Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.mft
File: 9w47e16yTwSxjLZcQmgd2kLVFsY.mft (raw, json)
Hash identifier: 5bB6N10e2jECIFNxCci/pOpX0ik5bHRSBL+74tQh37Q=
Subject key identifier: D4:87:94:A5:80:A4:C5:B4:25:EE:2F:6D:9A:20:CF:15:1E:6E:53:56
Authority key identifier: F7:0E:3B:7B:5E:B2:4F:04:B1:8C:B6:5C:42:68:1D:DA:42:D5:16:C6
Certificate issuer: /CN=f70e3b7b5eb24f04b18cb65c42681dda42d516c6
Certificate serial: 01A0CE2450A7B8911EA1130909A34D699B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9w47e16yTwSxjLZcQmgd2kLVFsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.mft
Manifest number: 01E2
Signing time: Wed 23 Sep 2026 12:01:21 +0000
Manifest this update: Wed 23 Sep 2026 12:01:21 +0000
Manifest next update: Thu 24 Sep 2026 12:01:21 +0000
Files and hashes: 1: 9w47e16yTwSxjLZcQmgd2kLVFsY.crl (hash: f3Lsu5fc4mYvyR3H2aJT+Ta8gLJSLPm8OaLMW0wmjHw=)
2: kDV5J5gvUfs2AruPi1AigNxO3No.roa (hash: 3eVKTOaVyZXfdZN443tZ94OFDw3eJah+bPWk0bbkQQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9w47e16yTwSxjLZcQmgd2kLVFsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:50:a7:b8:91:1e:a1:13:09:09:a3:4d:69:9b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f70e3b7b5eb24f04b18cb65c42681dda42d516c6
Validity
Not Before: Sep 23 12:01:21 2026 GMT
Not After : Sep 24 12:01:21 2026 GMT
Subject: CN=d48794a580a4c5b425ee2f6d9a20cf151e6e5356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:98:19:43:c5:5d:76:ae:14:39:b6:0c:da:
81:01:59:4c:de:52:35:91:f3:1a:29:86:a9:02:00:
4e:86:96:79:cb:64:4d:aa:02:20:a1:db:36:ed:11:
32:97:0d:d3:01:79:d7:93:13:8b:cd:a3:3a:d8:ae:
03:c1:bd:c6:54:5d:af:31:d0:42:bd:41:a1:22:3a:
64:87:65:2e:66:6a:2f:9e:39:c2:08:ec:62:3d:cf:
0f:d6:61:8f:61:cb:8e:be:20:d4:8f:80:03:3b:92:
49:00:aa:95:bc:d4:9a:f3:23:9d:33:0f:be:5a:fd:
ed:cd:88:32:48:b7:79:6a:a2:4f:72:74:c8:ef:3d:
86:78:c4:b8:c0:4d:82:69:fe:c5:19:e5:c2:35:d0:
51:d4:06:20:69:3b:4d:1e:b3:b4:53:98:20:47:89:
4b:89:38:1b:58:9d:aa:aa:24:97:51:50:26:ea:87:
14:05:34:f7:fb:7d:3f:ab:5d:cf:06:5b:4c:d3:8a:
fc:6a:79:ad:e7:fe:67:75:30:1f:8c:8d:83:66:ff:
69:fe:5a:b8:43:8c:b0:b8:d8:52:44:4d:88:f3:85:
82:af:78:96:c8:f2:bd:7e:94:bb:0f:99:73:9d:8e:
c2:aa:68:22:6a:e5:f8:91:66:af:dd:cd:a9:f3:1e:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:87:94:A5:80:A4:C5:B4:25:EE:2F:6D:9A:20:CF:15:1E:6E:53:56
X509v3 Authority Key Identifier:
keyid:F7:0E:3B:7B:5E:B2:4F:04:B1:8C:B6:5C:42:68:1D:DA:42:D5:16:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9w47e16yTwSxjLZcQmgd2kLVFsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9f:8f:17:47:60:9a:78:ef:89:59:7c:33:7e:bd:ca:84:93:
10:5d:e9:07:3f:3c:11:ee:ec:99:41:36:c2:c9:bc:a8:b9:07:
bd:4b:87:ef:8e:e0:76:fa:e3:de:81:0e:c5:8e:82:ce:4c:fe:
9e:a3:58:06:37:ee:30:44:30:93:a9:15:7d:54:2e:cc:df:5b:
e1:9b:e4:fe:7f:a1:ed:5c:5b:d8:ea:52:b8:89:a0:13:39:3b:
13:da:7b:2c:39:9b:1f:5e:fe:53:76:35:b8:d0:aa:f4:af:16:
34:73:d7:46:4f:17:1a:69:d9:1e:f7:11:42:18:03:b0:0d:33:
6d:d4:77:a3:7e:40:fd:da:1b:16:c9:40:69:3c:ee:09:36:d1:
b2:9a:09:68:3e:b4:4a:c5:cf:7e:9a:c7:64:9d:ac:07:51:df:
1a:ed:b6:cf:5f:6a:ff:ce:09:73:63:26:ab:fe:84:78:2c:6c:
34:b9:4c:05:e0:d4:33:cc:f4:c0:33:c4:fe:1e:db:b5:6d:94:
9a:3c:1c:31:f6:f7:21:a7:6d:ef:d5:fb:c4:e3:d0:19:ac:1f:
f1:81:d3:8a:cf:0d:25:b4:54:b8:4b:1c:96:5a:28:2e:56:06:
cc:99:44:e6:0c:77:e7:4c:5f:7d:6c:5a:2a:15:6e:99:17:7c:
27:0b:44:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:45:35 2026 by rpki-client