Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
File: 9rkcLAjwDWdj0unmosRCETDz3b0.mft (raw, json)
Hash identifier: L1g8M3lPLYdHNWZVxqj1NljxjWVlXW7Tt7PauP/KL2E=
Subject key identifier: CC:A8:98:CA:3F:19:00:AB:DC:C8:1C:C7:87:50:F1:DF:7F:79:F7:00
Authority key identifier: F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
Certificate issuer: /CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Certificate serial: 01A0D192EB2EBA5C0E66A9902501DCD896FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
Manifest number: 071A
Signing time: Thu 24 Sep 2026 04:01:01 +0000
Manifest this update: Thu 24 Sep 2026 04:01:01 +0000
Manifest next update: Fri 25 Sep 2026 04:01:01 +0000
Files and hashes: 1: 9rkcLAjwDWdj0unmosRCETDz3b0.crl (hash: e3bPeg52FvmbfXuR1CyA2XLBPsXJji472H67nVq3zJQ=)
2: d7Zoe80d5o_l9mAkX18sp9FvE7A.roa (hash: y3ZkNbc1worwlHzKa3ohEwBMDnjSz+Uy/th0hpjvKfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:eb:2e:ba:5c:0e:66:a9:90:25:01:dc:d8:96:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Validity
Not Before: Sep 24 04:01:01 2026 GMT
Not After : Sep 25 04:01:01 2026 GMT
Subject: CN=cca898ca3f1900abdcc81cc78750f1df7f79f700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:5e:df:50:a8:5d:08:15:89:6b:b9:dc:1e:
22:8a:23:a1:bf:f7:a2:08:e6:e8:89:c7:e8:f4:32:
df:a9:25:92:36:8d:8e:33:7e:74:07:fd:fe:e7:93:
ce:83:a4:29:db:6a:13:4c:d7:e4:da:86:53:3a:da:
fc:36:e1:1b:2a:52:af:41:95:d9:c2:cc:bb:b4:2b:
89:fc:ce:68:08:31:d0:12:1d:6b:b6:1a:14:69:2b:
fd:59:cf:54:e9:f4:5f:12:fc:d2:f5:93:38:a0:7c:
8d:96:a5:2d:f9:1a:1f:11:33:56:f7:15:11:39:e1:
5f:76:27:71:7e:aa:1a:e7:26:6b:37:0e:2b:48:04:
81:2e:09:b7:d2:16:d9:92:4b:79:d8:b0:e3:4a:5e:
a7:98:4d:73:4f:56:7b:31:4f:22:3b:98:90:de:cc:
84:0c:08:12:de:1a:ae:ee:8f:1b:36:8a:70:bd:9a:
50:2a:7b:39:8e:5a:82:c2:4f:9d:dd:75:03:6a:f2:
75:31:e1:0b:6d:49:08:db:85:59:a3:df:53:46:99:
c0:92:aa:61:10:da:ed:1e:af:d7:1e:f7:fd:6d:e0:
b7:81:10:e0:51:06:09:cf:fd:f9:cd:02:ea:8f:f1:
ed:a8:06:6f:44:f0:20:0c:9e:9a:aa:5d:82:5c:e8:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A8:98:CA:3F:19:00:AB:DC:C8:1C:C7:87:50:F1:DF:7F:79:F7:00
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e3:b8:01:ff:30:5c:8f:52:56:b9:5f:b1:c8:33:f7:d2:7d:
dc:c1:23:58:02:3d:e7:d1:56:22:11:17:1c:f6:e1:e1:41:a6:
36:1a:cc:c0:58:09:15:e1:0c:8b:ab:c8:cf:a6:e9:95:6e:8b:
87:08:dc:5a:45:4c:9f:98:7c:3d:7b:3e:fe:d2:ca:d4:70:14:
37:4f:04:af:11:98:41:58:71:79:95:a4:72:27:93:c4:01:da:
8c:76:9e:59:6d:cf:3a:1c:ce:28:41:50:90:c9:a7:5f:ff:bf:
2e:59:d0:cc:39:cc:5a:2e:c9:50:10:08:0a:fd:e1:1b:d1:a5:
a4:03:30:cb:82:2c:86:85:49:a4:20:17:7f:7d:42:26:c5:1f:
8a:d3:0f:43:4d:b5:ea:71:06:a9:c2:c6:37:61:d8:9a:55:20:
1f:04:bf:d8:83:53:3c:0f:77:02:06:f1:13:98:25:71:0f:ce:
aa:e1:3e:c5:02:5d:69:b9:82:b5:7e:e2:22:49:e8:1e:a5:76:
d8:ee:95:84:44:84:37:82:05:6c:0a:4b:60:a5:31:90:2e:2e:
97:6d:08:b4:a3:34:d0:03:67:a4:42:46:c9:0d:ec:a7:00:64:
3c:d3:60:7d:9f:6e:14:6e:6d:63:dd:4c:1a:95:12:02:b5:12:
4d:c4:de:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:48:38 2026 by rpki-client