Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
File: 9iZUZY9nKqzzcTO1xxz0sRwYado.mft (raw, json)
Hash identifier: 4KxhU38/qHrXnWGaLcv3MCGXODqlSago6bz4N0OgIG8=
Subject key identifier: E6:2B:A7:08:AC:26:5D:AD:65:2E:7C:7A:89:06:89:3C:12:77:E4:95
Authority key identifier: F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
Certificate issuer: /CN=f62654658f672aacf37133b5c71cf4b11c1869da
Certificate serial: 01A10549ACA5B24272C18FC0782E9C7490B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
Manifest number: 0592
Signing time: Sun 04 Oct 2026 05:01:16 +0000
Manifest this update: Sun 04 Oct 2026 05:01:16 +0000
Manifest next update: Mon 05 Oct 2026 05:01:16 +0000
Files and hashes: 1: 9iZUZY9nKqzzcTO1xxz0sRwYado.crl (hash: HXKsqW1jopjUC+1hhaNWLAn4R7SmsHTI+jR3WgcdeDo=)
2: d6pd06B5mnNywdYo5eZBwLJxfT8.asa (hash: ETla8YTJcM+5uBnfvCMaInkUnAmAwDLx0tjpRZMyWmk=)
3: tvMXQZLl7Wysz_xvdn4KxR27LYI.roa (hash: DS+mGSmFWnDI1NNRJFgUsn5iaFW320NJTO3U5Mk3hfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:49:ac:a5:b2:42:72:c1:8f:c0:78:2e:9c:74:90:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62654658f672aacf37133b5c71cf4b11c1869da
Validity
Not Before: Oct 4 05:01:16 2026 GMT
Not After : Oct 5 05:01:16 2026 GMT
Subject: CN=e62ba708ac265dad652e7c7a8906893c1277e495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:e7:1c:cb:75:29:90:78:ad:13:95:f3:96:
52:f1:c1:a5:c2:96:5b:b0:7f:da:c5:b6:e2:88:b2:
77:a1:0f:e0:97:92:ab:2f:5d:63:70:e9:18:21:00:
1f:b4:ff:a4:23:f6:22:d7:d2:87:2e:0c:57:1c:0e:
ac:07:ad:3c:8b:6c:1d:24:6d:9f:9a:85:39:81:76:
8b:35:12:08:03:fa:63:02:02:5d:f3:05:04:24:c0:
af:af:2b:a3:b6:c5:f3:44:22:92:07:ac:95:18:ed:
12:ba:26:8b:89:e0:e4:eb:20:90:12:9a:f0:6c:80:
f6:00:a7:40:d8:dd:d7:d0:63:9a:d1:8a:14:a4:ed:
9c:40:94:08:fb:bf:bb:58:a5:68:86:39:60:a2:28:
19:35:5d:68:79:b5:69:39:51:e5:2a:57:fa:82:02:
25:05:6a:8d:e1:4e:77:9b:28:36:a6:5c:2a:95:42:
ad:13:88:fd:57:7c:2b:8d:3e:ee:6c:1d:12:00:61:
b6:2f:14:43:1f:24:c2:d7:be:9b:d2:a7:dd:cd:95:
df:15:b1:22:6d:03:9f:26:e5:6d:a6:8b:04:66:18:
8f:63:a7:db:45:fe:34:64:ff:de:1f:c3:a8:c9:d6:
46:ee:ad:3f:36:3a:6f:55:92:9c:9f:4b:e4:74:0e:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2B:A7:08:AC:26:5D:AD:65:2E:7C:7A:89:06:89:3C:12:77:E4:95
X509v3 Authority Key Identifier:
keyid:F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:41:1b:a3:46:6c:1d:b9:08:b4:7b:ee:c5:f1:48:20:5e:54:
8f:80:71:73:c2:da:12:4c:a8:21:08:b5:92:2c:00:2d:d9:4d:
16:66:1c:58:19:d9:c8:76:e9:73:3e:9c:f4:bf:44:40:84:70:
69:d5:c9:54:24:b8:87:eb:af:bd:5d:ba:61:0b:18:f5:17:9a:
00:2b:d2:44:f7:f8:ed:3e:78:d7:bd:05:ab:c7:d6:86:9a:b0:
89:1b:0b:5c:a5:9e:7b:5c:9a:c7:bd:d5:f5:f2:34:e3:5f:4d:
f2:94:5b:33:f1:e1:4b:f3:47:98:6a:06:4d:0a:d8:7f:cd:ce:
25:48:3d:df:a5:1f:cc:b5:8a:5c:32:c5:f0:07:59:35:3d:8e:
b0:c7:3d:a6:09:e9:4d:c3:ae:3d:39:79:e2:78:bf:6f:fb:1f:
76:96:8b:0a:2b:88:58:7f:d1:5e:b9:2f:57:d3:41:67:0f:a5:
0e:d7:d8:c7:bb:be:da:dd:6b:07:6a:83:f5:0b:2a:55:22:6f:
89:b6:26:74:a3:df:48:a6:d5:7d:a3:e9:6b:9a:01:5b:9f:a5:
13:81:a8:f7:ac:59:4f:be:a9:4b:b3:85:d7:18:9f:b9:0a:b0:
30:88:52:98:de:cf:b4:c4:fb:92:b4:47:83:89:30:ee:3a:3f:
26:c4:6f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:58:45 2026 by rpki-client