Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json)
Hash identifier: KkzVeSixy6JMFz9zKiIjAIM12K8Dgx3nWO25DPPN/C0=
Subject key identifier: 05:E1:D9:F7:B7:F0:0D:5F:4B:D9:82:4B:6A:9B:A1:69:A1:46:54:E1
Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Certificate serial: 01A1D9B83145B39B87C0E7AEFC1FB628B942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
Manifest number: 1A88
Signing time: Sat 14 Nov 2026 11:01:29 +0000
Manifest this update: Sat 14 Nov 2026 11:01:29 +0000
Manifest next update: Sun 15 Nov 2026 11:01:29 +0000
Files and hashes: 1: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: NdnShc63SqJiFYk+Q9ncTLfRXT9YeMlLFZfO2pLqq4A=)
2: NCKHSq1L93RSNmWsVPen2Pp7itw.roa (hash: E1xwyNLOyD17eDTlIsUyX0bH+yVNi172nC4ro2vpPiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:b8:31:45:b3:9b:87:c0:e7:ae:fc:1f:b6:28:b9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Validity
Not Before: Nov 14 11:01:29 2026 GMT
Not After : Nov 15 11:01:29 2026 GMT
Subject: CN=05e1d9f7b7f00d5f4bd9824b6a9ba169a14654e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:2f:58:6b:1e:ad:d9:09:7a:b3:b7:cf:14:
ec:3c:bf:a2:fb:f0:77:3f:12:a7:4f:59:c9:79:6b:
6c:36:cd:f7:e0:d8:e5:28:61:3a:63:05:d4:a2:ef:
11:67:80:46:cd:01:54:ac:6d:84:80:a2:63:4d:83:
b6:61:aa:99:ea:01:c8:fd:d8:69:21:75:a2:f9:65:
08:1e:15:2f:a9:0b:42:93:84:2c:0e:ca:e2:e4:d8:
f3:d4:dc:9b:88:3d:0b:45:6e:f1:3b:da:43:3f:13:
cb:35:50:2f:1d:1b:a5:57:1c:ba:05:c3:13:2f:9a:
05:3a:c7:de:c9:5e:e2:b5:de:ed:ba:7a:9f:ea:e9:
87:63:12:0f:64:4c:13:93:86:c9:8b:db:ab:14:b1:
e0:f5:24:52:ac:13:83:da:59:49:d5:85:c7:54:96:
4e:2a:de:e4:89:14:ab:54:d1:08:63:3f:97:0b:5b:
9e:ca:0b:ea:ad:e2:6b:86:e3:09:18:ac:ac:30:be:
f2:97:51:26:9e:a6:8a:cf:51:3a:96:27:97:f4:b1:
cc:40:c5:64:00:da:37:b3:ad:3f:90:2d:10:0f:d9:
fe:af:2d:b4:e8:c0:fc:b5:24:d7:6f:df:4c:5e:92:
d5:2a:a1:04:15:65:db:15:db:0a:5b:06:e1:00:c4:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E1:D9:F7:B7:F0:0D:5F:4B:D9:82:4B:6A:9B:A1:69:A1:46:54:E1
X509v3 Authority Key Identifier:
keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d4:46:33:1e:01:74:be:29:58:b5:e2:6d:4e:cd:da:43:f5:
d5:84:45:17:33:d5:14:33:ef:ea:c3:60:a9:c3:fe:ea:7d:d1:
23:c0:de:14:61:65:9d:51:eb:ae:72:78:4b:70:ff:84:b8:bf:
b2:f9:06:ee:18:ed:9a:75:76:2d:4d:f9:cb:23:20:9f:c5:44:
8d:b6:67:d7:ae:10:87:cf:1a:47:ad:2b:a9:e4:7a:f2:2a:3c:
48:db:83:85:76:e7:d1:9b:2e:2d:54:71:95:db:d8:86:83:cc:
25:fe:63:b4:69:d0:01:dc:54:79:b1:37:62:08:2a:48:9a:e7:
6b:ee:19:83:1e:f4:41:58:1b:82:cf:4b:b5:12:5b:77:0f:f8:
68:b5:36:b2:58:62:e7:ff:c9:03:fb:93:82:25:a1:85:02:64:
15:c7:be:25:95:a7:29:8c:e7:18:98:61:76:bc:f6:3f:7e:5d:
10:4e:f6:0c:f8:94:0d:00:ad:d4:d4:5d:a7:07:81:e0:ea:23:
94:5c:02:c2:49:6c:cf:d2:67:cd:3e:cb:5e:d0:70:e9:da:00:
54:f0:1b:6d:67:bd:2d:1e:dc:40:be:e6:c8:22:ba:c9:42:75:
98:f6:e1:aa:87:bf:1b:bd:f3:b0:ed:8e:55:b7:10:80:44:a5:
04:50:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:45:36 2026 by rpki-client