Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
File: R0kcIjvm4aqla_7G2g2pDEqFKq8.mft (raw, json)
Hash identifier: aYghFCK4gfmPOYMCVLszgr3UqxIZ+Fev7tuEEw/U1dE=
Subject key identifier: 3B:9D:0F:9F:E7:BA:78:EB:AD:22:AD:AA:08:07:C0:4C:EB:F2:0C:1A
Authority key identifier: 47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
Certificate issuer: /CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Certificate serial: 01A0F64423DA5979BB7877A72BE49BA61354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
Manifest number: 07E9
Signing time: Thu 01 Oct 2026 07:00:55 +0000
Manifest this update: Thu 01 Oct 2026 07:00:55 +0000
Manifest next update: Fri 02 Oct 2026 07:00:55 +0000
Files and hashes: 1: R0kcIjvm4aqla_7G2g2pDEqFKq8.crl (hash: 8P/V9pESz6fDxlZc9e7YBiESBxtHFBBEfrM8xU1+n7o=)
2: VHJwea6qlg5QIT6-Ch_JIm9YPm0.asa (hash: evFVcBdKILbgxDzjbVvBYpM3EaYO4EuN3h4htmJ2T3c=)
3: ZcIIkCXWrU1ZkVKldX0xLdwzSc8.roa (hash: 27mYKHLqgFruUs277AeHp13xV7NIWfc9KWFxSBTFvWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:44:23:da:59:79:bb:78:77:a7:2b:e4:9b:a6:13:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Validity
Not Before: Oct 1 07:00:55 2026 GMT
Not After : Oct 2 07:00:55 2026 GMT
Subject: CN=3b9d0f9fe7ba78ebad22adaa0807c04cebf20c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:93:4f:ff:e3:2c:d1:96:33:12:59:29:95:
28:de:2b:04:6d:9e:17:4f:0c:c4:5a:eb:98:f7:03:
a4:af:ea:41:9e:71:c3:c8:c2:e7:ec:92:4d:c5:78:
8b:23:27:97:4a:9c:e2:5e:6e:54:7d:49:9d:c6:03:
8e:c4:02:01:4e:99:3c:7e:79:33:93:23:72:42:d9:
cf:c0:70:61:4c:3e:1f:6a:db:d3:ea:72:f8:93:00:
de:2e:23:65:09:1e:dc:b9:36:59:b2:47:98:87:2c:
83:40:68:55:cb:95:77:4e:bd:6d:97:0b:ab:47:67:
4a:93:29:27:19:04:a8:9c:df:46:24:63:4a:20:c1:
65:e7:a9:a0:0c:7c:27:49:eb:58:f7:c9:d4:ac:21:
e4:9c:72:03:a1:2c:40:c6:fa:91:f9:d9:69:99:49:
b9:38:d0:0f:c5:28:70:34:44:ea:44:64:7a:bc:aa:
12:55:13:a6:5f:06:63:ab:3a:5f:74:fc:51:d1:2f:
ba:87:42:74:e0:c5:ec:84:38:31:34:8e:d9:04:04:
cf:4f:31:3b:bf:e3:00:44:5e:09:f9:57:35:21:1f:
bd:ef:b1:9c:84:6f:0e:bf:ea:df:1d:88:9f:b3:59:
61:e5:60:c3:9c:d7:07:da:cd:f0:0b:f9:b4:74:2e:
70:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9D:0F:9F:E7:BA:78:EB:AD:22:AD:AA:08:07:C0:4C:EB:F2:0C:1A
X509v3 Authority Key Identifier:
keyid:47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:42:f1:bb:2b:d3:2f:92:54:32:5e:09:02:a2:13:fa:41:e2:
4e:30:a5:d6:d6:ea:57:26:63:6e:8b:d7:18:72:31:34:ab:84:
36:78:5e:23:8d:f5:14:3b:ad:d5:1d:2b:23:8c:1f:76:8b:67:
d1:84:17:48:e4:e5:83:23:38:20:a1:22:29:3f:3d:6b:23:fc:
5d:54:93:b1:23:09:59:98:eb:b2:60:ef:41:14:12:ee:9c:2d:
5c:90:1a:84:3e:cb:8a:47:87:83:e3:95:76:96:59:c5:fb:de:
93:7a:e9:31:ca:53:9a:41:4c:67:a9:21:11:8e:31:3d:9c:13:
59:4c:b9:86:b0:0e:cb:ce:d8:3d:cb:24:93:0f:36:31:1e:fc:
b4:13:d2:8e:85:64:2e:c1:d6:95:b7:4e:a4:30:7f:69:d3:6c:
3f:e1:63:51:32:26:ab:c3:a0:83:e0:b5:19:b8:2f:a9:e6:39:
df:cf:43:35:37:2d:6a:b8:41:a0:c5:8e:e7:2c:ba:75:50:05:
29:ee:9f:8d:07:22:1c:60:62:39:49:cd:27:31:37:92:4e:af:
9a:cb:d3:eb:c6:9d:70:5d:bf:fa:a2:5a:7f:4f:62:27:9b:b6:
5c:9f:22:eb:f1:a9:7c:ee:74:5b:32:35:58:3c:a0:93:1f:be:
eb:51:96:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:04:23 2026 by rpki-client