Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: 8i93wMMQf3XSVjySlXXnjN3vFl+LVbCTbDTLRETxq54=
Subject key identifier: 56:D8:2F:70:F6:12:04:F6:F4:D5:B5:35:D0:11:4C:0B:D0:AF:10:87
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 01A0DA29022B5E466431601E00A2A8813559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 20:01:55 +0000
Manifest this update: Fri 25 Sep 2026 20:01:55 +0000
Manifest next update: Sat 26 Sep 2026 20:01:55 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: wJFLLkMYQKt5T4lxt3noP0LUcVFjnRNHZuaJx7IKXP8=)
2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:29:02:2b:5e:46:64:31:60:1e:00:a2:a8:81:35:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Sep 25 20:01:55 2026 GMT
Not After : Sep 26 20:01:55 2026 GMT
Subject: CN=56d82f70f61204f6f4d5b535d0114c0bd0af1087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:c8:af:7a:b6:8a:6f:8d:c7:e2:f0:7f:ea:
4d:1a:5c:36:6c:b9:f2:79:24:02:a3:e7:99:13:ec:
41:0e:0d:94:31:04:21:dc:88:b9:e0:4f:df:3f:fc:
32:0f:15:53:5f:18:2f:f1:d1:4d:ca:78:eb:24:36:
69:05:ea:09:39:43:0d:07:2b:94:97:82:a7:ec:c8:
57:18:65:77:5e:86:15:70:71:60:6a:9b:28:ba:a5:
f9:b2:09:98:02:92:02:54:67:3b:90:ca:5f:41:92:
e4:c1:83:1c:c3:12:48:9a:4a:97:b7:52:b1:81:bb:
8e:9d:a3:6a:0a:71:5d:e4:29:8c:29:af:57:9e:61:
71:46:fb:4b:01:0b:e0:2f:01:a9:90:ff:a0:41:d8:
a1:b9:89:68:fa:42:db:4c:c9:a6:76:a0:ca:37:6c:
eb:78:f1:a0:7d:5b:91:b7:5c:e1:73:9f:fe:b4:92:
4d:80:43:01:12:46:86:17:c3:9b:98:5b:a3:39:a0:
8f:f5:47:fc:04:67:c5:61:cc:a7:6b:d3:51:a8:45:
4d:41:8a:64:b6:a7:f7:96:4d:5e:7c:2e:86:f8:02:
25:f0:e1:02:a2:3b:cc:c4:3d:3e:45:71:b5:67:07:
14:ec:19:96:ef:27:f0:8c:3d:8a:9f:e6:0b:88:20:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D8:2F:70:F6:12:04:F6:F4:D5:B5:35:D0:11:4C:0B:D0:AF:10:87
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cf:e1:a3:3e:9c:41:48:17:4d:46:39:c6:2a:30:20:24:8a:
5c:84:19:49:b0:ee:d1:58:c8:a4:d0:4a:20:d5:af:a4:bf:7e:
87:55:60:cb:25:92:a0:2f:58:0c:13:bc:29:f9:9a:b6:55:80:
fe:26:f0:c7:94:f7:dd:31:dd:94:42:54:df:ac:07:3c:fa:7f:
ae:eb:d7:7e:e0:b0:f8:27:06:57:b2:d9:27:01:09:e3:03:c4:
8c:a0:30:12:30:c5:b4:56:c0:94:a1:ce:81:55:55:8e:46:01:
cd:28:74:4a:c1:e6:95:63:3c:db:fc:f2:0f:51:66:2f:47:5e:
9b:63:0b:85:ed:26:40:90:e7:51:80:1c:8d:3c:94:9a:3c:62:
e6:e0:89:2a:07:d6:7c:03:1a:29:ff:1f:93:c3:6f:f8:17:00:
62:1e:4f:76:ab:ad:b4:80:52:66:a9:05:6e:e4:5a:17:66:ef:
70:50:74:4a:55:60:f7:3d:f7:24:07:9d:21:c1:93:04:30:d7:
b9:0a:c1:6d:66:f2:af:61:db:d3:0f:97:c2:33:82:d4:a0:51:
b0:4a:03:e0:ba:62:12:12:c0:e7:cb:57:37:9c:e1:8f:bd:96:
9f:97:33:4e:99:3c:0a:93:3a:79:a6:41:8a:54:45:ad:86:3f:
49:cb:17:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:12:35 2026 by rpki-client