Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
File: B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json)
Hash identifier: 3K6E9TwwximC9V17aWtNY8y9dKrsObFEpbv1GWkMpKM=
Subject key identifier: D8:72:2A:FC:5D:AC:52:6C:0F:35:19:89:AF:8E:EC:0D:2E:DC:50:FC
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial: 01A0E7E4900E9D9DDC21C0F4198D8C3F35A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
Manifest number: 0DB3
Signing time: Mon 28 Sep 2026 12:01:50 +0000
Manifest this update: Mon 28 Sep 2026 12:01:50 +0000
Manifest next update: Tue 29 Sep 2026 12:01:50 +0000
Files and hashes: 1: 4ALFa9Jly8V_dKKpJ0k3rphtKqI.roa (hash: FvxfrXpFTEI5fJri2eyNeGvuYRYi/o3NW0uubzMpvBU=)
2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: uzIOM01cb6e6lS98pHQBAZw65xrhiz18qx4pCJCDDow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e4:90:0e:9d:9d:dc:21:c0:f4:19:8d:8c:3f:35:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Validity
Not Before: Sep 28 12:01:50 2026 GMT
Not After : Sep 29 12:01:50 2026 GMT
Subject: CN=d8722afc5dac526c0f351989af8eec0d2edc50fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:58:fe:c9:3c:f8:5b:85:5b:b1:97:eb:0b:
e5:d7:f7:fd:99:e7:a8:a2:35:c0:4d:c9:76:a7:52:
11:8e:69:5f:32:37:0e:d6:c7:ae:a8:9d:f1:b8:f9:
a1:e0:99:b7:4d:9b:44:c7:18:50:68:dc:ea:a6:23:
8c:35:d9:01:6b:8a:fe:f9:43:b6:7b:bf:cc:a5:1f:
eb:ec:a6:68:d4:13:c6:85:52:f9:05:7d:dd:b2:d4:
ec:ef:ad:69:32:20:78:67:48:96:be:e7:57:64:f1:
c1:50:e9:d5:1c:37:59:a5:0d:7b:7c:15:5b:53:f3:
c7:bf:57:98:c3:39:a9:46:a8:28:4d:cf:ec:69:a5:
a9:cc:0f:84:e8:01:37:00:4b:3d:4a:d3:12:c4:60:
b6:37:53:2c:e7:7f:76:a8:48:af:25:1b:c9:af:71:
56:c0:33:e2:fc:77:da:2b:fb:2f:30:77:d3:ff:f6:
d1:bd:18:05:ff:2c:f0:e2:7c:df:fb:7f:b6:61:df:
cf:70:63:ff:a6:01:24:78:ed:ed:cb:a9:3f:b4:68:
70:66:27:5d:df:47:a3:f1:1a:2e:59:c9:b0:45:04:
66:0f:f6:d5:0b:6b:8c:8d:45:25:c6:bd:40:06:0a:
96:c8:34:65:96:cb:68:a1:ea:55:6d:ed:47:26:47:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:72:2A:FC:5D:AC:52:6C:0F:35:19:89:AF:8E:EC:0D:2E:DC:50:FC
X509v3 Authority Key Identifier:
keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d8:87:5d:1d:15:25:9f:52:15:fd:5f:f8:5b:d4:88:1f:04:
40:08:d3:64:72:16:f1:dc:74:6e:4c:2d:9c:42:d9:16:d3:49:
b5:ee:07:c2:52:f8:f6:59:18:ba:06:70:49:2e:7a:3a:e3:8c:
af:b1:9b:0d:1a:82:c8:f0:c2:44:f5:90:79:82:78:8e:f1:8d:
d4:f0:60:69:bb:af:b3:de:af:79:a3:1e:c5:87:fe:36:7d:e9:
41:78:86:bd:f4:fd:4c:0d:5f:ed:18:d3:bf:dc:4d:98:f4:66:
59:45:b0:a5:84:e7:69:73:a5:46:1f:f2:44:3f:e7:18:37:1a:
e7:05:65:20:89:ca:04:b4:13:ef:68:ac:d4:e2:20:89:22:99:
6a:c5:97:0f:40:36:54:7a:d8:2b:40:6e:cb:67:0c:d9:b9:4e:
7b:22:39:c0:16:e4:73:8f:41:5c:7b:e2:25:2d:16:df:99:a4:
92:d7:fd:85:6f:1e:84:81:36:d2:85:f3:c8:60:2d:5b:5e:7f:
17:c3:be:bd:d5:8c:0b:8b:51:ca:fe:3d:5b:ad:d8:3e:ef:5f:
04:ed:66:72:2f:85:89:d4:c4:d4:d0:72:08:37:24:a9:39:89:
05:da:33:c7:d3:c6:8a:df:2e:72:d2:28:e1:7a:15:94:a8:bc:
a3:fa:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:57:38 2026 by rpki-client