Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
File: b9O3_1LTsZJWeqzKTZuGInQbf3o.mft (raw, json)
Hash identifier: vSm2b7R4UinuERB0hPP4nB6BYc6i6AJpo3eQXQkIvys=
Subject key identifier: AA:9B:77:05:73:D3:AC:6F:F7:65:3E:E0:84:3D:70:B7:39:4C:6E:37
Authority key identifier: 6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A
Certificate issuer: /CN=6fd3b7ff52d3b192567aacca4d9b8622741b7f7a
Certificate serial: 01A0D5DEAAB7BE31EC459ED9974ADF948423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:02:14 +0000
Manifest this update: Fri 25 Sep 2026 00:02:14 +0000
Manifest next update: Sat 26 Sep 2026 00:02:14 +0000
Files and hashes: 1: b9O3_1LTsZJWeqzKTZuGInQbf3o.crl (hash: ekdi+pg+HZ8YKRKYmIcYJzDDbi6kS2RgBufQ+2RKJ0o=)
2: oezyOEn59V6mni3H8CQ5vs1bQnw.roa (hash: q4IZ+VG661pUAowCN5QrAWUUig5pgHw4H2UhgQ/noNs=)
3: s6GU5a1jn8Ou-UOGgyrZBXIMUto.asa (hash: 9PM53IuTV6JPTHt2d4Dv4yh3Dx6FAU5utGwfVFOGN9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:aa:b7:be:31:ec:45:9e:d9:97:4a:df:94:84:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd3b7ff52d3b192567aacca4d9b8622741b7f7a
Validity
Not Before: Sep 25 00:02:14 2026 GMT
Not After : Sep 26 00:02:14 2026 GMT
Subject: CN=aa9b770573d3ac6ff7653ee0843d70b7394c6e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8c:34:b8:8d:6b:24:b6:ca:75:aa:9d:56:87:
f4:ff:f7:b3:21:80:56:54:6e:a5:07:cf:d1:17:cd:
40:6a:f2:2d:e6:4f:6f:fa:14:00:08:91:9e:37:16:
20:8a:64:83:de:0c:8f:cd:7d:77:09:01:d6:42:c1:
5e:72:f2:0f:48:05:69:44:30:e7:df:ee:e2:99:37:
72:a3:46:03:90:77:e6:31:f0:7f:20:05:be:2c:0a:
30:0c:b8:09:4a:5e:70:14:fa:1a:9b:a3:df:f7:73:
5b:d0:7e:ce:00:96:5e:cc:89:ba:44:43:51:d5:4d:
13:80:fd:39:4a:0c:5c:17:e9:ad:96:a9:66:0c:ca:
0d:5f:47:d7:0d:42:06:88:32:bc:a0:17:4a:52:65:
d8:21:c6:68:b2:14:8c:9a:b1:2c:35:68:6e:de:0d:
43:53:1a:ab:93:87:be:14:4e:0b:07:ba:9d:86:25:
6c:63:5d:15:5f:bc:5e:6f:e0:42:69:9b:2c:5a:ce:
cc:2d:e1:6f:0a:3f:8b:b6:68:22:94:c0:1f:d6:a2:
2d:a8:16:b6:28:9d:a5:d8:f6:4d:3a:50:7c:ac:d2:
ca:98:9f:40:06:57:04:4d:98:ab:87:60:63:c5:ac:
0d:5d:76:87:91:dd:0d:a9:7b:16:4f:c5:ef:49:e9:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9B:77:05:73:D3:AC:6F:F7:65:3E:E0:84:3D:70:B7:39:4C:6E:37
X509v3 Authority Key Identifier:
keyid:6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f9:4e:e4:1d:0f:ae:2a:d5:b1:5a:60:89:94:b6:15:62:fe:
a4:43:bb:83:fc:86:a4:f2:45:04:33:63:4e:cf:23:20:f8:1f:
d7:20:7b:39:a9:1d:6f:1a:91:63:66:5c:b0:d8:ee:fc:90:f9:
d4:fb:02:2b:3f:45:aa:03:2f:88:d2:c6:7b:9a:54:15:21:eb:
0f:9b:31:08:8b:ab:c5:a2:d1:57:d9:7c:a0:47:91:5d:31:f0:
b3:b4:33:40:fb:c4:70:77:1c:aa:29:bc:88:86:56:f3:a7:56:
dd:0e:6d:05:92:da:ba:ae:9f:11:e1:48:6f:ed:6e:91:82:02:
42:4c:67:6f:28:dd:b3:33:fa:74:07:bf:57:d1:83:54:2b:4a:
df:fa:92:63:e6:43:4b:24:3f:40:dd:55:85:89:c5:8a:ed:a1:
d5:b8:68:b0:cc:0e:2b:c7:70:ff:a4:19:c8:6e:77:53:3f:2c:
58:0b:ed:e9:80:74:5b:ec:b0:4d:65:91:29:9a:dc:59:fa:02:
34:7c:e5:c1:b3:bb:c2:85:2d:41:6d:87:4b:d1:a8:69:1c:c4:
74:8b:a9:95:18:11:1e:40:90:ef:41:27:04:4a:9c:50:e7:8e:
70:91:51:25:dd:52:17:d5:5c:46:18:e2:02:32:01:84:e9:dd:
98:f5:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:32:29 2026 by rpki-client