Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
File: 9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json)
Hash identifier: CQFx4pG7bOWaf7hZjVHMIV0IV9cEjFn8nCkEtj2XvDo=
Subject key identifier: C6:58:39:AA:53:A4:FA:29:7D:4E:64:9B:2B:94:68:4E:86:CE:00:77
Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Certificate serial: 01A0CCD99E11A9DB2368298B919F9FAC289F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 06:00:08 +0000
Manifest this update: Wed 23 Sep 2026 06:00:08 +0000
Manifest next update: Thu 24 Sep 2026 06:00:08 +0000
Files and hashes: 1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: +V+duzmgoi7gQ3HPOVec9ABzNHgeKxeyf640bhfCWck=)
2: _nZKD9ZTGWn3ixeAqRkUR8-oFdY.roa (hash: E+dKSGK3CToMIv6bsluEab6asnsTgpRJX/4wcKUB3No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:9e:11:a9:db:23:68:29:8b:91:9f:9f:ac:28:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Validity
Not Before: Sep 23 06:00:08 2026 GMT
Not After : Sep 24 06:00:08 2026 GMT
Subject: CN=c65839aa53a4fa297d4e649b2b94684e86ce0077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:d3:ca:5c:25:93:56:c6:da:ae:81:09:82:
3d:a6:ed:a3:59:be:1f:ed:85:0a:e3:be:af:a1:aa:
08:62:45:cf:40:d6:90:2d:16:e1:ac:cb:89:c9:3f:
01:4b:2f:00:1c:06:23:0f:d0:5f:36:d8:c9:2d:43:
59:0e:f8:3c:fe:e1:f8:42:0f:f2:62:be:dc:2c:48:
a7:fd:1c:67:f7:29:02:c6:e3:c5:ca:5e:c0:bc:bd:
fd:25:3e:43:03:17:3b:6d:f9:9e:67:13:6d:b3:ee:
0d:cd:fc:be:e1:de:bb:08:da:da:34:da:46:a7:11:
8c:d5:3d:02:6b:32:4d:eb:29:c8:71:6c:7a:03:5f:
a9:95:74:d1:0c:38:99:08:93:bc:87:9d:fb:b7:b8:
52:5e:3e:ee:f3:8c:3a:9c:9c:90:7c:0f:80:6e:9b:
72:b5:26:f6:c0:5e:b8:87:48:fe:93:3e:7a:3d:49:
33:a4:50:88:34:87:ed:72:a3:97:6f:64:be:ce:46:
f5:24:a7:93:a9:32:ba:46:4a:29:10:a7:fc:f7:b6:
22:0e:00:43:42:62:e2:25:79:00:b9:33:83:d6:af:
81:85:9d:92:19:5e:5f:a1:bd:1d:53:14:fb:9a:54:
88:65:a4:e4:e7:09:00:3e:3e:e9:aa:1b:09:5f:3d:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:58:39:AA:53:A4:FA:29:7D:4E:64:9B:2B:94:68:4E:86:CE:00:77
X509v3 Authority Key Identifier:
keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2c:30:f4:0d:f6:00:3b:c1:a5:9a:16:28:d8:1d:e1:c3:70:
e3:0f:34:03:82:c7:6e:ba:36:d8:9e:df:d3:79:5d:87:45:50:
7f:3c:c7:77:89:da:f7:14:e8:3c:7d:36:39:c4:dd:7c:40:06:
6d:71:89:e7:f0:ab:6a:3d:39:4c:b0:ed:99:69:f3:88:59:39:
92:04:d6:f8:f7:cc:3a:76:14:e3:21:66:06:0b:20:15:b0:e5:
1a:7a:0a:0f:35:80:9c:8a:ce:4b:59:1c:8e:44:3b:e6:4e:a9:
04:0e:a4:25:37:38:7e:7f:b8:a6:54:9b:dd:69:f7:a2:21:5c:
f8:4d:33:fa:18:f2:92:5a:49:c9:86:aa:91:e8:cf:b5:f5:12:
4a:67:17:ef:0c:b6:25:32:84:ab:5c:3e:3b:60:5c:96:04:0f:
7a:21:d3:bc:79:99:9b:94:4a:40:c3:84:2b:ab:72:c3:33:19:
c5:e5:c2:80:f5:ad:a0:7a:ee:c4:ba:15:23:9c:c9:2e:02:12:
6a:61:fd:ba:82:51:a0:22:82:e5:89:a8:12:61:b2:dd:93:bc:
1f:13:ba:aa:76:bf:f7:4f:07:45:61:13:69:d4:d9:df:d8:56:
d7:ab:1f:48:1b:8a:71:bf:5b:02:37:43:9a:76:90:83:f3:30:
49:0b:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:36:53 2026 by rpki-client