Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
File: 9B_-fSl-5OHU0jM1qatKAIjAJdc.mft (raw, json)
Hash identifier: gZgudlxd3FQxRff4P8A4kWCCHvL6ltSwawmKYMsDS9w=
Subject key identifier: 54:10:77:4B:C2:AD:F8:D0:DD:71:2D:0A:19:51:6A:7F:85:BB:17:CE
Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Certificate serial: 01A0D426220FDECDC6A7D5099A3717768F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
Manifest number: 1042
Signing time: Thu 24 Sep 2026 16:01:03 +0000
Manifest this update: Thu 24 Sep 2026 16:01:03 +0000
Manifest next update: Fri 25 Sep 2026 16:01:03 +0000
Files and hashes: 1: 9B_-fSl-5OHU0jM1qatKAIjAJdc.crl (hash: n03resY52IqZJsogAfZA+ib1XGsy38y1UPqnRY4wz/8=)
2: dJqD19E6mk5uleQws4cS1vrhxjc.roa (hash: B93wH1HCjYPCakWp9euufDKeozgy2SCaB0olYXjrVtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:22:0f:de:cd:c6:a7:d5:09:9a:37:17:76:8f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Validity
Not Before: Sep 24 16:01:03 2026 GMT
Not After : Sep 25 16:01:03 2026 GMT
Subject: CN=5410774bc2adf8d0dd712d0a19516a7f85bb17ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:86:fb:52:80:46:15:64:07:79:43:ec:93:
62:94:86:74:e5:15:56:43:72:d3:ec:c3:38:8d:6d:
f3:d7:60:c8:0b:ea:23:28:68:13:e8:56:b1:1c:67:
3d:99:10:68:5f:5f:bc:5a:f6:1f:73:4d:fe:04:9a:
73:68:ff:a5:8e:f7:6c:22:8c:30:82:84:e8:95:34:
50:4f:d1:bb:19:dc:8b:8b:b0:04:9e:9d:6a:61:19:
90:02:d9:36:b4:0c:41:cc:d1:2d:b6:fc:6d:75:d3:
9d:e4:2f:3c:a5:4c:48:50:82:ce:f7:65:8c:bd:77:
cc:fd:49:85:d5:30:f2:68:90:fc:0f:af:06:94:7a:
57:25:6a:c1:a3:b8:be:d4:6e:5f:03:15:ca:fd:d0:
72:e2:34:19:f3:a9:5b:8f:48:5b:6e:b1:ad:7b:ba:
93:dd:92:68:03:2b:74:50:19:a7:27:f0:12:df:74:
58:92:08:51:32:3a:b1:31:e0:2e:8b:0e:76:46:9e:
4d:5b:e0:b8:bd:c8:a7:b7:ad:47:48:a6:05:64:e2:
68:ed:da:06:e7:d8:ce:2e:e3:73:f6:fc:cd:b0:95:
92:a0:36:38:08:74:82:84:18:91:b8:bd:12:8e:af:
ba:c3:55:81:5d:35:9b:a4:94:84:e0:0e:ec:97:65:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:10:77:4B:C2:AD:F8:D0:DD:71:2D:0A:19:51:6A:7F:85:BB:17:CE
X509v3 Authority Key Identifier:
keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d9:4f:1a:30:fa:c4:8c:26:71:4e:3c:09:ee:c9:ba:db:5e:
be:d2:3b:8c:32:5e:96:38:22:e1:d5:41:89:15:8c:f3:34:11:
31:6d:ed:cd:ee:70:d0:c4:60:4c:74:3a:13:12:8a:74:44:1a:
08:1b:37:94:79:73:94:a2:00:5d:03:c6:0c:9d:74:15:56:1d:
a8:8d:84:01:25:c2:f5:fc:71:86:a0:5a:cb:ca:e6:70:ea:6b:
7b:26:65:a5:70:66:b8:34:ba:74:b1:4c:a1:cb:b0:9c:ef:e0:
7a:6d:d7:47:ae:e3:10:7f:c4:a6:78:52:84:d3:0e:71:ee:71:
cc:ca:4a:52:2c:d8:fe:88:b1:2d:9d:dd:6b:90:f6:7e:f4:01:
6c:42:0c:bc:a7:0f:0c:20:96:15:80:a0:12:cb:3d:4a:25:17:
73:88:c4:f2:f3:af:5c:27:aa:be:49:4a:01:01:0d:e7:52:f4:
25:55:b7:a1:3d:02:91:5f:53:04:51:44:35:16:54:35:39:f5:
c8:8d:80:6c:2b:d8:c5:7f:e6:75:14:45:d7:0d:09:0c:b1:62:
5c:8d:d3:f9:10:75:51:18:bc:7c:91:82:5e:6f:a2:ad:c1:2e:
2c:66:55:cf:15:f1:fa:f4:25:18:b8:d1:cd:79:f6:50:8d:0b:
7a:63:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:54:45 2026 by rpki-client