Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json)
Hash identifier: +TXIgbJFcHXZ+6+W0Bi3o+9BueK4PuOaVlp+/xlO8ks=
Subject key identifier: 65:16:F6:80:E6:D3:22:EF:85:E7:79:6C:D3:74:A1:2E:45:B1:B3:06
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial: 01A0D011DFDED259693A484A4A8CD52D6F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
Manifest number: 040A
Signing time: Wed 23 Sep 2026 21:00:27 +0000
Manifest this update: Wed 23 Sep 2026 21:00:27 +0000
Manifest next update: Thu 24 Sep 2026 21:00:27 +0000
Files and hashes: 1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: zSwzz78Zvscb3CHC2p8PbG8LDbt3zgG1TbwWYAeznoc=)
2: W3uokoIan0bL_6hGsLT2Lc4cFQY.roa (hash: lnmDhnBJ1en6JgsP5wQ9r3eh318nNpbuOqRdtOpx05A=)
3: c7-vm7ayWM43onBxMirp6xh4ses.asa (hash: Yn9xC9hv7PLljqa8pOnthNeGkVr/8TT8ccV2WmSMABI=)
4: mqyazNOfM1ZVPm3cOVRYyNHDwpA.roa (hash: C7VZbHKV6HPYsBlX1X4bgcS+0xR52AiRYn6dtHpeMwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:df:de:d2:59:69:3a:48:4a:4a:8c:d5:2d:6f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Validity
Not Before: Sep 23 21:00:27 2026 GMT
Not After : Sep 24 21:00:27 2026 GMT
Subject: CN=6516f680e6d322ef85e7796cd374a12e45b1b306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b4:19:e3:cf:e6:35:d8:2e:85:bd:cf:56:38:
64:d4:24:4a:03:76:cf:c9:30:77:d7:72:75:7e:a8:
f3:5c:e6:f6:9e:7f:0c:a1:9f:b6:6f:78:24:50:14:
fd:7b:f5:4c:2f:7c:1a:ff:e2:d8:9f:df:5b:7c:1d:
55:1b:2a:67:7a:99:a5:60:02:65:57:ad:d6:97:63:
7a:5b:8f:b9:9c:77:a3:10:6d:92:5d:e9:74:e1:31:
43:59:11:6d:f7:ee:ec:ad:95:2e:e4:98:3d:39:0a:
48:3c:d2:e2:f3:0c:80:73:64:b2:17:71:f7:a1:4a:
2b:a2:38:c7:0a:ab:ea:c6:13:d8:15:8b:55:3a:cf:
eb:61:58:41:08:16:ad:de:ff:50:50:bf:27:a1:2a:
8b:80:4f:4a:f1:0d:04:f4:64:32:4b:4e:9a:b7:ca:
61:fa:d7:75:66:fc:06:72:f2:5a:fb:da:12:92:56:
c5:6d:f2:42:b1:a3:a7:65:be:a3:5e:b9:19:94:ea:
5c:82:45:7c:72:b6:95:2d:9c:fb:07:21:38:b5:68:
46:d9:1f:33:49:21:02:aa:2a:c5:a7:24:81:1e:3b:
5a:b5:2f:18:14:39:87:a3:57:8d:f6:94:a9:55:ec:
be:5d:bf:bd:d4:bc:7d:b6:e9:ff:d6:b5:86:54:fa:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:F6:80:E6:D3:22:EF:85:E7:79:6C:D3:74:A1:2E:45:B1:B3:06
X509v3 Authority Key Identifier:
keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8b:55:0c:3c:d4:c2:7b:a8:23:c0:bc:bc:6a:e2:97:5f:f6:
ea:f8:7d:2b:59:ce:56:a4:1a:14:6b:50:bf:9c:bb:6e:60:dd:
d4:88:5a:36:1a:e8:35:13:12:bb:b2:60:d6:72:ab:a6:a0:48:
3a:f9:5f:ec:a7:64:c1:51:6b:43:d4:4f:93:cb:4f:88:dc:85:
42:3b:a6:87:2e:10:56:26:1f:d2:13:71:60:a9:d0:b5:8c:0e:
13:f0:11:d6:a7:d9:f9:40:d4:7c:39:00:49:c2:a2:38:71:3d:
47:19:48:69:d5:36:2f:e5:3f:ba:8e:28:6c:56:85:ea:b4:df:
08:ef:cb:ce:4e:4c:30:21:98:42:38:83:94:1f:ae:f7:cc:87:
67:b5:6c:de:45:96:47:04:10:a3:9f:93:4c:45:15:c8:8d:6e:
27:77:98:93:ba:a8:97:8f:1e:6e:82:44:85:73:88:05:e7:67:
ad:b8:89:bf:3c:fa:11:2c:a0:84:c7:dc:2b:53:93:9d:8a:a6:
7e:13:24:de:2a:07:b5:57:4c:51:17:4f:9e:68:eb:78:e2:af:
51:45:29:47:3b:da:d3:b4:43:22:0c:fb:67:9a:da:1f:9f:32:
fa:b9:20:b5:d6:cc:03:91:08:4a:8f:45:11:92:01:e8:f0:51:
9f:7c:d3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:54:20 2026 by rpki-client