
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
File: 9YQK34T7C3WOuopaE1qYA5Pov3M.mft (raw, json)
Hash identifier: is/tZyOUKqgy/D2CTmj3FodeXC+/eKBnjqqpmKmdaco=
Subject key identifier: 66:A2:D0:21:73:91:06:31:B4:08:9C:96:7F:25:A2:7F:92:B1:E6:B2
Authority key identifier: F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
Certificate issuer: /CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Certificate serial: 01A0DBE02BC57BF52E983293AB8775D3F158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
Manifest number: 061D
Signing time: Sat 26 Sep 2026 04:01:36 +0000
Manifest this update: Sat 26 Sep 2026 04:01:36 +0000
Manifest next update: Sun 27 Sep 2026 04:01:36 +0000
Files and hashes: 1: 9YQK34T7C3WOuopaE1qYA5Pov3M.crl (hash: mvLviG4qZf4zbvFLOxohx1hzu9G7Wxr67w/zLnYmWCE=)
2: drA-qEeuOhXaBIliMFDyRwjzUIs.roa (hash: LRSsWiFp5H7cghjLHXgtjNhMqPss6jgTVs0oIRjr8vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:2b:c5:7b:f5:2e:98:32:93:ab:87:75:d3:f1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Validity
Not Before: Sep 26 04:01:36 2026 GMT
Not After : Sep 27 04:01:36 2026 GMT
Subject: CN=66a2d02173910631b4089c967f25a27f92b1e6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:4f:1b:37:eb:c7:fb:20:7a:da:ee:54:93:
7b:f6:37:e8:45:61:63:cd:37:58:2c:5a:53:fa:52:
7b:44:48:35:2c:bb:c6:10:bc:75:f0:9d:3c:26:09:
0c:8a:22:92:65:63:e1:b9:bd:63:63:68:74:7f:f3:
29:5a:6f:48:2b:83:2e:73:41:3f:2b:b9:cf:43:af:
26:6f:6e:23:6a:81:be:eb:37:1d:37:db:44:d2:41:
ae:19:5c:2b:0f:c5:3b:a6:d1:e4:81:65:8b:9e:f0:
d9:4d:91:6a:12:1e:40:9b:7b:0f:ae:d1:61:8c:48:
9f:70:bc:f9:17:45:8d:d0:8a:83:c9:a0:6b:82:86:
be:17:da:33:8d:bd:f8:f8:3c:5f:a8:75:8c:32:47:
a5:ca:68:74:0e:a3:cb:ce:c1:b3:94:69:1d:8e:ce:
1f:d3:42:65:71:d3:12:ad:21:07:53:15:29:b3:fb:
4a:d7:d1:7c:77:28:93:52:eb:5c:a0:bd:d0:1a:7f:
79:34:27:45:6d:12:d7:26:49:7a:ad:48:d9:6c:78:
80:aa:cf:59:ed:d3:cb:94:9f:5e:6c:4b:b9:8c:c8:
d6:cc:7b:ce:94:d0:4a:00:40:53:00:d8:6f:01:5e:
de:82:db:98:02:5f:8f:cf:62:80:0b:e3:3c:c6:bf:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A2:D0:21:73:91:06:31:B4:08:9C:96:7F:25:A2:7F:92:B1:E6:B2
X509v3 Authority Key Identifier:
keyid:F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:db:61:b7:d0:bb:08:08:17:3b:e2:6f:7c:de:ab:e9:8a:f3:
15:77:77:09:cc:e9:45:20:54:7e:2b:1c:9d:2c:15:ff:0c:06:
1b:88:ee:d5:27:9a:4e:68:48:22:31:fa:16:76:e5:5c:d3:3b:
4f:17:11:d3:0d:2f:d0:c7:43:78:9f:a5:4e:a4:10:0b:63:68:
cf:95:8a:dd:0d:65:17:b4:54:5d:46:44:25:0c:01:13:95:a3:
06:bb:15:dc:d4:18:e3:81:88:a8:25:8f:0c:25:0d:0a:01:e7:
11:81:27:ba:f7:68:95:5d:d3:65:2f:e6:d0:7d:3b:ce:37:26:
b3:35:bc:36:c2:f2:51:b7:1f:b6:2a:e4:a4:3a:e4:0a:5a:fd:
9e:34:6d:99:51:b7:86:c0:4a:28:f0:a0:53:3a:a5:3e:f2:b6:
24:4c:2b:b2:af:24:c6:8e:f3:b2:d6:af:9f:e0:01:d0:be:11:
e8:e3:91:35:2d:fc:20:f6:c3:a2:0e:f8:d8:ea:da:8e:3e:3c:
f2:61:2a:76:07:d3:6f:34:14:95:8e:7b:83:5d:02:cf:6c:e9:
73:07:3d:2b:79:9e:de:29:23:25:94:fd:68:35:51:ac:40:60:
1b:5c:a8:4e:c1:04:55:ea:49:ff:7a:34:73:99:f1:14:c0:1a:
d0:f2:77:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:53:24 2026 by rpki-client