Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: +pw3bvJ9lCsQ2N9JBS8XUQyG10q3Ah3Fz3tTFgMENko=
Subject key identifier: 7F:27:8C:6D:F4:39:6D:9E:38:71:EF:BF:4A:50:56:B8:D2:53:01:A6
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 01A0D15B708FCF0A1C5930361C7192A99E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 1A75
Signing time: Thu 24 Sep 2026 03:00:25 +0000
Manifest this update: Thu 24 Sep 2026 03:00:25 +0000
Manifest next update: Fri 25 Sep 2026 03:00:25 +0000
Files and hashes: 1: 14LKfzEcyprlucXZUzPgqnyuaSo.roa (hash: owEZKmUqoURhemkZHaPKsDWoCPoanQn9LH86MqhDwCI=)
2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: f1UQyRxXMR1Ydx86c6p32nomzpq7RNZYipGmfvz9LQQ=)
3: G5qi4rCJoI8AUX8isP7b0ojIn7g.roa (hash: FS/t0aq2LUO9zTLCRQWanvLuxo6AAzEoo01kqAkUXDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:70:8f:cf:0a:1c:59:30:36:1c:71:92:a9:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Sep 24 03:00:25 2026 GMT
Not After : Sep 25 03:00:25 2026 GMT
Subject: CN=7f278c6df4396d9e3871efbf4a5056b8d25301a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:8d:5e:e9:4c:4a:9c:d8:e5:13:7e:36:4c:
f3:9b:e5:4b:49:52:02:f3:ce:2d:61:ea:36:18:6f:
6e:87:85:53:b2:db:ed:09:8e:8f:36:eb:25:eb:29:
c0:38:53:23:bf:27:a3:33:81:b1:62:bf:fe:80:9b:
c5:33:77:94:e6:38:a0:5f:b4:ab:3c:51:c0:0a:38:
a1:c6:1d:25:56:37:54:8b:ce:ce:be:96:72:ae:dd:
29:78:90:dc:25:0b:a3:a9:99:2b:1a:1d:db:a3:99:
82:cb:40:78:42:05:8f:72:68:15:f5:58:37:9b:85:
5a:e5:69:1a:ff:de:61:25:6a:eb:a8:45:f8:10:5e:
12:0b:33:eb:bb:86:bc:c6:a7:f6:ae:fe:dc:f0:19:
9e:70:e6:16:0f:12:89:39:ea:06:5c:ec:00:14:31:
89:6d:7d:52:85:f3:01:29:ad:79:5a:36:c6:65:a0:
a8:95:da:ae:d1:24:69:f8:fd:33:96:21:81:fc:4d:
c9:2e:67:d9:9a:e3:17:f3:60:89:4e:cb:dc:6b:0f:
5e:08:24:58:89:4e:90:ed:ee:ea:bc:73:bb:03:be:
9d:c3:7b:c3:9a:7c:af:70:a6:78:21:5d:2f:55:8c:
3a:bf:b3:18:7b:98:14:90:11:30:1a:cd:63:fd:30:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:27:8C:6D:F4:39:6D:9E:38:71:EF:BF:4A:50:56:B8:D2:53:01:A6
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c5:3d:07:21:08:da:09:9a:7a:92:e7:05:bc:ff:1a:72:7c:
60:08:6f:47:e8:57:0b:2c:10:db:81:16:f1:f1:89:af:23:c8:
4d:93:89:bd:b9:b9:63:3d:26:f8:77:87:33:0f:c0:54:3e:31:
77:89:9c:e8:74:70:40:3b:35:85:50:a7:98:1a:c8:b7:3e:61:
7f:ab:c0:52:67:0b:83:81:72:b0:4c:37:0d:44:fc:78:12:a1:
b5:cd:39:e9:a6:7d:f9:62:97:62:02:85:d9:9f:1e:49:f4:cb:
ac:2d:21:2d:18:6c:7e:5d:71:08:89:21:13:94:f7:70:fe:8e:
53:07:92:d8:de:a5:a1:5a:7f:28:31:30:26:b1:97:d9:8f:49:
e4:db:65:21:50:1b:bb:4e:d9:84:d6:c8:8a:0c:43:ec:ea:98:
30:ab:04:25:7c:cb:75:3c:00:c8:05:09:90:46:b8:e6:cb:b9:
3c:43:76:33:c5:b0:51:f0:7e:77:51:2e:95:62:93:8e:d0:60:
f0:82:18:c2:3a:02:99:92:30:1f:9e:8c:0b:88:7a:88:25:22:
02:77:1c:50:1e:b5:ab:a6:37:bc:29:fd:5a:3b:ef:f3:8c:1c:
6b:a1:0e:03:47:c4:ef:19:c8:7e:26:97:ad:8f:5d:70:f5:dc:
6a:86:df:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:10:33 2026 by rpki-client