Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: tc9RsE1c8QuUXZX+zoHWTsmXc/PhHiI64eYOhsZe6XA=
Subject key identifier: 97:C0:FE:80:31:B9:C7:FC:DA:5C:D2:5A:BE:EB:E9:4C:7F:FA:C7:63
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 01A0D0EE10981B9E7222C5340C52796B3E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 01:00:57 +0000
Manifest this update: Thu 24 Sep 2026 01:00:57 +0000
Manifest next update: Fri 25 Sep 2026 01:00:57 +0000
Files and hashes: 1: 8gINa2lFaHAK60FtqIDDhXwZP7w.roa (hash: z1FvylnNOuEEDQQea39SZ8k3cYtqZE6bJ6wCeGonrDw=)
2: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: Jj8ezt5UI5hT84GWh2UtC8CecaLD+InwUC5rTQ0PATo=)
3: IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa (hash: NPCHrCQgVoOMqCSPlDc/hj6wxQzJAbSJUalGFEL7VEc=)
4: tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa (hash: unf/ZbmoQZ2C8O0WxuwscfoRSvADWqKnPxDoOQZPINs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:10:98:1b:9e:72:22:c5:34:0c:52:79:6b:3e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Sep 24 01:00:57 2026 GMT
Not After : Sep 25 01:00:57 2026 GMT
Subject: CN=97c0fe8031b9c7fcda5cd25abeebe94c7ffac763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:62:e3:a9:ee:6c:b0:94:1f:0c:a5:ce:18:
20:8a:a0:bd:e4:5a:42:86:96:60:f5:f8:d3:bd:64:
6f:8c:5f:1d:83:ff:0c:9a:61:44:54:38:93:be:69:
a0:43:0a:e3:d9:f3:16:60:80:f8:45:7e:74:9e:ff:
a9:fe:cd:d7:b0:6a:ca:65:96:23:cf:70:fe:19:09:
73:22:db:84:96:ed:5c:1d:fb:e8:7b:c7:5b:a5:7d:
17:8e:98:38:08:66:08:ca:43:a1:90:65:df:7c:21:
d7:4a:1f:71:48:1f:04:5a:35:3d:2a:58:fa:8e:79:
87:23:5d:fa:62:95:4f:a7:10:f0:b8:38:62:78:8d:
53:f0:48:6a:7f:54:55:53:2b:0b:d2:28:ce:53:b9:
19:05:f2:64:27:b2:83:83:24:0b:95:33:aa:86:c4:
b2:41:43:be:3e:43:b2:1f:8e:26:cc:4a:64:77:79:
a7:73:dd:a5:a0:ca:ac:58:28:e7:94:2a:49:d4:17:
ce:05:17:10:bc:0a:cd:6e:b6:55:e1:60:a4:d0:eb:
c1:ce:ca:09:a8:ee:d8:47:27:ac:7f:6a:c6:37:37:
0b:b5:27:89:7c:3b:4c:ed:ed:f5:c0:bf:54:61:a6:
53:17:cc:4c:31:59:81:14:d3:6b:b8:67:75:34:60:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C0:FE:80:31:B9:C7:FC:DA:5C:D2:5A:BE:EB:E9:4C:7F:FA:C7:63
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:73:32:93:08:5a:ea:0c:77:32:18:2d:78:7a:43:de:cd:3c:
b5:ac:59:64:0e:a2:15:29:f5:0d:b5:ad:2f:46:1f:70:86:ff:
fa:2f:fd:51:88:95:3d:33:a4:db:3b:9e:04:78:54:82:a2:3f:
e4:79:0b:b0:9e:2f:2f:0f:26:2d:59:21:c6:46:fd:f9:4d:65:
71:f1:78:60:74:11:0a:1d:2b:d5:01:ee:c3:d9:0a:1b:e4:8b:
1e:73:ca:d6:75:83:3c:66:dd:72:a0:cc:80:85:48:a5:96:fd:
7d:7f:b9:2b:21:ee:0d:0c:a7:c9:da:ee:6b:51:f5:e7:3c:ab:
11:d7:1d:0b:fe:e9:e9:c5:f5:32:ae:29:7d:f3:b9:b8:db:51:
89:3c:69:83:c5:38:41:68:d6:e4:12:b1:ff:01:96:f2:31:bc:
45:fc:6d:a8:9a:9c:f0:a4:c9:53:fd:67:fd:d1:d5:60:37:42:
13:0f:e4:a7:44:8d:eb:11:44:aa:38:39:21:d8:6d:f7:a4:4f:
9f:e5:32:5d:a9:c2:77:6b:c7:89:7a:bd:85:f4:03:72:fe:ce:
19:0c:72:d1:44:9e:73:e3:e5:fa:09:b9:91:69:8b:81:fc:3d:
3b:cd:3c:2d:6c:21:d3:70:8d:89:22:2d:5a:25:fb:58:1a:9b:
01:63:8f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:04:30 2026 by rpki-client