Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.mft
File: 9cFt91G8fHGwA5bo7KeGnxYfbTM.mft (raw, json)
Hash identifier: 4TaTGtyrinFFY/FGb4SLo4G+RfH1/gk3XQcBHsK16jE=
Subject key identifier: A8:02:84:DB:AD:4B:A8:CD:FE:B1:76:18:E2:10:0D:DE:48:AB:68:89
Authority key identifier: F5:C1:6D:F7:51:BC:7C:71:B0:03:96:E8:EC:A7:86:9F:16:1F:6D:33
Certificate issuer: /CN=f5c16df751bc7c71b00396e8eca7869f161f6d33
Certificate serial: 01A1DD5E4AC80E4B7A0553F3CF3EEB18334C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cFt91G8fHGwA5bo7KeGnxYfbTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.mft
Manifest number: DB
Signing time: Sun 15 Nov 2026 04:01:46 +0000
Manifest this update: Sun 15 Nov 2026 04:01:46 +0000
Manifest next update: Mon 16 Nov 2026 04:01:46 +0000
Files and hashes: 1: 9cFt91G8fHGwA5bo7KeGnxYfbTM.crl (hash: 2W7n+H2N1Z6IUl7SjL1SImgBK4rsbo51JRlUaliKph4=)
2: ky9geymSVrF0um29NL9Ks30dd4k.roa (hash: FEgPS5VaKHByfL43nfZ+MqpY7vFaNCLRziMzetcS2FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cFt91G8fHGwA5bo7KeGnxYfbTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:4a:c8:0e:4b:7a:05:53:f3:cf:3e:eb:18:33:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c16df751bc7c71b00396e8eca7869f161f6d33
Validity
Not Before: Nov 15 04:01:46 2026 GMT
Not After : Nov 16 04:01:46 2026 GMT
Subject: CN=a80284dbad4ba8cdfeb17618e2100dde48ab6889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:8e:79:e7:b8:37:25:1b:cb:98:e1:88:55:
49:4d:f9:a9:93:24:17:26:26:c7:f7:7e:7b:77:aa:
37:79:80:15:12:67:5a:08:fe:dc:c8:92:3d:b0:cc:
c5:05:db:f4:0a:d8:20:a1:2b:14:f1:10:44:d4:32:
8d:e0:12:ad:c2:79:c9:60:77:92:17:37:9a:92:bc:
c1:f5:cf:fb:51:e2:25:e3:c0:c5:9e:0c:71:cf:89:
80:73:d1:1b:f6:35:a4:14:a3:b6:a4:ad:cf:bb:18:
a2:47:70:6f:99:45:32:5f:8d:ba:2c:3e:dd:6c:37:
dd:3d:2a:71:af:d4:97:fd:5b:3d:9e:97:25:d9:ac:
d0:f1:bb:bf:f1:3e:b6:bc:f2:e0:9a:a9:ce:fd:de:
dc:b3:d1:ca:0e:03:69:5f:d0:79:e5:f2:b0:5e:83:
e4:1f:b2:51:7d:46:2d:53:27:04:03:9e:df:90:c6:
ec:1e:f3:99:9d:d5:eb:ab:16:f0:a8:f3:53:4a:b0:
3f:a1:4a:dc:be:ec:31:44:02:be:bb:c1:e7:1d:a2:
96:4c:06:20:69:68:8a:4b:7e:ff:62:36:a5:43:e1:
ec:bc:40:dd:3f:96:52:50:95:d0:7a:dd:72:f7:41:
f7:8a:97:79:39:4a:ea:d1:49:32:60:33:c7:57:2b:
f1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:02:84:DB:AD:4B:A8:CD:FE:B1:76:18:E2:10:0D:DE:48:AB:68:89
X509v3 Authority Key Identifier:
keyid:F5:C1:6D:F7:51:BC:7C:71:B0:03:96:E8:EC:A7:86:9F:16:1F:6D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cFt91G8fHGwA5bo7KeGnxYfbTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ef:a5:17:ff:b4:2b:50:5f:43:fd:9a:c7:a3:fb:34:e0:e5:
7a:65:30:9f:d5:4b:b6:33:a0:08:de:cc:48:db:57:f4:9a:80:
6d:db:84:98:cc:60:87:59:3d:22:8f:03:13:d4:f7:9a:75:85:
88:37:0f:74:62:6e:c0:71:9c:68:bd:02:e3:68:50:1e:5c:27:
e2:c8:4f:5f:d4:41:c4:c8:98:3b:09:53:96:38:1a:b7:4c:7f:
f9:6b:e4:09:2d:61:03:eb:ce:f1:7b:c2:17:f1:70:8e:7d:05:
21:d7:41:e0:c9:ab:1e:b6:1e:06:e0:8c:c0:39:72:ee:35:cd:
c5:1e:21:5a:6a:bd:f1:7d:e0:28:af:f1:6e:12:47:c5:ff:89:
cc:b0:00:ca:3a:72:82:fe:91:64:77:9e:ee:ff:0b:55:90:5c:
cb:eb:1e:d0:a3:d4:48:38:18:d6:ed:2f:cc:b2:78:09:08:77:
43:b2:90:4c:29:5d:ce:e2:80:77:9d:e2:46:70:f1:9d:fd:e2:
24:28:d8:66:df:1b:ad:ae:40:76:4e:fb:6a:91:e0:af:7f:f3:
54:aa:35:49:cb:5b:d2:41:50:97:72:47:e3:84:0e:e0:f2:a5:
4b:31:29:5d:6f:a9:ba:04:b5:0a:50:01:89:ce:f1:37:b0:c6:
8e:99:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:03:34 2026 by rpki-client