Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: ZdL8qGjfmJv43h9TUVzoCXHxE4YMnJms93a11E4rWxw=
Subject key identifier: 5C:CE:68:76:76:59:CD:D9:98:2B:FC:3A:73:6E:13:48:DD:5A:69:79
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 01A0CF6D5B0EED7253AA94F8D72AE2087EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0F3C
Signing time: Wed 23 Sep 2026 18:00:45 +0000
Manifest this update: Wed 23 Sep 2026 18:00:45 +0000
Manifest next update: Thu 24 Sep 2026 18:00:45 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: YHimDDZ1NjNS8FtVyth2qE2vW7lkk5tIILctt33W5g4=)
2: xhDUoIsJaJCqOA6VTkyeMee_Z9s.roa (hash: bDCv1HCZJO4EbMKAw0lf46zS80bqNn1qKkmrw6hFSH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:5b:0e:ed:72:53:aa:94:f8:d7:2a:e2:08:7e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Sep 23 18:00:45 2026 GMT
Not After : Sep 24 18:00:45 2026 GMT
Subject: CN=5cce68767659cdd9982bfc3a736e1348dd5a6979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:fe:bf:74:df:f3:5d:e2:50:ea:34:74:f7:
ee:31:c2:89:f6:3a:ab:a7:73:ac:6e:83:fc:01:ed:
c5:7a:66:e5:ba:0b:44:42:44:07:01:f9:f4:22:40:
ef:62:fb:31:49:55:c5:8d:29:a8:da:71:a4:0c:b5:
01:73:37:07:82:36:b7:c1:65:95:d3:de:f1:10:8f:
fb:f6:f3:a3:8f:60:3b:93:b1:38:f3:43:c2:48:ba:
c3:2b:2d:e0:60:7e:73:a0:37:38:0c:6e:f5:1d:92:
64:1f:4b:ff:1d:23:43:58:fa:91:7f:9f:c7:b3:96:
c2:2e:a0:27:0b:7a:69:ff:08:a2:7f:37:a2:f6:8e:
9d:7d:d4:c4:f6:06:cd:22:18:c2:c7:ce:d0:03:d6:
99:f5:b1:26:3d:b3:f8:5a:a1:93:19:f6:c3:ba:66:
85:c5:68:0f:7e:c4:a5:75:3c:01:45:3f:6e:d1:86:
83:d4:4e:d6:42:43:f0:e7:fc:53:08:1e:20:ad:7b:
f0:a7:52:df:5e:75:73:2d:a4:f5:5f:e5:1b:71:c1:
d2:4e:8c:5a:f2:e8:2a:a7:46:55:38:10:e7:cd:3b:
94:92:0e:85:41:bf:a3:26:81:7d:1c:30:8e:44:50:
93:d3:6d:f0:06:f7:d2:9a:a3:86:4a:23:b1:d2:96:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CE:68:76:76:59:CD:D9:98:2B:FC:3A:73:6E:13:48:DD:5A:69:79
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:25:b4:e6:14:09:5c:83:f8:22:df:89:30:6e:67:c7:c8:87:
ba:c2:9c:dc:bb:e4:af:49:51:82:e9:6d:31:95:8a:87:46:6c:
4c:fc:65:18:30:2a:e0:fe:c9:e1:88:c1:1a:da:35:51:d5:d4:
02:59:65:25:2e:b1:ae:90:31:c5:c2:13:b1:02:a7:99:aa:31:
e2:cc:7a:fb:7b:cd:82:a8:9c:72:29:00:12:3e:a1:bf:ef:b8:
b5:83:46:26:e5:79:b2:86:3a:e4:98:66:2f:d3:2c:40:bb:8e:
34:41:63:b3:42:87:87:92:75:c6:d7:c3:1b:88:d3:14:e3:30:
a5:28:8d:70:83:9f:27:5b:d1:da:65:44:b1:c7:46:35:99:4b:
64:01:16:67:58:14:38:7a:64:f2:b5:8e:1a:cd:a7:a5:6f:3e:
8e:8f:a7:0f:a7:e2:b9:80:39:6a:01:32:de:81:5a:f5:f5:1a:
47:ac:79:34:06:5a:6e:f1:a1:dd:0d:5a:42:c3:b4:9a:a2:0f:
0f:f9:b2:f8:80:e2:02:31:0f:14:44:36:47:2a:a3:35:ae:6a:
d8:e0:0c:3b:19:40:0b:79:65:45:3c:94:9a:13:8a:42:84:87:
78:d1:bc:cb:67:3d:bd:20:3b:36:b6:4e:d9:01:7a:ee:11:7f:
3b:54:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:42:25 2026 by rpki-client