Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
File: tK_MhnJK4o7jZE0b6ehSCj7zia0.mft (raw, json)
Hash identifier: elGRJQFeaNRptX7+BuU3osk1BoBiE5ETU03HsWNb+yg=
Subject key identifier: 12:F9:99:75:47:3F:A4:98:17:B5:18:B1:D1:AD:CF:20:1F:1C:85:A0
Authority key identifier: B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
Certificate issuer: /CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Certificate serial: 01A0D7CCC8785C76249F4E7723A08F810D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:01:57 +0000
Manifest this update: Fri 25 Sep 2026 09:01:57 +0000
Manifest next update: Sat 26 Sep 2026 09:01:57 +0000
Files and hashes: 1: tK_MhnJK4o7jZE0b6ehSCj7zia0.crl (hash: U81bujboh5Uno1FAD5AUdjUV+f3eg1gwe1CEPpghMFs=)
2: xknKtTv3aOJfGX6wPs3f3yNuujM.roa (hash: UAJG/h4ZBqmm+2hMDaAp1u3zKvAAvYZrIBtFkvMHGHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:c8:78:5c:76:24:9f:4e:77:23:a0:8f:81:0d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Validity
Not Before: Sep 25 09:01:57 2026 GMT
Not After : Sep 26 09:01:57 2026 GMT
Subject: CN=12f99975473fa49817b518b1d1adcf201f1c85a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:cc:f7:75:f4:b3:30:b0:b7:45:9e:34:f0:
6f:71:23:75:19:19:0e:77:58:f2:d8:4e:12:d2:ea:
0f:da:14:e0:58:84:c6:d7:b4:b1:fd:0d:35:68:b8:
c2:0c:4a:0a:0d:6b:56:81:ba:66:4a:20:b9:67:cb:
48:6c:9f:99:35:78:e6:86:91:9a:6c:5f:2c:68:32:
e1:57:e4:55:f8:e6:58:53:44:a7:2a:9b:de:f9:20:
f2:e8:b8:ac:9f:6f:82:1a:4c:f6:29:36:f6:70:7e:
69:6b:29:d2:31:bc:db:1c:95:dc:21:fa:c1:19:c9:
6a:d2:8c:74:82:0d:8a:53:c2:7d:90:83:99:96:34:
02:ea:c7:54:d1:53:1b:37:b5:5c:c2:63:28:70:2e:
82:92:96:15:6a:0c:6e:7f:bc:39:b7:96:4d:3e:cb:
09:86:66:a7:40:10:72:86:72:24:d8:59:a6:eb:a0:
02:42:9c:a2:1c:ee:32:af:eb:06:a1:19:32:07:ea:
32:bb:57:8e:a4:c0:4f:d4:af:18:75:88:72:c6:0f:
03:bb:80:41:2f:c8:7e:11:2f:f4:c3:57:7c:86:bb:
b4:72:1c:79:d8:fd:56:09:ee:80:dd:ff:5d:07:fc:
66:80:4d:d0:dd:b8:37:0b:7d:49:c3:4b:dd:b6:cb:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:99:75:47:3F:A4:98:17:B5:18:B1:D1:AD:CF:20:1F:1C:85:A0
X509v3 Authority Key Identifier:
keyid:B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b1:13:46:e3:6b:ff:b2:12:81:35:38:56:42:09:af:52:e4:
b6:36:2e:d5:a7:6d:14:7d:c6:5a:15:d7:c4:ac:f5:32:17:2f:
3c:de:dd:17:80:74:73:7e:b4:a8:c6:8a:2b:8b:7c:a0:0c:72:
74:6a:ef:ff:89:c4:ac:8d:ee:79:79:58:7e:49:a2:2e:02:dc:
8b:97:3d:08:3b:e9:52:25:4e:60:84:db:37:e7:39:cb:01:cf:
e5:9c:a2:92:1b:bd:0f:3b:b5:0c:0d:91:99:f1:9f:f5:7b:ac:
42:2a:1d:fc:90:bc:94:95:95:be:58:8f:49:d6:6e:4c:9e:7e:
b0:f6:36:07:55:b0:21:7c:22:45:7e:26:ec:40:d9:c2:75:0b:
32:99:5a:04:d6:57:3d:b3:b6:61:c7:64:ad:b8:a3:bb:1b:a3:
22:9c:52:63:8f:86:ab:d0:7d:56:ff:99:b8:74:06:76:c2:dc:
54:42:d7:bf:16:5e:d5:fb:d5:5f:96:15:b8:7f:28:9d:66:3e:
30:9b:6b:1b:82:11:5b:43:62:33:d5:b7:2c:93:45:45:ed:90:
23:ae:3c:4f:19:76:5e:ec:26:c3:a6:ba:5a:a5:63:59:ef:84:
34:a7:ad:12:01:d1:12:0e:de:1d:ff:90:85:b7:ef:f1:c0:74:
13:1a:ab:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:40:25 2026 by rpki-client