Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
File: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json)
Hash identifier: fopzlnVVe8hCKmVdQiaq22Luyn9900O3LPupfBncPF4=
Subject key identifier: 17:77:C2:DD:2C:A9:2C:59:EE:82:8F:9F:89:DA:46:2D:83:41:88:48
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01A0CCDA26BDBBEBEC70469FBFE8DD6B498E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
Manifest number: 1AAA
Signing time: Wed 23 Sep 2026 06:00:43 +0000
Manifest this update: Wed 23 Sep 2026 06:00:43 +0000
Manifest next update: Thu 24 Sep 2026 06:00:43 +0000
Files and hashes: 1: 2DdvN_iUNqmYcEBq-ZCFq6-CizQ.roa (hash: LqeaKg62lpX0ChDrc0EwkogKrlU38oKoyGWR5W51V/g=)
2: 2W6KF4ZuQXQXIE5k8cSp6i2a1Y0.roa (hash: /mZ0iG0jpONh+gyxFwCH+h9oQ3x8hw3uCrxQnXWGQLg=)
3: 2gp85iNI9hOHVMoD-AVmhaVIeZQ.roa (hash: axs71u0qY3GNU78vZgfYXYLH532ZZvavOcB1PlEaAyE=)
4: 5V_xONqzwKma1n0RRaZThBrg5gE.roa (hash: z1TwNh3QakcyBUbCZgGTjXYrrx8YDgv/xgtP0R9TjOI=)
5: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: ohtiRIR4jMRnuWZjcbJB82p6mQj+1zHswPUWTy6cP64=)
6: Sr8taJwNmM6IUIh68pFCremKsP0.roa (hash: 8hNtlSLs+hgRIJnDDfJh2MIcy6zUGifsMLAL3xiKJ1I=)
7: _pFB7SDY-FI1OrYOm8GoyDrSJa4.roa (hash: usi33JJdF8gVc80TOjRwFqGUUF+815xRnOLqabs02Mw=)
8: cJSB3QS13j7tmP3z_rxKXgO4j60.roa (hash: 9yWuPk6TuuusjVGKVizh7DPc+s1P+89Z5o314zB49FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:26:bd:bb:eb:ec:70:46:9f:bf:e8:dd:6b:49:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Sep 23 06:00:43 2026 GMT
Not After : Sep 24 06:00:43 2026 GMT
Subject: CN=1777c2dd2ca92c59ee828f9f89da462d83418848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:64:54:0b:07:8d:41:1c:9a:48:99:f9:06:
ad:c7:68:46:36:36:b6:fb:1a:b8:41:f9:a2:08:1f:
ca:57:96:67:e5:b4:68:70:a2:0e:18:01:db:74:e7:
a3:2e:f2:81:4d:7b:13:ec:01:5b:38:08:46:14:8c:
5c:7e:12:0c:1e:51:a7:ec:76:7d:70:4a:17:29:a5:
58:2a:ac:25:25:17:f4:d0:2b:8a:93:d3:eb:ac:1d:
73:e2:3b:c4:06:34:7d:77:56:30:65:fb:43:f4:24:
b8:a1:60:54:47:30:ab:24:5a:bb:a1:8f:fc:2b:02:
85:36:d0:9b:5b:27:e1:80:3d:38:5d:2a:fb:b8:3d:
fc:de:b7:69:3a:83:53:bf:f2:8d:0b:50:9f:80:dc:
f4:ae:a9:13:a9:e3:96:aa:32:6f:d9:90:b9:03:e7:
03:19:67:a7:61:05:37:fc:7b:0d:26:ab:7a:63:c7:
79:df:2c:07:16:df:5b:e3:a5:35:ca:83:f0:a8:2a:
e5:fd:38:2a:7d:47:f2:78:d0:9c:32:04:8b:90:ec:
de:a6:b4:6a:d5:a7:e9:63:ef:77:61:5f:9c:c1:b3:
9b:88:07:2a:14:10:a5:a5:e5:43:8a:bf:98:b1:86:
24:b9:82:94:44:d7:c5:11:03:e6:5c:66:c4:de:ff:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:77:C2:DD:2C:A9:2C:59:EE:82:8F:9F:89:DA:46:2D:83:41:88:48
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ae:44:78:0f:5a:7b:74:99:b1:e0:dd:a3:36:03:14:24:f9:
55:17:60:34:15:52:86:fe:69:0a:e9:aa:83:e4:02:47:17:92:
2e:36:5a:63:b0:4a:63:8c:84:e5:61:37:36:44:95:25:a7:a3:
05:ff:2c:d7:97:e5:ba:ae:a7:61:d8:5e:2e:3f:6b:7c:f5:3c:
ea:7f:2b:7b:8a:6d:09:d6:5e:27:51:29:47:f5:10:dd:0a:03:
7f:83:33:53:70:3a:b9:87:d0:e6:b3:d9:2b:70:73:61:f8:09:
80:fe:e0:de:7f:4b:71:63:a4:1f:25:78:b1:9d:7f:aa:38:93:
53:d7:65:51:e6:3e:94:d4:69:d3:3e:62:36:f0:60:11:8d:b1:
3e:d5:25:53:7f:13:5a:8a:d5:9b:f9:e2:e6:c9:9e:d6:1d:05:
59:80:00:ae:01:b6:d9:1f:d3:cb:26:93:f2:bf:f4:fa:d0:71:
dd:56:ca:36:9f:ab:4b:df:9a:92:11:5a:f7:d9:9f:0f:bf:b1:
03:b6:0e:88:c9:e6:06:64:a0:6a:e8:2b:a1:a1:d9:c0:b7:ac:
77:98:b8:c4:b6:4f:1b:9d:02:5f:ad:48:41:26:8e:6f:e1:a5:
c2:ba:7e:c1:ef:91:ca:8e:4c:47:8a:2b:16:59:11:c4:b9:66:
f7:88:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:50:52 2026 by rpki-client