Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
File: 9IDXn6hIvDDnvLU-9f8tBK27TyY.mft (raw, json)
Hash identifier: 0yH05nQipWyqPF6nKCPl0nWknC5u3/XHss+4XXGL5xE=
Subject key identifier: BE:B7:29:A6:B5:63:76:AB:08:30:09:F2:71:9E:2B:C3:CA:0D:A2:FA
Authority key identifier: F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
Certificate issuer: /CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Certificate serial: 01A0D15BD227E37B4919924053597350C4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
Manifest number: 01AC
Signing time: Thu 24 Sep 2026 03:00:50 +0000
Manifest this update: Thu 24 Sep 2026 03:00:50 +0000
Manifest next update: Fri 25 Sep 2026 03:00:50 +0000
Files and hashes: 1: 9IDXn6hIvDDnvLU-9f8tBK27TyY.crl (hash: GJuVmP46zeZTziEr1ucsUfDDQe+1zc1/kH+uaR3sE9k=)
2: ByerbL1cP92btLeefAdWjxplA_M.roa (hash: 3qNra9qr45ihN8IX80AtcCk2qIs3ym8XI4zn77mcJi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:d2:27:e3:7b:49:19:92:40:53:59:73:50:c4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Validity
Not Before: Sep 24 03:00:50 2026 GMT
Not After : Sep 25 03:00:50 2026 GMT
Subject: CN=beb729a6b56376ab083009f2719e2bc3ca0da2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:4e:f2:96:c8:83:19:fc:7a:7c:58:37:9b:
b8:04:bd:1a:a9:89:57:d5:2f:59:15:90:10:70:7c:
b5:d0:de:ce:a9:42:e7:af:69:53:bd:72:78:a0:09:
71:1d:fd:d2:6d:fe:b3:57:0a:d1:8e:dc:be:8e:72:
ac:e9:29:d1:ee:90:e2:02:74:3b:a1:4f:91:22:42:
7b:13:74:e3:ba:5b:74:00:e0:8d:98:c2:51:6e:31:
1a:d9:de:75:8c:3f:46:88:ba:b2:55:69:e4:3b:74:
ed:b4:5d:c7:8b:de:34:ca:46:d8:91:b1:2a:f1:66:
d3:4a:84:df:cf:05:f7:00:ba:c6:d2:e7:d6:88:a1:
b9:85:9b:af:67:c2:7e:c2:2d:a1:7b:a4:ca:2a:38:
2a:3c:7d:a7:a7:48:00:cb:59:5a:9c:1f:5a:11:43:
53:bd:09:8b:f5:df:9b:56:95:c9:84:8f:f8:08:ea:
1e:9f:bc:73:c8:09:20:e9:c1:73:73:d6:c0:3f:63:
34:08:6f:cc:03:61:49:fd:00:1e:1c:ba:a0:1b:ab:
64:e5:02:e9:9d:1b:96:4f:f6:83:d6:6b:22:ef:f6:
c0:2a:56:dc:e9:7e:4d:ec:97:aa:dd:6d:06:f8:3d:
d9:4c:d9:d2:c1:10:43:5a:02:6a:06:f9:5c:61:0d:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B7:29:A6:B5:63:76:AB:08:30:09:F2:71:9E:2B:C3:CA:0D:A2:FA
X509v3 Authority Key Identifier:
keyid:F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3e:ba:ea:6a:24:ae:6c:38:da:cc:0c:66:ce:f0:87:71:4c:
a6:1c:8b:c7:e7:5d:4a:aa:d8:3e:57:08:4e:d2:a7:83:e7:9a:
f7:36:c2:45:71:46:34:6c:52:2d:2a:aa:eb:8e:9b:b3:b0:4b:
3e:20:15:83:45:26:f9:74:df:ad:6b:10:55:0b:95:db:db:49:
35:95:07:92:c5:4d:7d:40:5b:7c:69:af:70:07:4b:93:90:71:
ea:40:b6:70:eb:36:0c:fa:a6:90:74:73:4a:c2:60:61:92:81:
1e:85:3b:16:5b:09:d9:11:ec:e7:8e:b7:4c:75:79:86:4f:2a:
62:ea:94:f6:59:9d:5e:f0:b5:6b:7e:40:a0:c4:4a:d7:4a:90:
2d:f2:f7:9a:df:d7:1e:25:43:02:9e:12:bd:45:7f:13:c6:5c:
2d:93:04:69:3c:2c:b1:30:b9:52:ae:09:7f:b8:ea:4e:cf:3a:
ff:5e:72:19:9b:a9:5a:68:5e:31:31:69:6e:94:b2:c5:04:a4:
6f:aa:38:77:a7:72:0d:a2:e0:e0:23:89:1f:1e:f1:71:61:eb:
9b:3a:e5:92:c5:67:8b:34:d5:1d:61:af:e9:9c:7e:d0:d5:8d:
e8:a8:33:1b:b4:e9:21:6c:6c:90:09:56:a7:ab:dc:f0:6f:db:
43:37:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:45:43 2026 by rpki-client