Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
File: Mh__9QM6eQGj6fJ19txujqD5O4o.mft (raw, json)
Hash identifier: 9sbsHsGRhLW1aK1snQUO66iuZGjCi54eX26GtsZPT28=
Subject key identifier: AA:FA:5C:80:56:4E:0F:13:CE:EC:5D:0A:74:78:FB:65:32:99:34:68
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Certificate issuer: /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial: 01A0DD602F117DFF4B88D8C6021541F4D591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
Manifest number: 1907
Signing time: Sat 26 Sep 2026 11:01:03 +0000
Manifest this update: Sat 26 Sep 2026 11:01:03 +0000
Manifest next update: Sun 27 Sep 2026 11:01:03 +0000
Files and hashes: 1: 3Q7_GkdVY3UrWG6hnKogPdwlTMA.roa (hash: /esAa54gtGHxOcqdkkMygDWuDj7d6Mjd5bQs/BpC4NA=)
2: Mh__9QM6eQGj6fJ19txujqD5O4o.crl (hash: Hf0YVg6ca6msO7atqhfLTkd/80h6ZWuZyG4s7JoFTxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:2f:11:7d:ff:4b:88:d8:c6:02:15:41:f4:d5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Validity
Not Before: Sep 26 11:01:03 2026 GMT
Not After : Sep 27 11:01:03 2026 GMT
Subject: CN=aafa5c80564e0f13ceec5d0a7478fb6532993468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:f2:d0:f4:c4:08:14:2b:3f:1c:40:cd:e0:
5f:b7:62:0f:fc:21:02:27:46:b1:35:e8:03:06:8d:
1f:f1:c1:62:ff:0e:35:5a:0b:4d:f3:dc:d9:a8:ae:
d9:68:cf:b8:d8:a7:72:cf:6c:5a:db:e7:08:c4:b0:
3c:f7:ea:07:e8:b9:c0:db:3e:eb:15:aa:52:75:dc:
d4:51:2b:0a:7a:ad:b4:c1:ac:0a:23:7a:d2:c6:98:
71:c8:f0:c8:bc:f1:cf:57:4f:b4:1b:ae:65:79:81:
f6:9c:44:75:5d:0b:a3:ed:31:24:26:fe:49:c5:fe:
9f:fb:e3:44:c4:55:e1:a2:c8:d0:0c:e8:0f:ea:d9:
27:b4:45:09:e6:ca:9f:59:00:93:66:80:05:26:a8:
0c:13:c3:a7:58:82:9f:48:3f:5b:fd:f2:88:a5:0e:
d7:47:18:25:9c:af:46:ed:c7:2d:98:9a:f3:e7:ae:
4b:cc:c2:0a:61:c6:a7:47:d3:4d:30:bd:5f:82:18:
40:c8:4c:63:96:ac:90:28:33:c9:2b:49:d5:31:3c:
8d:78:09:ce:5b:13:20:be:db:fc:13:6d:d1:a0:e6:
35:c5:28:1b:ef:d9:bc:f3:4d:96:ce:19:3c:48:fd:
b7:fa:5d:dc:05:6c:d6:18:2f:a5:8e:c0:62:7f:d1:
e2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FA:5C:80:56:4E:0F:13:CE:EC:5D:0A:74:78:FB:65:32:99:34:68
X509v3 Authority Key Identifier:
keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:10:2b:fa:5c:6e:7d:c9:cf:7d:a0:ec:96:ad:ac:34:f1:68:
53:d6:e7:48:a7:fa:c7:6a:42:f7:55:ed:c9:9f:6e:d5:e7:45:
9e:78:cc:51:2d:d1:5f:f9:7e:e4:8e:df:f3:53:c8:71:e9:86:
6d:8b:c5:4c:a5:7d:76:97:43:af:4e:7d:41:ab:12:66:37:4f:
0b:eb:7b:52:8e:0a:4c:f8:5a:84:96:90:5a:fc:d0:7a:51:d6:
87:85:ed:88:4d:24:af:bc:36:b0:51:dc:38:40:70:68:be:3e:
7c:b2:03:2c:0e:be:42:99:b8:6f:09:de:eb:ee:28:15:2a:2d:
5e:71:86:3c:cf:36:ee:5e:43:42:77:32:9c:cb:52:c8:82:45:
15:5f:5f:7d:bc:55:ab:b2:da:97:03:09:30:a6:66:0d:28:c4:
23:4b:e7:d7:c2:10:29:4f:8d:d7:3e:d1:25:07:bd:f3:00:0f:
6c:af:04:71:94:3b:8c:64:4f:7c:af:be:e4:ef:e8:b8:93:d3:
40:73:ee:30:e4:62:21:a4:5d:51:1e:6d:a0:f0:fe:b9:2b:51:
ec:c8:24:8b:96:ef:19:b1:c6:4f:8a:30:61:98:b1:69:d2:a4:
fb:b6:63:2a:f9:83:c0:db:10:ed:f5:a2:68:a8:dc:1c:29:7b:
23:60:8e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:04:12 2026 by rpki-client