Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File: 9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier: /Qctexsr7x+1DtEbTgMOnJcUj0IQWDO48HzRMi3I2P8=
Subject key identifier: 42:8A:2B:D6:1A:1A:2D:82:62:27:C2:31:8B:18:2A:EB:B0:03:91:D0
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer: /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial: 01A0D34A5402642CAC004209A0314E0E576C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number: 0B8D
Signing time: Thu 24 Sep 2026 12:00:58 +0000
Manifest this update: Thu 24 Sep 2026 12:00:58 +0000
Manifest next update: Fri 25 Sep 2026 12:00:58 +0000
Files and hashes: 1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: +HWQ1MdPsmc8DhhsYdzEUj4E0hU1w7OibMpYQuD2Z9I=)
2: DYss90R4HIuww1mW6-7xbEjXb4M.roa (hash: UMw2Vyr1TU50SIq5R3Ka5Y9X/0d1jW9A+sz46TwWuew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:54:02:64:2c:ac:00:42:09:a0:31:4e:0e:57:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Validity
Not Before: Sep 24 12:00:58 2026 GMT
Not After : Sep 25 12:00:58 2026 GMT
Subject: CN=428a2bd61a1a2d826227c2318b182aebb00391d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:38:2d:1b:40:a2:7b:94:12:bd:76:7f:4b:
9d:52:08:44:df:b8:af:c7:c8:e0:3f:76:5c:b8:f4:
0b:47:ca:ff:40:97:39:4b:c7:15:df:74:90:9e:8d:
a3:bd:22:84:6e:80:00:e8:e1:c3:80:32:9b:2e:ca:
4a:05:21:20:9f:b7:72:43:fd:ce:33:db:f0:4d:b2:
e3:27:fb:6d:54:a3:37:f9:76:3d:43:e2:0d:b9:06:
73:d4:e0:82:0e:b4:d5:2f:a2:f2:e2:69:ce:81:b3:
12:eb:c3:2b:2c:22:e5:aa:fd:04:47:23:7d:6e:cb:
2e:81:7d:00:d2:96:b8:90:b3:2a:3b:be:4a:4b:03:
e8:be:c5:d9:c9:de:43:9b:87:4c:88:dd:77:0c:8f:
7f:da:d3:e4:3c:85:3a:b4:a9:95:d5:b7:d0:7b:d8:
72:94:98:e1:03:8c:34:16:87:84:cf:e8:45:6f:8b:
c2:50:76:c1:70:9a:24:8e:f6:9e:98:6b:9d:25:33:
06:5d:11:6b:75:fb:f4:b6:2a:c8:61:63:92:c4:3e:
3f:58:a5:06:a7:33:05:0b:bf:b1:66:b7:d6:7d:71:
28:88:4f:00:bc:d3:82:69:88:66:a1:82:29:7b:54:
3e:f2:28:b9:b7:17:dc:fa:6c:50:d0:05:d9:3a:66:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8A:2B:D6:1A:1A:2D:82:62:27:C2:31:8B:18:2A:EB:B0:03:91:D0
X509v3 Authority Key Identifier:
keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:75:71:14:26:28:18:92:2a:53:3d:7d:17:03:6b:d9:60:2c:
a9:77:74:20:e2:8d:47:8a:74:72:f4:c7:31:a6:eb:a1:e4:37:
ce:88:e8:38:91:2e:5e:02:e2:0f:6a:dd:ab:2a:0e:d4:65:13:
8b:26:36:f5:a5:48:8f:8c:fa:aa:ab:d3:cd:3b:4d:95:57:32:
04:04:17:62:03:5f:58:48:15:80:ed:a5:ce:dd:88:37:64:d5:
f1:ec:c5:ae:1d:83:e5:75:7a:bf:d5:fb:c9:cb:b3:a9:51:59:
08:c9:34:0a:c7:0c:87:29:62:6a:3a:4f:8a:a1:2a:21:f1:a1:
01:8a:03:0f:a5:51:65:1e:5f:ab:2c:c5:d8:af:8a:cf:1c:02:
20:85:ba:4c:00:2b:9d:30:4e:79:9d:a8:5d:64:c3:9d:c3:85:
f5:12:eb:b7:db:01:80:29:1e:a9:1b:0d:97:03:21:a9:65:7a:
1a:43:6c:56:41:b9:04:2f:29:3c:e5:6c:21:ec:2d:f3:75:4c:
c9:8b:7c:3c:58:84:4e:68:f9:33:9e:a0:6e:7a:ca:e0:c4:aa:
5a:3c:bb:c3:d6:13:3f:5c:e3:71:0f:b7:0f:40:3f:94:d3:b0:
87:3f:f1:3e:e5:23:b0:4e:f6:cb:5e:5f:d9:59:81:7f:ec:77:
2d:e5:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:37:51 2026 by rpki-client