Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/f3f465-4c9d-45ee-932c-26cb7a0798f1/1/9yvus7pg-xKjOaygA62Krxe8YGY.mft
File: 9yvus7pg-xKjOaygA62Krxe8YGY.mft (raw, json)
Hash identifier: j1hmj8Sfgcf4bv3oQ+W8c9aa8iurrKmTWioXmX3tnGM=
Subject key identifier: 0D:70:A7:79:A3:E1:96:AA:45:A8:2C:E4:AE:A9:51:19:23:37:49:BF
Authority key identifier: F7:2B:EE:B3:BA:60:FB:12:A3:39:AC:A0:03:AD:8A:AF:17:BC:60:66
Certificate issuer: /CN=f72beeb3ba60fb12a339aca003ad8aaf17bc6066
Certificate serial: 01A0C9D8DC75F64A5455A539D9ABCDED899D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yvus7pg-xKjOaygA62Krxe8YGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f3f465-4c9d-45ee-932c-26cb7a0798f1/1/9yvus7pg-xKjOaygA62Krxe8YGY.mft
Manifest number: 38
Signing time: Tue 22 Sep 2026 16:00:27 +0000
Manifest this update: Tue 22 Sep 2026 16:00:27 +0000
Manifest next update: Wed 23 Sep 2026 16:00:27 +0000
Files and hashes: 1: 2O_XZ4cztMTqkjvZWy11fJb_MHk.asa (hash: qS8puOR9R7xm9FjQsicpURqBfjPW97q0d1dZ17E429U=)
2: 9yvus7pg-xKjOaygA62Krxe8YGY.crl (hash: ZeMYXtKCJV7w2MprLNnZNo189xoDBI09rZk50HdWZKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f3f465-4c9d-45ee-932c-26cb7a0798f1/1/9yvus7pg-xKjOaygA62Krxe8YGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f3f465-4c9d-45ee-932c-26cb7a0798f1/1/9yvus7pg-xKjOaygA62Krxe8YGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yvus7pg-xKjOaygA62Krxe8YGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:dc:75:f6:4a:54:55:a5:39:d9:ab:cd:ed:89:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72beeb3ba60fb12a339aca003ad8aaf17bc6066
Validity
Not Before: Sep 22 16:00:27 2026 GMT
Not After : Sep 23 16:00:27 2026 GMT
Subject: CN=0d70a779a3e196aa45a82ce4aea95119233749bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ef:6c:be:0e:d4:2c:40:27:4a:ea:00:59:61:
f8:dd:81:c2:de:11:f5:c6:09:05:a8:31:f7:88:0d:
ee:81:ac:b1:80:ee:33:7a:ba:7e:bc:8c:40:a3:e2:
51:6f:fb:78:c6:93:58:76:2e:84:94:82:0c:a1:e1:
ae:eb:99:12:10:82:f3:e0:a1:6e:2d:e3:79:1e:0d:
d6:1a:a2:71:56:c8:55:80:8e:fc:1e:f7:9f:2f:cb:
45:67:1a:6a:ed:c9:be:de:29:e6:67:15:db:19:ea:
73:fa:ad:4e:79:33:97:33:38:bf:ad:7b:48:65:0c:
91:bd:c5:df:43:e1:f2:21:8d:77:95:75:f0:f3:e3:
df:6f:0d:5b:64:36:1f:1d:dd:06:fe:9e:03:09:87:
c5:bc:1d:39:4b:3c:7d:8d:1b:19:3f:f3:a7:4d:89:
9b:46:9e:49:63:61:b0:b6:f6:93:ab:34:dd:ba:88:
7d:b5:5b:07:9d:f2:04:87:08:d6:d8:a2:c1:ac:ea:
3f:cd:dc:f9:0a:e9:6a:f9:61:00:9f:e3:a2:e1:8b:
51:a4:fd:5a:c7:7d:49:bd:a5:93:f1:e8:51:32:31:
3e:57:39:b5:5f:37:f0:ab:be:d9:1a:6e:7e:18:3d:
6c:93:e7:74:3b:4d:e2:2e:1d:56:6b:31:fa:b7:d8:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:70:A7:79:A3:E1:96:AA:45:A8:2C:E4:AE:A9:51:19:23:37:49:BF
X509v3 Authority Key Identifier:
keyid:F7:2B:EE:B3:BA:60:FB:12:A3:39:AC:A0:03:AD:8A:AF:17:BC:60:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yvus7pg-xKjOaygA62Krxe8YGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f3f465-4c9d-45ee-932c-26cb7a0798f1/1/9yvus7pg-xKjOaygA62Krxe8YGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f3f465-4c9d-45ee-932c-26cb7a0798f1/1/9yvus7pg-xKjOaygA62Krxe8YGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f2:6a:df:df:6a:92:b0:7c:87:d7:7f:dd:4d:ff:5a:4d:04:
4d:72:a2:69:95:de:7c:ea:4f:0b:3f:ec:af:75:80:e6:9d:30:
09:12:1b:c9:65:25:62:fb:26:18:4c:9a:0c:20:8e:0b:4d:83:
c1:f1:3c:51:13:7a:db:65:b1:ec:72:59:d0:1b:72:c9:90:e7:
e7:41:94:86:15:71:1c:40:04:b9:c0:1b:b4:70:a9:a5:86:9d:
8a:a3:4a:5d:ab:2e:c6:db:e6:c0:ad:9a:b7:60:33:b4:8e:2c:
c9:f4:b1:c1:7f:33:3e:8f:fb:56:3a:56:5d:20:1c:ba:a8:7d:
82:38:61:d5:f5:d1:dc:b6:73:bb:b1:8b:65:b2:9b:55:94:d7:
bb:51:71:3e:92:fd:48:88:fe:c8:9a:e1:d9:6e:5b:f7:cd:1f:
7b:d1:78:8c:28:61:92:6d:67:fd:08:9b:cb:7f:aa:4e:d9:18:
3e:da:96:da:05:ab:a7:c7:34:36:16:9c:28:4e:4a:fd:9c:75:
a2:51:3e:de:c7:c3:87:fd:7f:aa:54:e1:32:7c:a9:55:9d:11:
2b:d9:35:10:77:5a:f1:12:c8:1a:77:21:83:b1:3e:62:f4:26:
40:a0:7b:bf:68:9a:55:f4:40:54:d6:4a:2b:81:68:e9:c6:bb:
af:62:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:07:19 2026 by rpki-client