Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
File: B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json)
Hash identifier: SZnTGgFWUpaAZDBKdfQz5p8hF5J0aYwkjcUuDeZokxM=
Subject key identifier: D0:32:39:21:E6:4F:59:EE:99:6A:12:36:59:59:94:89:02:CE:73:59
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial: 01A0CBFE621063A43B1B7CC9450AC1452FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 02:00:41 +0000
Manifest this update: Wed 23 Sep 2026 02:00:41 +0000
Manifest next update: Thu 24 Sep 2026 02:00:41 +0000
Files and hashes: 1: 5NepKsibkXxq0cC5aAvvP_8JjP4.roa (hash: 7HOC7sGZGamyWKAmcPUs1h2P6lOKJ+z20+QYh7rUkew=)
2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: NS0+VdrLOzQuvM9ElDtOY16fOOlIRLCQXKmQEWkj9fE=)
3: PTKJDn9baa8GDsyUDbvLdvKpH_Y.roa (hash: M6ZYD9tQnpCFir5Cu0FNk295lOfSt9eoRIH1690apck=)
4: VGYXm9SrAnPQDO4KzyfYQTctcKE.roa (hash: t6wWWjbtPwKCRrEiQDaW7hfJLS6tTVFXTMhhJiW17DM=)
5: ecvQXZ3AprCLKejnaTOVVFlxHok.roa (hash: UJHUQBi7HS/efD3FVZTiVWpdVXwILbRze3oIm83qHnA=)
6: h1mEZ62DMm3uuyaJJJmPKB4-m6s.roa (hash: AOIevC2x+LRQ++ZcMrIM2D+bhkF+aQN4GCC5pvrUkG0=)
7: k_NknFuW4fn4bDMEidouhfOP4yE.roa (hash: /QvV9YqG7NdPkIkhFC2G0RzWP2PLlZH/17cSaHRPmK8=)
8: q3xB1TlmhDj055zlvy4aiXlZXlk.roa (hash: 3L2aJ4MWJ0YKmWL4+Damuuwr/sJjzRrBG+ZnvYerwp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:62:10:63:a4:3b:1b:7c:c9:45:0a:c1:45:2f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
Validity
Not Before: Sep 23 02:00:41 2026 GMT
Not After : Sep 24 02:00:41 2026 GMT
Subject: CN=d0323921e64f59ee996a12365959948902ce7359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:e0:02:d9:fd:b0:af:0f:fa:ba:32:12:3a:
7f:62:dd:9e:ae:8c:02:39:07:45:a5:4a:3f:ac:e3:
35:77:33:03:5e:b3:78:67:d9:ea:57:1b:53:58:2b:
6d:fa:f3:fc:81:95:84:09:5e:21:48:bf:ee:9a:af:
15:f1:5f:bf:b9:d4:d3:d6:7e:1a:c0:12:d7:bb:ee:
3c:23:f6:dc:5d:fb:b1:61:a2:f3:19:06:db:e7:dc:
33:3b:17:0c:fb:6c:b2:d5:26:a3:d0:1e:0f:68:1a:
8a:95:91:c7:64:1d:6d:55:24:64:46:6b:02:d9:5b:
a2:1a:f1:f2:21:bb:b3:df:77:e1:a6:56:28:f8:45:
dc:4e:5a:ba:3e:bd:6e:a3:f9:93:cc:e5:42:d2:c8:
da:a2:80:5c:5d:37:a5:ee:95:40:8a:e8:59:d9:91:
9e:14:46:22:84:f1:31:50:07:36:79:98:61:ee:28:
c3:7b:e8:1c:34:bb:45:9a:1a:90:67:97:bf:5c:b1:
d3:e5:f6:70:4f:72:a3:49:03:7c:19:95:b9:25:bd:
4d:b5:6e:b9:aa:ad:d5:8a:d2:e4:06:3b:9b:4c:ff:
f1:dd:6d:51:82:b2:f8:d9:17:8e:90:40:b2:b8:7c:
c7:97:70:b1:31:cc:cb:38:45:37:45:4c:4c:22:d1:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:32:39:21:E6:4F:59:EE:99:6A:12:36:59:59:94:89:02:CE:73:59
X509v3 Authority Key Identifier:
keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:76:07:ac:8e:b8:50:85:b0:4a:a0:aa:88:8b:b6:b5:b5:e4:
91:3c:82:d6:56:c5:3c:67:91:45:38:7e:a1:9a:86:7d:67:cd:
0d:a8:04:d7:13:06:78:eb:c0:f8:33:57:91:c5:75:d5:b0:0f:
ce:c8:38:01:0d:c6:ba:58:0e:38:38:a4:9f:1c:29:56:44:8a:
29:2a:5a:19:69:5c:d5:ec:61:57:5c:5c:fc:ca:d7:16:16:d1:
f2:02:b9:2e:d9:5e:84:fd:e5:30:54:42:f3:93:d9:fe:21:73:
ac:aa:a8:a4:44:5e:6b:55:b5:2e:78:49:df:b8:a7:d7:94:aa:
99:ec:08:0d:df:29:3f:c7:9b:e4:c8:32:f9:7b:f7:cb:a7:c6:
77:16:8b:01:c1:11:e2:33:b7:d7:a6:7a:60:01:bd:f1:6f:52:
45:5e:c3:e3:b4:a0:70:6a:99:3c:46:39:cf:a9:47:8a:e1:f5:
ef:d7:c8:c0:55:a9:de:e6:94:f6:5c:17:26:33:38:4f:d1:6a:
c8:35:91:77:d6:28:16:53:36:08:24:d1:16:6e:16:44:5c:da:
18:1c:57:cc:a1:27:4a:e7:b5:21:11:76:a9:8b:bc:39:e0:c4:
bd:09:0c:c5:f1:46:f6:f9:25:29:f6:87:c3:cd:56:eb:18:c4:
67:e7:65:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:31:50 2026 by rpki-client