Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: 348vJzId+LvK2xeXdwBABUNgfRShTHv+Cjt0s/cd8Ic=
Subject key identifier: E2:21:C2:C8:63:DC:F4:B3:26:61:DB:29:FD:36:BF:EC:4D:24:77:B0
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 01A0D57049701494EA347290985F9183E632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 22:01:40 +0000
Manifest this update: Thu 24 Sep 2026 22:01:40 +0000
Manifest next update: Fri 25 Sep 2026 22:01:40 +0000
Files and hashes: 1: Yo_sQDnlWVAHdBUjfYUlBGrEGAk.roa (hash: UtSlgr8dKlU2oiUU/YuYyiNrWIQBlqU7VjuzqeMr5iU=)
2: Yohrn8HNTtjhGA9URKUO2_Mby_U.roa (hash: /XhETKRi5W1obuv4QEHTmdciLbp0sxJedBeaO8RsKsM=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: AbS0YjxbaEM//6GLFe7J43omTPN6iNQfriNX/aye8aI=)
4: pqiBFTplBLtHWoMHzRforQTq8dI.roa (hash: wl+v61veOlULrNd8VjKMUyPIgjxBb6XbU3q/woMIXVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:49:70:14:94:ea:34:72:90:98:5f:91:83:e6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Sep 24 22:01:40 2026 GMT
Not After : Sep 25 22:01:40 2026 GMT
Subject: CN=e221c2c863dcf4b32661db29fd36bfec4d2477b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2f:6b:5d:5e:03:38:3c:92:4e:21:03:bb:99:
d5:19:50:03:e8:80:9c:f6:89:56:87:42:0b:86:09:
66:95:bd:0d:f8:5e:27:e1:8d:6e:ed:3c:c2:8d:ef:
ba:8f:a3:cd:25:5c:08:36:1a:59:1d:72:f8:82:a8:
bd:41:da:33:3d:23:e6:e2:44:80:0a:89:c5:40:4f:
58:53:9c:e3:0a:d2:c2:c0:32:66:6c:02:3d:4a:d0:
63:87:23:2b:c9:78:6e:6f:bd:aa:c7:c5:1a:ab:11:
12:de:b3:2f:ee:43:68:0b:db:f2:b0:75:81:89:7d:
b8:cd:18:6d:c1:88:65:b3:c8:a0:bc:53:2c:45:b6:
cc:52:ac:59:4f:67:82:cd:6b:3d:ca:21:fd:b5:76:
91:95:7b:9f:ec:21:83:7c:19:e7:e5:cc:27:be:eb:
ef:e4:f2:fd:7d:8a:ec:a4:1b:6e:43:e0:0f:90:cb:
87:cc:c9:04:12:df:4f:6a:e5:9f:b8:31:92:bf:18:
62:fc:9d:3a:d1:5b:02:e8:36:5a:f1:6f:98:25:6c:
c4:02:f1:9d:2b:fc:2c:1f:6c:eb:f9:dc:e9:77:ad:
24:09:d2:fe:61:0a:2e:f8:81:4f:c1:89:00:ff:87:
8d:f5:70:2c:12:a8:1a:20:34:a4:7e:2a:27:91:52:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:21:C2:C8:63:DC:F4:B3:26:61:DB:29:FD:36:BF:EC:4D:24:77:B0
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:25:71:03:13:99:e7:12:83:57:9f:c0:59:dc:91:ce:75:0a:
af:2d:76:84:7f:14:63:39:47:ad:bd:cf:f0:a7:06:62:97:34:
8a:3a:09:f4:73:46:20:80:4e:38:af:20:3e:42:3b:dd:f5:e4:
c7:72:d0:9c:60:fa:df:db:15:60:fb:f7:55:94:b6:fd:9b:fd:
78:f7:d1:bf:33:6f:30:cb:33:3e:07:ba:69:84:05:eb:c0:59:
92:5e:88:0a:a5:8c:b1:87:c7:82:a5:53:00:fe:e6:76:09:48:
7a:c9:c8:93:12:34:38:29:b0:34:a3:a2:71:b4:f7:d9:94:30:
41:c1:9d:c8:a7:60:53:d9:b9:86:7b:42:e7:d6:01:3f:73:15:
60:69:ea:a6:26:e2:92:c2:7f:63:73:3e:32:7f:28:74:c8:6f:
27:3b:f0:6a:b1:b1:ef:96:49:cc:b0:f4:3a:72:34:a4:23:a8:
0c:d9:67:93:5a:0d:b7:4d:f7:26:cd:d3:ff:57:96:26:e3:08:
66:30:5a:51:6c:ec:ed:ce:ca:f5:28:11:e8:ca:a5:de:2f:ca:
45:b3:16:f6:93:fa:09:23:ab:03:eb:5c:be:08:9a:24:b7:d9:
41:ee:15:50:c9:42:c2:68:62:75:70:c1:e2:c5:aa:1f:12:22:
00:a1:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:04:03 2026 by rpki-client