Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: DELpgH1s5b0GCWjNlzn18bMvZ1EOmtMk+09dhN0XJqM=
Subject key identifier: 3B:64:1C:14:2A:9D:14:49:76:91:83:8F:53:08:6F:E8:F5:A7:0F:9F
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 01A0CAEBF17976CE3F9F57F47DB9180FF0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 1A72
Signing time: Tue 22 Sep 2026 21:00:55 +0000
Manifest this update: Tue 22 Sep 2026 21:00:55 +0000
Manifest next update: Wed 23 Sep 2026 21:00:55 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: Nm7kmfkNt9s1c93a2hRXWKl4BAc3CMZ5cl3p1qZ/mtU=)
2: AIfGsSPAIhGTAhcJMT-43FCuJiw.roa (hash: Pu5NP+j1KvnCv1UXGo8u9ACIZ/QzV4gjTT63qqxTR/Y=)
3: E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa (hash: l/y3pPw5aQeELMhZp5go4vxGzvDlJdC51uABU1/1c6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:f1:79:76:ce:3f:9f:57:f4:7d:b9:18:0f:f0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Sep 22 21:00:55 2026 GMT
Not After : Sep 23 21:00:55 2026 GMT
Subject: CN=3b641c142a9d14497691838f53086fe8f5a70f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:0c:ca:e7:b4:92:7d:78:56:1f:76:2b:b7:
fa:90:6d:48:88:99:b7:3c:be:1b:7c:3e:96:20:a6:
75:a5:9d:5c:10:82:a3:0e:c6:2f:43:f0:15:b3:28:
bd:a1:8d:4d:80:9e:70:87:7d:64:e0:ad:18:8a:9e:
d6:28:c2:f8:d4:3b:31:23:4d:8a:f3:4d:33:97:1c:
dd:f0:d3:3e:e4:f7:aa:ac:db:39:ad:1b:a9:d0:0e:
62:ae:8b:7a:07:d3:bf:8e:c6:43:92:a5:da:64:12:
a9:9b:c1:65:bd:cf:a7:28:9d:4e:ee:cd:9b:90:09:
5a:1f:b8:01:dc:20:96:37:4f:95:c1:b7:ba:b4:0f:
a9:40:f5:fd:95:95:b0:f3:1f:34:96:16:dd:38:3c:
53:09:77:c5:2b:da:20:a4:fd:16:62:f9:10:23:56:
ad:fa:2a:9e:93:4a:ce:70:9a:a8:1f:5b:a6:0f:5b:
b2:ab:87:2b:a0:ae:85:fc:a7:41:1e:9b:6a:d4:36:
05:e8:db:71:be:be:f3:42:0a:62:b1:7c:3b:1f:63:
3a:db:e8:40:c6:9a:ce:e5:6b:65:e2:d7:c7:e3:56:
8f:9e:61:79:3d:09:fe:02:5d:25:0b:f5:34:3f:f9:
d4:1f:2e:5b:2f:03:c6:01:c2:6b:f1:92:eb:c9:24:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:1C:14:2A:9D:14:49:76:91:83:8F:53:08:6F:E8:F5:A7:0F:9F
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8f:62:58:9f:f8:ba:1f:97:8c:d0:7a:ef:54:b5:12:a7:cf:
71:f4:b4:da:ee:92:5d:47:79:22:0c:c4:a2:88:fe:7b:ad:89:
5f:6d:d3:c1:0c:b0:ab:64:8d:91:de:4f:71:2d:74:47:13:e8:
9d:2e:79:ab:59:8b:36:df:42:60:cc:39:bf:10:dc:25:fb:12:
1a:ee:5d:d1:4c:f5:29:8a:72:fe:5b:f1:34:52:07:f3:92:5b:
13:e9:fd:87:da:13:44:84:b2:c7:44:1b:29:1d:24:4b:3c:a9:
9f:2e:9d:e3:da:8a:13:40:47:44:c8:22:b3:f7:76:a8:e7:0d:
5a:ab:ad:2e:79:11:bc:94:57:86:6f:a8:4f:87:11:6c:2a:cb:
3b:1b:39:03:bb:1b:14:f2:a9:c0:bd:2f:8c:40:37:21:22:13:
82:81:57:03:51:c8:a1:f7:45:34:29:46:87:60:fb:82:74:fa:
85:49:cd:57:7d:0d:3e:01:b0:b7:d4:7e:25:e3:18:e6:38:15:
c7:99:6b:27:17:5c:24:6b:44:b0:f5:d4:75:3c:dc:6f:61:22:
b9:45:08:71:0a:9c:de:15:47:be:ad:86:de:f4:dd:5a:30:55:
1b:c2:4c:7c:f5:e9:96:8a:64:35:2e:a4:94:bd:ab:37:0b:61:
24:be:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:16 2026 by rpki-client