Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: yg44bVrw6LDyws1QgH9TTpehc6FeO25RRmYO91KMl2w=
Subject key identifier: A6:24:BA:FD:0C:1E:1E:03:AE:63:39:63:57:76:A1:B4:16:CD:0E:EC
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 01A0D0EDA6F273AFD842FC10A069568C6AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 0E39
Signing time: Thu 24 Sep 2026 01:00:30 +0000
Manifest this update: Thu 24 Sep 2026 01:00:30 +0000
Manifest next update: Fri 25 Sep 2026 01:00:30 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: kr15C+PCN2SLyNrfNL3qqc1/pBnVEGgffBMqP8TBPkE=)
2: IWvsOje1ZxTQJm3iMyMgDBCOgIE.roa (hash: kaYliqjJkqMdXwb3B1wUhcuY3L6iumjr0MlG0shhuGo=)
3: sP7IVsNCNnn_B2GtU6Sg79Zwhew.roa (hash: izWuWKp2wnvE2HYeue8Y8Mj2HM1TQYV8MhNOeFXRVUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:a6:f2:73:af:d8:42:fc:10:a0:69:56:8c:6a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: Sep 24 01:00:30 2026 GMT
Not After : Sep 25 01:00:30 2026 GMT
Subject: CN=a624bafd0c1e1e03ae6339635776a1b416cd0eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:b9:5b:98:7e:63:0c:f7:af:ba:2f:1e:06:
cf:41:da:4f:98:fb:de:57:d2:c3:ab:95:db:21:63:
68:d6:78:dc:f5:ba:27:90:7c:b1:30:ce:b9:5a:89:
77:35:f3:aa:91:e2:40:ab:b2:9d:49:20:e8:55:c6:
83:59:ca:7e:28:f4:c7:df:b0:24:b9:63:91:ce:61:
f7:6c:10:b0:17:78:4b:e8:7e:ca:33:44:43:10:7c:
6c:dc:7a:41:53:55:36:99:19:86:9b:f9:5e:d0:d3:
76:d4:88:02:ea:55:22:9f:07:1e:1c:eb:3c:6e:14:
bd:dc:cf:74:16:70:d9:e8:22:73:bc:41:b3:97:1a:
f7:c7:78:b0:00:18:5c:fa:fe:02:61:61:89:61:f4:
74:9a:d9:87:ed:da:cc:c3:5b:ad:d3:39:86:60:1f:
ac:2d:5b:36:4a:ea:ef:3f:b8:91:1b:77:c6:18:49:
0d:98:88:3d:35:28:6b:d3:89:6f:fe:cc:d8:0e:be:
ae:3a:fe:c4:2e:31:79:7b:3c:7a:12:24:e0:d6:f2:
ed:f6:a8:50:08:c2:38:de:fb:e1:f3:ab:22:27:d0:
46:68:a2:b6:ea:1b:e4:a5:8a:cd:50:21:f8:35:2f:
75:2f:6f:27:c5:6d:f4:95:df:f1:1f:14:ee:f4:a7:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:24:BA:FD:0C:1E:1E:03:AE:63:39:63:57:76:A1:B4:16:CD:0E:EC
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c1:00:58:31:05:53:3f:f2:fa:e3:5f:c3:ef:da:07:68:35:
7f:12:b4:51:f1:fd:a2:b2:21:8f:40:b8:13:ca:c1:d2:20:89:
07:d5:b7:03:a3:bb:86:54:6e:8b:e8:5a:a6:dd:de:03:e6:28:
33:ba:03:1a:eb:83:e5:5b:8a:3e:f2:d7:64:d4:46:ea:83:ea:
97:3d:cf:7c:fb:08:0e:53:5f:02:a5:39:1d:66:a3:20:59:28:
d6:cb:86:2f:5b:13:61:8d:2f:3e:17:84:cb:26:4a:27:46:d5:
72:59:52:ef:d4:ac:1a:3a:e7:9d:1f:b7:4e:de:5c:50:2f:6d:
89:3a:8f:58:fa:94:bf:e5:11:f0:c2:4b:2b:6f:de:68:d2:26:
6c:d3:20:69:fd:9d:b6:fa:d3:38:cf:01:54:26:78:ae:78:85:
6b:62:18:02:79:0e:db:dd:ca:1b:3e:32:4d:4b:ac:36:dd:f8:
54:c7:e7:b1:20:b8:82:3e:9c:98:9c:8e:38:10:60:fc:06:f0:
f9:79:4a:63:5c:61:0a:1e:fd:ce:ab:e5:49:47:92:da:c8:c7:
76:9c:c8:29:3e:26:34:1b:59:32:a9:78:70:31:88:0d:56:c5:
06:4e:19:1c:79:e5:f5:a2:77:7d:74:38:e2:59:72:53:f5:7c:
ac:bf:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:17:57 2026 by rpki-client