:BE:D1:A3:B9:5A:07:7D
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 01A0D0120F9006E07F8BB3B65AFC4574606C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 1105
Signing time: Wed 23 Sep 2026 21:00:39 +0000
Manifest this update: Wed 23 Sep 2026 21:00:39 +0000
Manifest next update: Thu 24 Sep 2026 21:00:39 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: KQGY6nvWnh48DIUCYfqQKtx7diou/wmhUx4sM0TuEEs=)
2: TgwXo42orCf9sT1fT8jrPa56jeU.roa (hash: GfcY69aJuiib4Ntp1/VS83/ai4i4eQHgc9DzBgB534U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:0f:90:06:e0:7f:8b:b3:b6:5a:fc:45:74:60:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Sep 23 21:00:39 2026 GMT
Not After : Sep 24 21:00:39 2026 GMT
Subject: CN=bf44c5458c1c3d967a511353d3bed1a3b95a077d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c5:7a:25:3f:8f:ee:6e:1c:88:fc:38:9b:9d:
7b:7d:91:a3:25:d0:8d:f8:a1:97:e3:f8:8d:67:13:
b4:10:6a:70:71:21:fb:b7:0a:14:c8:00:b2:14:6b:
55:7c:15:3f:27:e1:7c:eb:73:a4:f2:b9:14:9a:85:
98:2d:68:b1:8a:82:bd:c6:e0:fc:b8:d4:86:06:dd:
3f:5c:fc:ef:80:fd:3e:94:f3:cc:a2:7e:52:fc:f5:
ba:7e:7b:64:cb:0a:19:4f:a0:95:f8:1e:87:81:cf:
51:a9:81:04:09:7f:2e:e3:cb:a6:82:38:8e:7a:bd:
73:5a:ac:f5:db:84:bc:dc:f5:35:cf:ad:a3:df:15:
8d:4b:c0:96:f5:a3:51:d1:7c:de:7b:34:a0:16:b3:
1c:bd:3c:e9:e0:e0:56:ef:24:29:ce:96:12:2e:c8:
40:78:6b:fc:6f:00:c8:9d:32:e6:d8:6a:28:15:98:
ae:95:80:6b:2b:29:db:fc:6b:2d:54:63:da:1a:49:
ef:99:03:8d:fd:c0:45:a7:e4:dc:03:c5:1f:5d:b3:
4d:a9:89:62:ea:86:02:a5:0c:1d:f2:d9:80:be:9f:
d8:46:69:b8:d7:fe:9c:ac:16:ec:ff:d3:43:f8:99:
bb:e3:57:5f:9a:9b:1c:eb:a0:85:08:f2:a0:bf:73:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:44:C5:45:8C:1C:3D:96:7A:51:13:53:D3:BE:D1:A3:B9:5A:07:7D
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:de:39:9a:bc:fd:79:1a:92:47:d0:1b:e8:67:e8:84:7e:ee:
7b:21:39:fd:6d:8f:c5:a6:c1:3c:27:fa:dc:d7:73:1d:60:85:
5a:bd:d2:a3:bd:bc:fc:f8:18:2c:e6:99:de:c3:12:fa:f2:62:
e1:2a:db:8b:88:0c:dd:7d:c3:16:46:fe:6d:bf:53:ba:28:6f:
d7:60:c4:43:b1:b1:f5:e4:3f:ff:1c:d4:72:ce:d1:ea:4c:03:
32:e6:72:8b:c1:32:2d:dc:1c:13:08:55:4f:46:dc:8b:94:e0:
1f:b5:1b:db:bb:ec:be:3a:27:b4:92:90:af:c3:94:0b:a3:c4:
95:46:8d:34:9c:6f:9b:0a:ab:3c:a0:9f:84:ed:7d:fc:43:a0:
57:6f:f4:93:ec:a4:29:ca:67:b8:00:9d:8f:73:44:17:44:da:
0b:99:5c:b5:39:bc:0a:f1:e1:e8:99:66:7c:bf:44:b5:38:3c:
cd:93:19:31:19:9c:eb:42:7c:ca:f7:c1:cd:9c:c1:96:7c:7d:
6a:77:55:1e:4b:3d:3c:44:26:37:f7:a2:ed:5a:b1:0d:c3:85:
60:1f:13:dd:02:c1:5a:bc:79:cc:02:d7:ec:28:8d:65:ca:4f:
fe:ee:99:c4:23:ba:5e:81:30:4c:97:dc:e2:2d:7b:b7:37:92:
a0:7b:86:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:19:58 2026 by rpki-client