Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File: d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier: a980dFflOhvvjyDlO7vHi5SrzcKAY5Ugw//zRXwmkFU=
Subject key identifier: E7:DD:34:4D:CC:F9:63:31:38:D1:6E:B3:13:99:B1:F6:01:AB:C6:14
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer: /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial: 01A0CA101DDC3B6C15F18DA8688AF0059B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number: 0FE3
Signing time: Tue 22 Sep 2026 17:00:48 +0000
Manifest this update: Tue 22 Sep 2026 17:00:48 +0000
Manifest next update: Wed 23 Sep 2026 17:00:48 +0000
Files and hashes: 1: 6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa (hash: pfVa1UicKiOy2Facu1pK6Uyiw1IMqVl6D7uB18F/7yw=)
2: 9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa (hash: sjrsCbBwaUlQ8V+c9dddc6DlyD0j++DkIm2cvSRmRTg=)
3: bWOm_rxxwcbWaTmu2SnHiIL1r88.asa (hash: QCA4tD64a2YOFOaYQUc8hAaRjVEoTC+6/Xd9DFb0omA=)
4: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: ml8us8dp6lnphMKoG6JtCVTkhMaeQWvq4a1FwGHM4To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:1d:dc:3b:6c:15:f1:8d:a8:68:8a:f0:05:9b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Validity
Not Before: Sep 22 17:00:48 2026 GMT
Not After : Sep 23 17:00:48 2026 GMT
Subject: CN=e7dd344dccf9633138d16eb31399b1f601abc614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:d3:70:a0:bb:1a:07:cd:66:d0:11:09:97:
5e:1b:48:f6:2f:92:bd:f1:8f:34:c0:f0:4e:4a:66:
34:62:83:55:30:ef:e5:06:e3:d9:7e:9d:70:b7:f1:
1d:05:1d:e4:98:f2:fc:be:c4:78:f4:03:28:46:db:
82:4a:eb:79:90:9d:40:b5:18:94:28:ec:63:7c:4b:
4e:37:71:fa:0a:77:76:f5:c4:e9:0b:ca:29:e2:ea:
d0:54:20:02:86:fb:d6:bc:7f:34:bc:bb:ed:fb:75:
84:7e:68:32:7f:af:c1:2e:ac:8e:1a:02:68:4f:1c:
2d:b2:01:83:0e:27:6d:5d:78:2f:57:d0:0d:6b:98:
03:f1:c1:1c:b2:81:b3:20:67:ad:e8:01:4c:78:04:
bb:f4:65:d9:24:bb:d2:46:9e:49:d5:fb:cd:fb:ca:
7f:be:bc:63:59:77:ce:36:a5:57:2b:52:11:d0:41:
a2:b7:2b:c5:d6:b6:fa:a4:1e:83:a0:af:38:f7:73:
7a:03:b3:b5:76:68:b6:2f:72:ff:e8:8d:3f:3f:1a:
19:59:b0:ce:cb:d5:97:77:86:ac:d5:6c:c6:6d:e2:
4c:2d:cb:2c:cd:6d:b1:b1:c7:2f:68:61:7a:f0:03:
d4:53:fc:ec:30:52:ae:7f:53:78:05:8e:bc:7a:44:
10:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:34:4D:CC:F9:63:31:38:D1:6E:B3:13:99:B1:F6:01:AB:C6:14
X509v3 Authority Key Identifier:
keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9a:ba:86:89:60:b3:11:a3:55:db:de:97:94:73:95:52:b1:
82:c9:d7:a4:b3:ec:1e:2d:c6:ae:3b:5d:b0:6b:d0:df:32:91:
17:81:42:1d:03:8f:9a:38:79:b9:19:1b:c4:b3:08:44:2b:7a:
6e:f8:dc:29:c5:2e:6d:70:d0:dc:99:20:d6:cd:a4:cf:9d:e3:
8d:a2:68:10:4e:fd:22:d7:fc:63:72:76:0b:e8:bf:3e:a8:ac:
db:ba:5a:30:ce:1c:bd:f3:8f:71:b6:f7:ee:de:67:2c:10:7e:
f1:da:66:84:dd:89:9b:85:01:e6:d1:e0:42:7c:02:0c:93:04:
d6:fb:1b:7f:ed:56:64:9e:b3:69:39:54:ce:58:40:08:cb:11:
95:85:e8:1c:25:7c:37:42:c7:8f:d1:8f:d8:eb:35:bf:4a:a3:
a5:0d:53:6a:4c:7e:24:a0:a4:dc:78:03:6d:ef:42:7b:a7:d4:
6e:25:38:b3:aa:f2:ce:c4:1d:ce:68:b2:2c:b3:76:7c:56:4b:
44:ca:12:fe:b9:e4:94:6a:fc:d7:45:78:35:1b:3c:a3:56:d8:
cc:a6:86:c0:9c:2a:05:a7:98:d0:09:77:a6:2a:a6:fd:83:72:
48:57:66:99:12:de:f2:99:f0:c1:09:23:86:96:59:59:23:d9:
38:b3:21:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:45:00 2026 by rpki-client