Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier: 9x4QWe6ZMLIQl2ElmhWQkifBlUcRQ6JdkxGt/X4y8Y8=
Subject key identifier: E7:8F:56:EF:EF:97:69:02:DD:54:E2:57:FA:82:D1:30:02:8A:39:09
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial: 01A0D4CB316204C63F008EFAFE698F313FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 19:01:21 +0000
Manifest this update: Thu 24 Sep 2026 19:01:21 +0000
Manifest next update: Fri 25 Sep 2026 19:01:21 +0000
Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: p/9ym2GJoN0rX6njxV2zCo/cfYt0Tr/GMjKd4CYq3UU=)
2: L3FElQgN_OK9ME85XjkPB5d4njo.roa (hash: 7fKQw9/kLDh7zT4p1MB3dQg/LI4nczVMbuMgYO277J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:31:62:04:c6:3f:00:8e:fa:fe:69:8f:31:3f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Validity
Not Before: Sep 24 19:01:21 2026 GMT
Not After : Sep 25 19:01:21 2026 GMT
Subject: CN=e78f56efef976902dd54e257fa82d130028a3909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:69:6e:ef:09:ef:16:f4:b8:7d:93:94:09:
c4:d4:13:ad:21:73:83:25:4c:b8:83:03:d7:97:13:
40:e4:90:a7:c0:8b:ba:2c:7c:cf:73:b4:d9:54:ba:
48:7d:ad:d5:be:81:08:82:0d:3f:5b:1b:8c:60:a4:
1b:63:48:d0:65:bc:f0:60:3e:d6:d7:0f:fa:9f:32:
20:6e:31:9b:2a:88:ce:7f:91:de:e0:74:b9:bc:7c:
45:23:f6:5d:ba:4c:e9:3c:ef:1d:6e:e4:aa:a8:e9:
5e:82:6c:de:34:8b:16:79:e8:be:42:c3:eb:26:4f:
48:60:3b:f3:4d:63:3c:25:e8:81:e0:fe:63:79:dd:
b4:80:7a:c0:ea:58:4c:38:97:49:47:bc:42:85:cd:
7b:fe:95:77:48:2b:89:7e:35:c7:5f:84:8b:be:6e:
9d:88:b4:2b:9c:26:4f:10:8e:ec:42:65:69:91:a4:
b1:ce:a6:aa:11:3d:c5:7a:ca:0e:5c:21:5b:c4:8b:
a2:0b:5b:13:5b:c9:50:a2:63:18:ac:c4:ae:87:77:
e1:38:d7:a8:bc:73:59:c0:34:b3:e3:50:af:ec:27:
fa:1b:39:e6:f3:64:72:64:83:8d:9c:4b:a3:e5:de:
e1:2e:10:85:15:f4:f3:f0:46:d1:c2:03:aa:56:77:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8F:56:EF:EF:97:69:02:DD:54:E2:57:FA:82:D1:30:02:8A:39:09
X509v3 Authority Key Identifier:
keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f5:97:f6:18:5d:58:6d:e0:3a:0a:38:06:31:1f:a6:5a:f8:
bc:1c:8d:8b:1e:3d:f9:e3:6c:58:48:f1:e8:8e:7a:1b:0a:00:
a0:22:f6:49:5b:51:c2:a7:23:b1:c7:a4:7d:70:38:82:0b:28:
dd:48:1b:03:89:71:d8:50:ff:a4:d7:ee:a0:35:d0:e2:50:cf:
d3:0f:5b:24:ac:b9:0c:6c:99:ec:9f:af:d6:0f:26:10:d4:95:
b6:ca:dc:43:90:2b:c0:23:f5:37:ee:6b:cd:be:7a:4d:ec:ea:
49:25:03:0a:92:32:80:81:2e:b6:c1:12:d0:5e:60:17:9b:2b:
c1:a5:c4:e3:65:7a:a9:1c:4b:52:40:6a:24:64:21:da:3b:4d:
61:be:ba:f4:19:9d:58:69:10:4e:4a:69:28:81:72:a5:c5:b6:
03:dd:7b:21:95:db:da:e5:01:8a:ff:82:7b:06:07:85:0e:0d:
56:0f:02:38:2b:23:59:51:e8:1a:63:c9:ed:73:77:30:52:9c:
31:c4:43:6f:22:e8:c2:78:53:4b:35:ec:14:29:40:e6:f2:43:
87:50:0e:50:dc:44:1b:fb:ef:45:60:c6:48:81:f8:f6:0a:8b:
75:02:8a:45:66:07:bb:a5:42:98:36:4e:3f:77:9a:a8:ad:e7:
f8:9c:cc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:21:17 2026 by rpki-client