Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier: LJUJhBb+MJwrHjVDpBirC6BaA15x1A+KnmM5iTW4AN4=
Subject key identifier: B7:35:5E:8C:2B:00:7B:E7:6D:8D:C3:25:85:6A:30:70:AB:74:F1:6C
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 01A0DFF3A830D0B1E68AF9C1311878F5CBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number: 13EC
Signing time: Sat 26 Sep 2026 23:01:22 +0000
Manifest this update: Sat 26 Sep 2026 23:01:22 +0000
Manifest next update: Sun 27 Sep 2026 23:01:22 +0000
Files and hashes: 1: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: qnztn4TF8PZ2pqZhFbdfOxCU4L3GsGjMPJ8xGvVFLi0=)
2: orL4sli2jaSeBff9va-I5ykDyO4.roa (hash: X71IZvpi5dNFJsBMRCrrWRzDFuE1IqQEepJ3uFR5Q4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:a8:30:d0:b1:e6:8a:f9:c1:31:18:78:f5:cb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Sep 26 23:01:22 2026 GMT
Not After : Sep 27 23:01:22 2026 GMT
Subject: CN=b7355e8c2b007be76d8dc325856a3070ab74f16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:c5:37:a7:77:72:48:e1:9b:60:a6:7e:48:
5f:51:9c:ff:b5:f9:97:b7:85:f9:41:54:8f:18:41:
bf:71:e6:03:28:78:be:1c:b2:2a:c9:54:81:ae:31:
59:60:a6:84:23:c1:f9:95:6a:7b:d4:ed:ce:f3:b8:
87:42:47:f0:c2:38:5e:e2:ed:65:a0:bb:77:30:f5:
7d:15:dc:b3:ef:04:5c:31:58:e3:6e:2d:1d:34:20:
13:fc:42:51:a1:d7:7b:27:27:b1:12:c1:f7:ce:24:
74:ea:1c:a5:b5:b3:41:c9:b0:b0:1a:72:cc:8e:a5:
67:2e:1c:7d:75:65:b6:0d:26:80:2a:df:39:25:a1:
48:2f:70:53:8c:c9:b3:18:41:4d:68:fa:68:6b:88:
0c:8b:dd:a9:41:56:af:73:76:65:29:d1:c8:26:05:
2e:00:0c:de:5a:3f:9e:00:da:96:73:67:c7:ca:4e:
e5:0b:4d:b6:01:5d:6c:54:8d:01:70:f3:20:83:73:
8e:61:12:86:cb:b5:ac:28:5a:29:54:74:4b:13:c8:
10:26:65:d3:06:4e:9f:26:ed:61:d4:84:58:51:21:
3d:1e:ba:0b:c3:0c:cf:e6:a0:1a:67:39:6e:20:7c:
f4:6c:4e:c9:29:a5:c7:70:e6:89:3a:39:87:3f:61:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:35:5E:8C:2B:00:7B:E7:6D:8D:C3:25:85:6A:30:70:AB:74:F1:6C
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0b:50:18:3c:59:ee:4f:71:b1:0e:28:e2:2d:e2:41:19:c3:
5e:0a:b1:82:2b:d8:04:21:3b:97:5f:1f:d0:20:b5:31:3a:c7:
ed:00:22:88:37:51:af:cd:c3:4c:6d:d1:6a:1f:2b:97:26:14:
6a:24:96:0e:99:03:21:1c:99:66:63:d2:19:fe:1c:a8:37:ae:
02:ce:2f:33:b4:65:7d:c5:00:ad:d2:4f:fe:9e:f3:21:4f:d7:
30:14:39:8e:66:68:c7:c2:76:e4:46:e1:10:74:aa:45:06:37:
f9:a2:72:b6:ea:2d:c2:15:35:bb:76:ec:96:20:ff:9a:3c:5b:
af:40:fd:75:2f:36:a9:d5:c5:a3:1b:1d:68:d2:bc:cb:b5:f3:
be:ea:9a:e2:ee:53:0a:cf:b1:74:9a:c2:b4:12:3b:c1:da:b8:
71:16:04:ba:35:12:f2:c4:61:54:99:12:bb:1c:0a:76:33:44:
f5:39:42:92:ae:74:0a:1f:4d:d4:e0:04:24:a3:2c:9f:53:1a:
6c:1a:96:03:aa:e9:45:44:81:9a:0c:f1:86:72:2d:92:1f:79:
c9:24:22:a0:ac:2f:16:be:46:1b:7e:f3:e8:e3:f0:bd:c8:6a:
40:5d:52:e2:c2:48:bc:43:12:f0:47:f9:95:b7:f1:e0:d8:fd:
d5:d8:a9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:01:36 2026 by rpki-client