Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: srRLkK10SOr9MZ1Gg/a3Xe+aBgaOyK8JQeuarX+scLo=
Subject key identifier: 69:C4:00:17:D2:2A:0D:07:B9:0D:5D:A4:FE:C1:57:82:44:A4:E3:4D
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 01A102B66E95D0E0AC00C0EEE96424D122EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 11A1
Signing time: Sat 03 Oct 2026 17:01:12 +0000
Manifest this update: Sat 03 Oct 2026 17:01:12 +0000
Manifest next update: Sun 04 Oct 2026 17:01:12 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: EccGNJ8yZCQ3RT3iTjpKBS6SIrexS6snVR0Yxr9NmLY=)
2: i1q-5ppGHZKen0mg4iu01mYnQM0.roa (hash: sIuyBrADQrDmfb4gofoZhceJ2ljMvz5t7ov19sRqXKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:6e:95:d0:e0:ac:00:c0:ee:e9:64:24:d1:22:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Oct 3 17:01:12 2026 GMT
Not After : Oct 4 17:01:12 2026 GMT
Subject: CN=69c40017d22a0d07b90d5da4fec1578244a4e34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:04:b4:e7:17:78:bc:0e:16:cd:cd:6c:87:
f5:89:d1:fe:4a:f7:e0:5d:f7:0e:67:e3:89:f5:e9:
c2:dd:91:b5:14:b7:90:84:35:08:ef:56:c7:28:dc:
36:71:ed:99:b1:35:4c:1f:31:88:3b:38:35:5e:19:
47:8c:03:63:db:cc:1c:73:d4:93:a4:40:18:09:38:
23:65:d8:58:77:44:f8:34:53:90:dc:07:23:26:ce:
5f:18:d0:53:0f:51:78:d8:39:97:e0:7d:5d:00:88:
df:69:20:9b:4e:48:80:03:60:36:5d:eb:8e:35:32:
25:56:a5:94:4d:8d:e2:62:ce:5b:fd:f7:0c:64:ea:
6e:0d:38:8c:5d:53:57:17:d1:a9:62:d1:20:da:50:
ce:96:50:a8:71:0f:47:d2:5c:ea:30:fb:86:f9:57:
3e:2b:4b:78:85:b0:c8:9e:cd:3a:b5:a4:65:fc:1e:
6b:35:24:f9:2c:72:ac:8b:97:88:76:73:a0:eb:89:
ab:f4:13:c9:83:c3:cf:c8:59:8c:67:f3:a8:bc:0a:
77:47:2c:43:25:71:8c:1f:ca:41:b9:20:ed:22:e0:
4b:a0:09:fb:51:6d:3c:92:6b:04:a6:21:1e:94:6d:
d3:61:80:75:31:8d:82:10:ab:ac:b4:b1:38:22:74:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C4:00:17:D2:2A:0D:07:B9:0D:5D:A4:FE:C1:57:82:44:A4:E3:4D
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d8:ba:2f:e9:5d:a7:b4:6e:b1:28:82:a8:14:57:4e:24:54:
61:93:02:60:89:16:09:14:1b:5f:84:cc:0e:b5:0e:90:03:af:
ef:40:0f:2e:57:21:3e:89:af:c6:dc:70:e3:96:b4:49:3e:35:
31:3b:09:b0:dc:10:dd:df:0b:d7:94:9e:eb:11:2b:aa:f1:ad:
b5:4e:8d:24:7b:62:47:d3:d8:1f:f8:08:26:c0:ae:c3:b6:45:
45:68:f6:d1:e9:69:4f:6d:ff:82:eb:03:db:02:ac:72:18:76:
4d:7c:77:ba:ac:db:3a:b4:1b:e4:08:1e:42:f5:9f:3a:34:0c:
c5:cc:ae:d9:f4:05:6d:fa:a0:e5:86:70:7a:23:cc:d0:10:4c:
1f:8f:8c:d3:01:8f:d9:90:87:8e:f8:b8:c6:db:41:7c:ce:51:
55:40:86:5f:28:c1:d7:98:b9:d7:f3:d2:67:36:0b:95:6a:0e:
d4:39:a2:3a:c8:b3:cf:9e:ce:75:46:fb:66:d4:06:bb:7c:7c:
ed:5c:94:f3:9e:c9:35:e8:19:68:96:6a:7c:45:65:fa:da:cb:
a8:44:67:bf:64:01:fb:19:7d:e8:5b:60:cf:38:87:18:3f:61:
5e:6c:32:75:9e:23:09:35:25:25:7c:8f:de:85:2e:f6:6e:a0:
b0:c2:b9:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECtm6V0OCsAMDu6WQk0SLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTQxOWUzNzAwYTM2YmEyYjAzOTA2YzlmOGY0ZDJkZmQ4
NDgwNzAwHhcNMjYxMDAzMTcwMTEyWhcNMjYxMDA0MTcwMTEyWjAzMTEwLwYDVQQD
Eyg2OWM0MDAxN2QyMmEwZDA3YjkwZDVkYTRmZWMxNTc4MjQ0YTRlMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz58EtOcXeLwOFs3NbIf1idH+Svfg
XfcOZ+OJ9enC3ZG1FLeQhDUI71bHKNw2ce2ZsTVMHzGIOzg1XhlHjANj28wcc9ST
pEAYCTgjZdhYd0T4NFOQ3AcjJs5fGNBTD1F42DmX4H1dAIjfaSCbTkiAA2A2XeuO
NTIlVqWUTY3iYs5b/fcMZOpuDTiMXVNXF9GpYtEg2lDOllCocQ9H0lzqMPuG+Vc+
K0t4hbDIns06taRl/B5rNST5LHKsi5eIdnOg64mr9BPJg8PPyFmMZ/OovAp3RyxD
JXGMH8pBuSDtIuBLoAn7UW08kmsEpiEelG3TYYB1MY2CEKustLE4InRbtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnEABfSKg0HuQ1dpP7BV4JEpONNMB8GA1UdIwQY
MBaAFPZUGeNwCja6KwOQbJ+PTS39hIBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYt
ZDRiNzIzZWQ3ODFjLzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYtZDRiNzIzZWQ3ODFj
LzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJti6L+ld
p7RusSiCqBRXTiRUYZMCYIkWCRQbX4TMDrUOkAOv70APLlchPomvxtxw45a0ST41
MTsJsNwQ3d8L15Se6xErqvGttU6NJHtiR9PYH/gIJsCuw7ZFRWj20elpT23/gusD
2wKschh2TXx3uqzbOrQb5AgeQvWfOjQMxcyu2fQFbfqg5YZweiPM0BBMH4+M0wGP
2ZCHjvi4xttBfM5RVUCGXyjB15i51/PSZzYLlWoO1DmiOsizz57OdUb7ZtQGu3x8
7VyU857JNegZaJZqfEVl+trLqERnv2QB+xl96FtgzziHGD9hXmwydZ4jCTUlJXyP
3oUu9m6gsMK5MQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 23:16:53 2026 by rpki-client