Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier: k+m0oRNz3BLx0TQ3NdH7r3n3SfnRcFmkrCy9nfYyjLs=
Subject key identifier: 8B:D1:28:6D:97:7A:94:8D:0A:C7:60:B6:8E:6B:00:94:35:73:1D:E4
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 01A0CE5A4507FD8644EDF2518736879179C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number: 1A98
Signing time: Wed 23 Sep 2026 13:00:17 +0000
Manifest this update: Wed 23 Sep 2026 13:00:17 +0000
Manifest next update: Thu 24 Sep 2026 13:00:17 +0000
Files and hashes: 1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: O8M5J2QREK19xM/fiwTBZVYHW7dXpO2UW5BHsvNTNM4=)
2: C3Hj7ROPeIpwRmBzpRFfxI_qvb0.roa (hash: vveg8RifsnaImkmfopb5PhQkcmujHs/iYhIU7WeY+b0=)
3: GP_DUV0faWuK0jHjXr1g_eRLzwA.roa (hash: IUdACoDW0rE/n6kZcocEWVzhGKES4IEE0jvO7MJrLYo=)
4: P-rRYVXCTixpE8G0uFs42zL11uM.roa (hash: gGvo9uFElsBmxmc2f57ugvUF8fRFbGjjhlaZ3XTHPxM=)
5: TZb0pwqKAULgiO7MxUXFvu2eCDY.roa (hash: xx3QLAhALsGor/waOfuSlLQuXwnX4zFtt11tExzIAAg=)
6: pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa (hash: fiAhIReHkKJDspHClaY6l1S5vNnjpZ4eQPqh1G/RGnQ=)
7: qhW018nLYKkbveq_JNyETo7B_Ow.roa (hash: 03M+6gjp2KbZhQBCv2SYcsFpAN+DiQPSPmjd2q66jUU=)
8: rxWTpB1cBDAasdpeCd_eBF1w0wk.roa (hash: aF9Mb+BB8Tjqy6FAH1rJtXHNbhARNFUNI1crgBVxf6Y=)
9: ys3yCdHJ9a3MjZY25yxTfQSZph0.roa (hash: KFDraXJKQVMV1BXHcMi/qwrvrU0UgboWj1cSJoeNNfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:45:07:fd:86:44:ed:f2:51:87:36:87:91:79:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Sep 23 13:00:17 2026 GMT
Not After : Sep 24 13:00:17 2026 GMT
Subject: CN=8bd1286d977a948d0ac760b68e6b009435731de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:2c:b4:4e:53:7e:50:ac:60:69:4d:e1:62:
29:16:26:53:5f:80:8c:1d:41:af:84:c1:c5:9c:73:
bc:eb:02:b0:64:18:06:a1:21:41:f2:55:78:1f:d6:
a0:ef:76:1a:af:98:d0:fb:11:28:ba:44:8d:3a:86:
ef:61:43:4e:7b:ba:79:77:4e:2f:7b:a5:48:db:3e:
59:2e:86:22:8a:af:74:73:43:d9:b9:75:3f:74:61:
ac:f7:f0:11:be:55:da:17:f9:88:5c:7f:f0:f8:0d:
f2:e7:be:49:54:b8:34:30:a9:9d:3c:06:c8:b3:4c:
53:29:cb:85:b3:94:5e:87:6f:03:30:ea:41:c8:69:
68:e8:b0:e8:58:6e:45:5d:64:8b:c2:bb:5f:ce:f7:
e2:46:7d:93:f0:d6:3a:96:76:47:b1:77:aa:44:fc:
eb:e7:86:27:01:20:05:f9:6e:c0:8f:6f:8e:1d:76:
a7:65:7d:17:cf:3d:0a:83:78:8b:86:e7:10:80:c4:
f5:05:56:bd:90:9c:86:aa:27:ef:b2:18:9e:01:74:
e0:64:50:12:08:39:73:ce:17:aa:e3:9b:b6:db:1b:
7e:e7:5d:e7:06:a5:02:d5:46:7c:44:09:1e:3d:e0:
42:9b:e3:aa:ff:50:00:fb:a1:d9:9e:63:a5:c6:08:
03:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D1:28:6D:97:7A:94:8D:0A:C7:60:B6:8E:6B:00:94:35:73:1D:E4
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6c:fa:8f:48:4c:28:8e:ec:4e:fd:eb:5a:02:88:9b:f3:7f:
34:7e:ca:87:2a:5b:67:b7:1d:dc:52:4a:be:9f:e9:6a:04:8e:
48:75:25:c4:53:5a:69:3c:47:66:31:7b:c0:91:43:df:39:09:
3f:a3:4b:52:9c:aa:d0:df:e8:c3:34:7f:0d:c1:46:7d:65:67:
7c:35:02:30:35:22:f9:7d:31:f8:03:ee:ac:ac:94:ee:58:bc:
99:d1:d3:3e:e3:7f:43:e9:9d:83:ee:c8:7b:22:fa:de:03:fa:
df:37:27:f4:74:ee:d1:5b:06:20:d2:27:d2:01:75:83:d5:ce:
27:be:7b:3c:2e:6c:b3:9f:01:95:28:f2:02:e6:f5:9c:4a:99:
33:34:f2:6a:2e:2b:d2:96:63:5b:35:88:7e:49:fb:da:dd:6c:
c7:fe:10:45:d0:c4:83:b0:3f:4b:c6:55:60:d4:37:ce:a9:22:
79:ab:08:0c:cd:3a:ad:e9:75:3c:33:08:5d:a0:c9:ab:e7:dc:
21:f7:59:99:2c:46:6e:0d:7d:0b:4d:ff:8f:01:d6:e0:3c:f0:
70:65:f7:df:b8:4a:df:57:a4:82:8c:8f:21:9c:e2:00:43:7d:
7b:52:96:75:4b:57:d3:0e:17:fe:5f:7a:cd:2d:ed:e9:5e:01:
b9:04:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:14:43 2026 by rpki-client