Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
File: 9A68dJdsw9CsbGRtUHcPjZoWqeo.mft (raw, json)
Hash identifier: uutnYREqqiw7cb84K22x6beHljlxekho++PJQDAJ96A=
Subject key identifier: DB:93:4A:98:8B:C3:AC:6E:55:50:BC:4F:89:E9:7A:CB:07:37:4E:CE
Authority key identifier: F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
Certificate issuer: /CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Certificate serial: 01A1DFBA62A251B42ECEEFD440DCF8AF52BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
Manifest number: 032D
Signing time: Sun 15 Nov 2026 15:01:36 +0000
Manifest this update: Sun 15 Nov 2026 15:01:36 +0000
Manifest next update: Mon 16 Nov 2026 15:01:36 +0000
Files and hashes: 1: 9A68dJdsw9CsbGRtUHcPjZoWqeo.crl (hash: kq1Ww+onGm8mUEtNHZqzU9tgxfU3ZkiIRsOf9Xq2Gsk=)
2: cchuMiAwTdP7712IVa-5EwuoTbA.roa (hash: WntKm32ijw/Zst8nMPt2C0CBnjs1jMpSXp57ZJLNvM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:62:a2:51:b4:2e:ce:ef:d4:40:dc:f8:af:52:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Validity
Not Before: Nov 15 15:01:36 2026 GMT
Not After : Nov 16 15:01:36 2026 GMT
Subject: CN=db934a988bc3ac6e5550bc4f89e97acb07374ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:3c:b6:57:c5:5b:fe:4a:42:2d:3c:15:3c:
c3:45:65:8c:26:67:df:15:35:fe:de:29:2a:cd:c4:
7b:94:62:1b:57:73:a2:55:03:75:f5:d2:31:71:a8:
09:f3:89:1b:af:ca:ce:4c:37:4b:eb:e8:f6:36:49:
ba:d0:bd:58:9c:45:8c:66:bb:13:dd:7e:21:22:2f:
14:7c:0a:c1:d1:f0:1a:36:6f:f3:e0:89:4d:8c:65:
64:86:14:83:93:5a:40:63:ee:6b:98:56:71:c0:9c:
66:e7:a5:7b:68:3e:87:82:f9:c6:65:6b:8c:e1:71:
3c:34:5d:79:50:71:1d:d3:8b:62:e0:1c:88:fa:61:
57:0b:14:2b:b2:6d:9b:e3:a9:17:d3:74:e0:52:79:
f4:0f:3e:ec:ea:55:eb:65:cb:4b:72:3a:30:fd:a0:
bd:30:fe:99:43:40:5f:41:b2:07:9d:70:c6:f0:7d:
98:4b:b2:ba:7a:8e:c9:b3:d5:a6:3a:58:27:f8:4c:
00:dd:10:59:e9:af:06:71:ab:7e:21:c8:48:81:2e:
ba:9a:52:41:0d:f3:a5:c9:4f:60:28:80:03:0f:56:
8f:f3:5c:79:15:02:c6:cb:e0:ac:2b:75:12:af:22:
cb:21:99:af:c5:69:8e:93:8b:b0:36:a0:34:62:09:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:93:4A:98:8B:C3:AC:6E:55:50:BC:4F:89:E9:7A:CB:07:37:4E:CE
X509v3 Authority Key Identifier:
keyid:F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7e:fa:68:68:60:ff:05:ef:9f:9b:35:7d:ec:40:d5:1a:7e:
23:4e:86:1e:f2:f2:56:5a:bc:74:e4:af:8f:fd:ec:6a:f9:6a:
e3:a5:e1:fc:ea:37:7b:6d:aa:90:77:02:c7:3a:0b:ff:b7:b1:
46:fa:0a:85:26:7a:f8:cc:61:f9:53:56:f7:f5:05:d1:99:a1:
3e:00:d1:d7:29:e4:f9:66:16:8d:a6:a3:ad:69:95:af:56:57:
a0:ac:22:81:b0:a4:de:be:29:ef:4f:23:3d:6c:17:99:0b:3a:
50:5b:73:db:e3:27:b5:14:c1:a1:d2:eb:a6:3d:24:d1:58:b3:
61:b4:ca:e2:23:fd:95:c1:b9:e2:46:0f:8d:17:d7:e1:df:6f:
9a:4a:39:75:ac:cb:8e:0e:ac:14:43:9d:bc:31:7a:00:77:99:
fa:9b:9e:fc:0c:fd:78:87:25:cb:77:63:33:55:31:49:b3:cd:
66:a5:0c:23:92:19:ce:d9:73:cb:9b:5e:e1:47:4b:5a:38:65:
99:44:60:7a:b5:35:13:ec:6a:b5:59:af:13:eb:20:c3:da:68:
c7:2b:8a:8b:48:7c:3d:d5:98:15:97:81:3a:a4:88:48:87:47:
1d:91:e6:16:a9:3d:ef:e2:9e:f6:3e:b8:62:f9:dc:3e:9a:b2:
e2:93:2a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:39:40 2026 by rpki-client