Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: G/tDh6lUB7w344fCNeGg5fZM633MyRmqOd9cAHrsLN4=
Subject key identifier: 16:E1:D5:40:BB:65:D6:97:AF:23:F7:53:A8:79:1F:A4:10:0A:83:79
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 01A0D1C9AE9290ADA3714562D5C866067B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 05:00:50 +0000
Manifest this update: Thu 24 Sep 2026 05:00:50 +0000
Manifest next update: Fri 25 Sep 2026 05:00:50 +0000
Files and hashes: 1: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: /tmDCS/7Oh/v7wx/AsJzH+1vEdWwHyeOkarxH2MUpy4=)
2: kseNmYdhBq1K_noazDOmBmDbF5s.roa (hash: ATubQciMVM4Jml+pZxIMMSnD/6uFD6UKEHkdr+OIXB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:ae:92:90:ad:a3:71:45:62:d5:c8:66:06:7b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Sep 24 05:00:50 2026 GMT
Not After : Sep 25 05:00:50 2026 GMT
Subject: CN=16e1d540bb65d697af23f753a8791fa4100a8379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:df:81:20:9c:de:65:ef:be:da:3e:69:81:
c0:68:90:21:a8:0d:8d:50:9f:1b:fc:cc:01:23:33:
e9:0c:e2:00:e8:d4:84:38:ba:ef:9f:c3:b6:4f:48:
dc:42:7b:6b:31:64:0d:e1:f4:bb:ac:98:e5:d1:28:
e8:83:60:19:1d:62:49:61:e8:36:bd:33:19:b4:f1:
e3:49:51:51:24:f7:82:e2:8b:9f:fe:98:d5:66:d1:
93:b8:36:d7:1a:2d:3b:53:ce:d5:cd:30:8c:39:ff:
01:b3:bd:3f:8b:81:4f:28:69:ec:bb:5c:43:52:bb:
6e:17:ce:df:5c:81:25:05:c4:26:e3:03:e5:02:1c:
15:05:29:7f:72:58:00:5d:13:e1:6e:61:9d:8d:a8:
9e:fb:8d:67:84:e6:28:f4:cb:be:c9:99:88:5c:71:
50:91:98:5d:3e:ce:ae:df:f2:32:c0:19:ff:c8:48:
4c:9e:82:05:8e:b4:b1:3b:ad:e1:96:e3:33:b6:ee:
7e:51:3a:0f:65:a5:90:08:6f:86:b9:42:0c:ca:90:
8d:24:1e:21:08:8a:f4:ba:f2:ca:63:da:63:c3:3b:
7f:47:15:9b:17:9c:15:47:a7:1e:11:e5:ba:b0:7a:
af:c7:27:01:2b:c0:88:11:ca:98:29:60:ca:9b:25:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E1:D5:40:BB:65:D6:97:AF:23:F7:53:A8:79:1F:A4:10:0A:83:79
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:30:d1:99:2f:01:ed:1f:20:c0:9b:d1:a2:20:6a:69:00:b4:
40:d7:c8:9a:62:19:fb:02:fb:89:ca:7c:ce:3f:62:4c:ef:ba:
75:93:c8:40:ab:f1:3d:14:73:0b:c4:17:06:48:4a:28:7e:38:
71:7f:ba:91:0f:c3:3e:b0:68:bd:90:c0:39:8b:32:a8:d7:50:
2e:3c:fb:70:8a:29:a7:1a:71:a7:6e:17:e8:91:85:1b:98:f0:
6c:21:16:05:d5:be:c6:83:7c:be:88:05:50:a4:ae:96:6b:91:
6d:ff:cb:3c:3a:f6:db:60:f2:32:f0:61:c8:95:cd:c4:76:de:
8e:71:4d:b2:f9:5f:10:88:19:63:e8:f7:6b:6f:86:8e:ec:4e:
5b:6e:77:4c:21:e8:f1:ec:45:ef:d1:ea:bc:7e:3c:9d:1c:3c:
e5:39:4c:2d:0b:5c:ca:56:7b:63:ff:e7:6f:6a:78:43:4c:94:
81:c9:87:dc:8c:a0:84:05:cf:a1:1b:f0:99:46:2e:7e:e8:ad:
62:75:60:6d:26:fc:b3:63:6b:92:65:1a:1e:9f:5a:1e:6d:6e:
ea:d8:4a:b9:ce:30:72:1c:74:00:ba:05:9f:2b:de:92:08:57:
86:c1:31:60:af:4d:3c:09:e5:63:3b:8a:b8:73:d2:72:32:fe:
e6:6b:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:59:54 2026 by rpki-client