Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
File: 9IDXn6hIvDDnvLU-9f8tBK27TyY.mft (raw, json)
Hash identifier: Qzd3BMheo5VWkhtS6oGs3VVEqleSjCKecea8hVDNmbw=
Subject key identifier: D9:F9:8A:63:FD:BE:6E:8F:BC:87:1B:78:BB:B0:AE:16:C5:7D:78:01
Authority key identifier: F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
Certificate issuer: /CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Certificate serial: 01A1DDCBAD3FAAB6A5DF8EF8CFFC7F00F2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
Manifest number: 0237
Signing time: Sun 15 Nov 2026 06:01:15 +0000
Manifest this update: Sun 15 Nov 2026 06:01:15 +0000
Manifest next update: Mon 16 Nov 2026 06:01:15 +0000
Files and hashes: 1: 9IDXn6hIvDDnvLU-9f8tBK27TyY.crl (hash: JV/xH8QmJBfMiY1OgXoKMvpuTerr3pKwkN8sUxnnpXI=)
2: ByerbL1cP92btLeefAdWjxplA_M.roa (hash: 3qNra9qr45ihN8IX80AtcCk2qIs3ym8XI4zn77mcJi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:ad:3f:aa:b6:a5:df:8e:f8:cf:fc:7f:00:f2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Validity
Not Before: Nov 15 06:01:15 2026 GMT
Not After : Nov 16 06:01:15 2026 GMT
Subject: CN=d9f98a63fdbe6e8fbc871b78bbb0ae16c57d7801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:a8:83:be:66:8d:63:47:67:09:f4:a3:75:
41:d3:5e:dd:56:07:f2:9f:19:e9:fe:e0:5e:d2:47:
af:fd:c7:14:44:fe:9d:8f:fa:0d:78:81:bb:3c:9a:
14:0a:d1:a6:f9:96:88:74:13:fb:87:08:29:aa:03:
fc:d4:ad:e6:11:fe:2d:b3:81:12:11:10:b0:71:3c:
8e:2c:47:07:51:ab:aa:2f:42:5b:39:29:33:c9:81:
49:2a:a0:04:19:05:b8:10:ff:ef:7b:09:1b:b9:8a:
0c:a2:71:f4:58:be:5a:79:b3:95:57:8b:2b:03:9e:
cd:b0:69:1f:e2:c7:47:f0:08:2c:90:0c:0e:52:c1:
2b:ce:5f:37:87:00:86:b6:1a:f0:53:48:26:d1:aa:
c3:97:06:08:47:fc:b6:af:07:9b:56:0d:9d:56:b9:
54:28:54:2a:e4:df:78:cb:fc:21:cb:4e:ac:f3:55:
c2:c6:ee:bc:e9:3e:d1:37:38:e1:fd:bc:c1:f5:a0:
86:15:e7:3b:be:28:8a:b5:71:6b:5c:02:13:ee:38:
8a:03:0f:dc:1d:62:1a:87:31:4f:43:23:50:5f:55:
82:24:f9:21:72:f6:76:c6:6d:58:5c:4c:8c:89:f2:
2a:5e:40:47:70:06:20:9d:31:36:0a:8c:9c:e1:bd:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F9:8A:63:FD:BE:6E:8F:BC:87:1B:78:BB:B0:AE:16:C5:7D:78:01
X509v3 Authority Key Identifier:
keyid:F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:30:6c:48:ba:21:9d:b1:85:a7:ff:9d:d4:e7:ea:e7:ae:2e:
99:70:8f:43:8a:8e:c2:b1:72:19:b0:24:54:e6:f8:b0:84:b7:
ca:8b:fd:ed:9e:6f:92:6c:d1:6b:71:3d:30:94:b7:4e:c9:15:
3e:f7:8f:10:d9:cc:60:73:87:6d:40:23:e3:21:5e:93:a1:a2:
c8:f6:51:32:84:29:8d:9d:06:1f:7d:c4:a3:fa:50:d2:96:6a:
4f:99:01:07:85:f6:15:5f:d8:80:30:29:1e:05:ee:a8:8f:56:
fc:dc:b8:b0:87:3a:0b:9c:2f:69:e5:be:ab:b7:11:6c:da:08:
95:52:fb:59:d8:66:90:06:e0:7c:bb:8f:ae:82:9d:f8:58:81:
c1:83:cb:b4:2f:91:e3:6a:4c:c2:db:4a:e7:6e:60:7f:ad:da:
06:c0:ef:e8:e0:18:29:a9:84:ab:ca:e0:d6:ba:e3:73:b1:d4:
86:ef:82:4f:24:99:db:1c:0e:40:dd:18:96:70:7d:e4:d5:2d:
83:a1:7b:74:bc:aa:7d:db:d3:22:ad:69:c7:ed:92:ef:ce:e7:
66:bd:4f:10:1b:02:68:b6:8e:10:f9:24:81:05:4f:cf:15:a8:
c5:84:f3:39:94:e4:67:7e:e6:f1:4a:c2:c1:93:31:6c:67:c1:
dc:aa:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:27 2026 by rpki-client