Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: I3uOQAIGNo7kDwffnQFyROdniDt0o8O34ddqxH6WWLs=
Subject key identifier: D3:97:99:4F:C5:E1:3D:8E:DB:B8:58:2C:55:69:65:97:D8:C3:BB:78
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 01A0D34B4AA04DCA4DC1C25C5E6785609047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 12:02:01 +0000
Manifest this update: Thu 24 Sep 2026 12:02:01 +0000
Manifest next update: Fri 25 Sep 2026 12:02:01 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: AXH3KleAbYsZDcKbX9j2YGReTL1ARYWEP1+eGNoAJoE=)
2: IRtOc9xNuHtN4zmsWWnKZRqgKMs.roa (hash: jkPYQDPHDAj2YZTZO0wQGRdV29/MSC+GrpeiHVDq/M4=)
3: Jomyc4HWtnITYsIDG8BVeLdHId4.roa (hash: klQBrykZJDAdf4GMS1JWIpprMsc/7rY9pUPlh5dkvXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:4a:a0:4d:ca:4d:c1:c2:5c:5e:67:85:60:90:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Sep 24 12:02:01 2026 GMT
Not After : Sep 25 12:02:01 2026 GMT
Subject: CN=d397994fc5e13d8edbb8582c55696597d8c3bb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:db:de:c3:61:bb:36:5e:bf:ee:89:a6:eb:
35:ae:33:94:89:43:84:a6:8d:83:b1:0d:2d:5b:9f:
c6:50:f4:58:ee:20:73:e2:5c:1d:42:b6:93:25:de:
32:fd:32:71:cb:4e:87:0b:7a:ef:3c:2c:b7:22:fe:
31:cf:6a:fb:d0:06:06:b0:53:8d:01:d4:be:6b:a8:
6c:ee:32:59:da:c2:c9:b0:44:c5:95:4f:c6:03:d8:
6a:99:af:66:70:20:5d:fc:04:58:fe:ec:e4:94:ef:
74:14:0e:e9:a2:16:10:4f:df:3b:bf:32:53:2d:bd:
38:1f:13:8c:be:de:0c:a3:43:80:63:aa:73:9d:04:
24:88:56:d2:75:38:b4:8a:32:88:fb:97:3d:d2:7b:
30:b6:62:f3:70:2c:2d:18:ad:9d:3e:95:90:db:ae:
3c:02:34:bc:b6:b2:90:85:84:ab:3c:21:1b:db:0c:
83:fd:dd:84:cf:24:f2:1f:0c:6e:ca:cf:fc:1a:6a:
79:70:c1:e9:31:03:43:e2:0c:6c:84:4d:9d:60:2d:
a4:67:84:03:d7:ed:1c:98:24:c2:67:48:85:b5:0f:
4e:90:c2:45:c1:14:39:d3:89:d5:04:5f:06:62:ea:
55:11:fa:37:77:7e:e1:2b:26:89:0e:0f:3d:a4:2f:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:97:99:4F:C5:E1:3D:8E:DB:B8:58:2C:55:69:65:97:D8:C3:BB:78
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:00:89:08:13:22:d2:15:3b:f1:2d:b2:cc:40:e5:35:35:cf:
06:ec:62:5b:80:1c:3f:19:b1:12:c7:97:6d:54:98:6e:37:99:
b6:1f:49:ae:9b:7a:b3:f3:90:92:da:8f:e0:eb:08:28:b0:ab:
35:f8:5a:aa:36:8c:42:c0:58:2e:45:c1:39:e3:9a:9f:39:1c:
d3:01:f2:1d:16:dd:01:22:12:33:a6:23:1f:a9:c3:54:e8:67:
6b:e9:9b:14:a0:7e:82:7c:ed:5f:4d:e7:5b:ab:93:4a:d9:42:
3c:94:4d:81:10:aa:ff:5f:76:70:a7:7f:0d:f6:c9:c7:9d:43:
c1:5d:60:b5:79:46:28:6e:8a:ba:b1:bc:03:29:de:bb:16:fb:
9e:3f:9a:4b:16:6b:11:f7:a3:f7:e9:b9:ed:c7:5f:6c:99:4e:
05:d7:71:5e:a9:61:b9:98:33:63:2e:c0:8f:a8:7d:90:5c:3b:
4d:40:5c:f6:20:d6:ef:e1:1e:af:a4:68:42:61:42:49:fe:e7:
6a:b5:32:7f:7a:9e:a9:3a:2a:f1:9a:08:80:52:d2:df:5a:f2:
14:2c:b4:08:43:76:3a:33:35:19:f6:52:37:77:83:d3:7a:44:
42:d3:a0:0a:9f:de:4f:c1:7c:b5:43:20:01:5b:74:16:df:c1:
f1:26:50:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:06:29 2026 by rpki-client