Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: 0lLXh5TgrkDDt0K/fPX2lF4YOPb0lhTA57mC+bWtmHo=
Subject key identifier: 8A:71:F6:28:1A:EA:84:25:A3:BD:7C:9D:3D:21:E6:16:B3:B7:10:06
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 01A11ABE00EB214FF04EF22B1291A1479B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 19F8
Signing time: Thu 08 Oct 2026 09:00:21 +0000
Manifest this update: Thu 08 Oct 2026 09:00:21 +0000
Manifest next update: Fri 09 Oct 2026 09:00:21 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: YLogYMH5gDQHF0iIQMOn7b8YhjKrlVSa84e2xxn5qBY=)
2: oY8wzqxSZtFw6pVYs4NFV60daUg.roa (hash: DFgw9sxWQdsrNBj4RrkibFIZhSj9mHDN7Zn+MkePlLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:be:00:eb:21:4f:f0:4e:f2:2b:12:91:a1:47:9b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Oct 8 09:00:21 2026 GMT
Not After : Oct 9 09:00:21 2026 GMT
Subject: CN=8a71f6281aea8425a3bd7c9d3d21e616b3b71006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:f4:4d:f1:77:55:db:3a:e5:a7:69:5e:54:
91:5a:53:27:f4:a1:96:1c:0f:48:10:24:1d:fb:74:
8b:2f:38:86:ab:17:bf:5d:29:42:22:df:d7:b1:67:
7e:63:ef:2c:c6:9e:c4:5d:00:fd:a3:88:8e:92:5d:
7e:47:56:20:72:e2:56:a2:e9:e2:1b:a7:b3:4a:99:
60:56:ff:1c:48:9d:69:0b:1d:d8:62:52:d9:55:2d:
13:14:a1:a4:56:f5:a9:eb:1b:ac:6a:84:ff:be:17:
08:62:af:1a:17:3e:23:17:07:e8:21:6b:cd:42:bd:
c7:4d:19:48:54:da:c3:c8:23:0c:87:85:cf:88:d6:
f0:6a:b1:79:03:29:76:de:a7:a4:22:07:b8:f7:dc:
0e:b3:07:24:e2:ac:9a:e2:a7:97:66:cb:bf:78:ed:
bc:2e:dc:e0:55:e2:8b:c7:64:14:f3:ab:ae:fb:0d:
b4:53:7d:e1:4f:ba:48:99:a2:db:5c:1b:d3:c4:45:
26:c6:cb:6a:60:c8:cc:a8:2f:1d:7d:90:34:34:77:
2e:f2:91:1e:29:5f:57:e0:45:0a:62:b8:9b:9c:2d:
1d:d6:f7:da:d7:a2:b9:9c:44:47:0c:90:b8:36:a3:
db:56:e8:f3:c0:52:7a:54:1b:26:fd:3d:ec:e5:11:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:71:F6:28:1A:EA:84:25:A3:BD:7C:9D:3D:21:E6:16:B3:B7:10:06
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2b:e8:07:ad:4e:0c:42:a8:b1:7f:56:1d:14:16:9f:67:d6:
4b:ad:51:7e:b2:3e:1f:2b:6b:11:0c:36:dc:2e:da:0a:30:64:
17:cf:74:38:3b:7b:21:f3:80:e0:09:91:b0:e2:5b:7e:12:63:
49:e5:56:c7:64:90:5e:5f:ff:2b:4a:ea:28:96:f4:0c:86:02:
43:41:4e:31:48:cd:78:73:ed:56:0f:7f:37:77:bf:54:99:d9:
b1:30:7a:ea:bf:20:83:eb:2c:8d:95:ae:04:d1:4f:5a:27:bb:
ad:28:01:5d:34:2e:c2:9a:32:64:08:15:0a:35:da:5f:3d:3a:
b5:64:91:ef:a9:f1:4b:bc:64:5d:f6:d4:dc:06:17:89:e1:db:
b6:d1:62:3f:13:87:bf:b0:bd:6d:b1:64:11:f8:74:61:4b:01:
5f:ec:f3:cb:e5:c1:f2:03:8e:08:17:30:cf:e7:0f:63:5d:d8:
bb:74:93:35:0c:16:48:13:7d:7f:a1:19:c5:83:24:9d:6d:2f:
a9:15:f4:ea:28:16:92:07:cb:69:9a:28:60:4a:2f:dd:cd:e3:
ef:e6:bd:64:d8:92:e6:7c:6d:c7:44:10:fa:ac:95:cd:c4:09:
e9:27:9f:33:ee:4f:03:dd:04:77:ab:87:2b:71:9b:c2:7d:93:
2f:02:52:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:47:57 2026 by rpki-client