Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
File: 9Ma33VF1vo23oFIvfU5BxcQsayk.mft (raw, json)
Hash identifier: cYL2H1WSFHkgIhlHCvY9LTjFKvVJ5Lfbwi9gFpS6EYg=
Subject key identifier: C1:58:58:A1:81:4A:76:D7:C6:18:FE:B7:5A:50:E5:F5:D6:87:77:4B
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 01A10BB91533A15810F9E72D9408B8FFD611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
Manifest number: 1717
Signing time: Mon 05 Oct 2026 11:00:41 +0000
Manifest this update: Mon 05 Oct 2026 11:00:41 +0000
Manifest next update: Tue 06 Oct 2026 11:00:41 +0000
Files and hashes: 1: 1-lOgfXr6z3ulgJm--XvyqYFnCkw.roa (hash: gyUyEbA+sluFWgU9QeypDRe8X2zOXF1Cp4BuVH8B2Is=)
2: 9Ma33VF1vo23oFIvfU5BxcQsayk.crl (hash: cGxOgvv+USElZVVpuvOnpxxleccoWCTJLnX2WC5d5BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:b9:15:33:a1:58:10:f9:e7:2d:94:08:b8:ff:d6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Oct 5 11:00:41 2026 GMT
Not After : Oct 6 11:00:41 2026 GMT
Subject: CN=c15858a1814a76d7c618feb75a50e5f5d687774b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:7e:d4:d5:a3:34:b2:0e:01:56:2e:12:aa:
83:a6:ad:ab:48:c3:90:2d:36:ed:94:6e:69:02:8f:
62:26:54:4d:dd:b2:bd:80:c9:bc:c9:f0:0c:e9:83:
62:86:34:92:35:82:65:78:f8:04:6a:52:c4:13:ab:
c0:9b:44:d1:3f:bf:05:25:d9:37:84:3d:25:6d:d7:
bd:29:b6:03:5d:2e:29:62:b4:74:32:dc:a0:e0:d8:
1c:d7:da:55:10:e4:dd:7b:9d:ba:5d:54:e2:8f:a4:
96:1e:e5:5d:ac:90:92:cb:8a:c3:41:33:78:95:fa:
9a:c8:2f:b3:2a:ca:81:ec:ba:75:1e:b7:93:7f:53:
c8:f9:94:2c:3c:57:06:92:5c:8c:65:a8:2f:8a:28:
e5:6e:c5:9c:f2:7e:20:bb:15:49:07:6a:75:52:94:
8e:95:5b:31:ea:42:2b:6f:07:6c:b2:4d:30:03:48:
e6:34:a3:c7:c3:bd:f5:37:4e:25:6b:e6:cc:e9:d1:
41:d6:3e:a9:45:55:5c:33:b9:79:8d:bc:81:be:a2:
e9:d9:ad:8f:a8:08:aa:9c:99:81:bf:7b:6b:af:c5:
19:13:8c:5b:aa:bf:c4:eb:8d:48:6a:47:bb:84:70:
d2:37:5b:4b:e6:cb:18:4c:32:24:65:ca:d3:32:f6:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:58:58:A1:81:4A:76:D7:C6:18:FE:B7:5A:50:E5:F5:D6:87:77:4B
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2d:bb:90:b9:81:a7:62:ae:9b:9e:44:15:8b:8d:b2:03:11:
8a:4b:09:07:fd:0f:8e:3f:14:b5:ee:cf:f9:ad:80:ce:17:4c:
f8:17:76:c3:45:04:78:ce:d4:1c:90:81:47:1d:d5:27:99:c3:
79:21:19:c7:a5:1c:7e:6f:22:fb:46:2c:2b:b3:60:76:04:7e:
43:e6:07:62:5b:15:9c:22:61:67:54:00:9f:fa:54:7a:77:ed:
0a:b4:c3:16:fd:a9:6e:52:e6:18:61:55:ae:a1:93:73:6e:69:
dc:d9:ff:96:39:39:35:ce:19:8e:c0:e5:75:bf:fc:11:d7:4e:
35:eb:b4:30:a6:9c:36:21:c0:1a:b0:89:83:7b:4d:69:1d:ca:
c6:d2:f4:5a:6a:48:5e:34:48:6e:64:78:0a:ae:22:82:54:ee:
1a:e0:75:61:b8:05:a4:79:c5:b2:b5:82:17:9c:70:1e:30:d3:
2d:09:64:04:87:38:f8:44:0e:90:87:c3:9b:00:1d:48:64:2a:
bf:45:48:91:a4:ea:a9:30:b6:07:cd:0b:40:3e:d3:64:18:6e:
5b:e9:ef:bb:ff:dc:a9:8d:54:b7:a2:29:17:6c:68:f9:f1:9f:
ed:86:39:e6:39:a2:46:f3:f5:cc:2d:ae:a5:3f:95:6c:92:3e:
3a:65:f0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:24:09 2026 by rpki-client