Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
File: 9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json)
Hash identifier: 0doJhX54lH12G+zNqVPv61D6Apk6UD1GKh7r1xPfWOU=
Subject key identifier: B4:84:BE:CA:BB:9B:EC:A5:FD:84:C9:A2:9A:AB:05:CA:54:9D:21:98
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Certificate issuer: /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial: 01A0D796593BC392E1ABB5F0EE86B7FD5949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
Manifest number: 0789
Signing time: Fri 25 Sep 2026 08:02:29 +0000
Manifest this update: Fri 25 Sep 2026 08:02:29 +0000
Manifest next update: Sat 26 Sep 2026 08:02:29 +0000
Files and hashes: 1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: Tup39KWC2N695AvSD7hvOTUiBB8ExdUixEoHlVJBHKk=)
2: Fnxy3WJWYvuek9Fr0KYOmQUUsw4.roa (hash: Ch+0FQEjljg05e4GEw4ZsydId/PhinfJoSdNkBFbTQc=)
3: YFcRJIWw3vxIzvkY-8u-8c691f8.roa (hash: THB+jxktyZjvUxZ1NJSg5XToUQ22aa8mKJXvRtR7GBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:59:3b:c3:92:e1:ab:b5:f0:ee:86:b7:fd:59:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Validity
Not Before: Sep 25 08:02:29 2026 GMT
Not After : Sep 26 08:02:29 2026 GMT
Subject: CN=b484becabb9beca5fd84c9a29aab05ca549d2198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:df:81:a8:79:ac:02:da:4b:b5:5a:19:0a:
5e:bb:c3:4a:c6:b8:e2:ae:7d:39:d1:99:76:02:48:
41:4e:0f:fb:0f:0f:00:a3:89:08:83:6e:53:fd:f8:
a3:40:bc:72:38:2a:bd:7e:4b:b0:c2:ad:bb:ea:bd:
c6:6a:1b:7c:a9:da:7b:88:f6:e5:27:32:75:8b:a1:
2a:e8:72:ad:d9:91:14:e4:a3:55:31:c7:56:d3:4a:
5f:b9:6f:87:4c:78:02:9c:4c:38:5a:39:03:5f:e1:
09:35:fa:61:9d:b1:2f:68:22:79:88:85:59:97:ac:
da:6a:f6:81:48:47:ac:71:c4:b1:7f:fb:d7:d6:3b:
52:36:11:d0:15:11:cf:ac:09:40:bc:5f:53:13:71:
3b:ec:8b:89:e7:5b:3b:97:b5:5b:2a:db:df:25:92:
1d:42:a6:a5:3f:c1:df:e6:86:c9:9e:9c:9f:b2:6f:
c9:f9:85:8d:b9:b4:da:4f:39:db:c3:f8:a7:ec:b8:
70:18:41:47:71:4a:cb:cc:7e:eb:b1:db:a6:62:ec:
74:a2:c0:a2:38:20:86:6c:1c:c0:4f:4a:dc:a3:a4:
12:e4:1f:27:59:ad:04:f1:22:26:e7:db:1b:be:c7:
20:ba:83:c4:84:be:85:d1:35:7c:43:21:c6:b8:8d:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:84:BE:CA:BB:9B:EC:A5:FD:84:C9:A2:9A:AB:05:CA:54:9D:21:98
X509v3 Authority Key Identifier:
keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:92:43:f2:01:08:6b:cd:4f:e1:6b:23:01:2a:c1:e1:ea:bb:
a7:9f:9e:f5:f9:35:00:bb:e0:ce:50:bb:0e:19:cb:88:84:eb:
8e:e0:02:6b:92:1b:a3:9d:c9:a1:1d:3e:34:2a:0d:45:89:89:
ee:77:d2:f7:69:ee:3f:8c:18:37:33:59:55:ef:b4:70:6e:d9:
61:c5:45:99:fb:70:19:df:64:ae:56:ad:a4:4f:ea:9e:71:72:
19:27:32:fb:11:54:8c:8c:1c:67:ea:bf:1c:ea:26:d7:38:2b:
44:46:f9:40:1e:c5:0c:c4:62:81:5d:9c:29:86:10:0b:c1:d3:
8d:89:f4:84:eb:a2:fc:ff:f1:dc:39:86:0c:ed:b2:48:0a:fe:
48:83:1f:7b:37:9d:ad:f4:2e:aa:bc:57:ea:db:c4:af:20:4c:
03:70:0c:aa:c4:51:58:b9:bd:e0:9f:da:9c:34:3e:5a:c7:04:
9e:22:20:88:c1:b2:65:3f:3d:b6:48:d8:9a:e7:1d:48:da:06:
43:06:b4:4b:9d:30:9f:b4:19:c5:ce:e9:cb:87:c9:06:57:92:
aa:fd:33:66:36:b5:34:b5:df:46:60:cc:7d:64:7f:ba:92:2b:
5a:6e:5e:5a:4c:3c:bc:90:4b:52:86:d2:4b:bd:89:5b:19:0d:
50:b9:9d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:26:27 2026 by rpki-client