Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
File: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json)
Hash identifier: 4vYxnNRsdakBZuI5JZ9uJppZLAiGOOmsvJaR1KnqAdE=
Subject key identifier: B0:29:63:D5:C0:27:B1:E1:FA:B4:D7:68:2E:6D:02:9D:74:1C:A8:13
Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
Certificate issuer: /CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Certificate serial: 01A0D5DE4BD96F4EF04A7986F0A43EE20557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
Manifest number: 0686
Signing time: Fri 25 Sep 2026 00:01:50 +0000
Manifest this update: Fri 25 Sep 2026 00:01:50 +0000
Manifest next update: Sat 26 Sep 2026 00:01:50 +0000
Files and hashes: 1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: 5cIr+afYgNI2S7WAmkj3cYrLYLaL3twXsz4t35UznBc=)
2: uNoepfaXDI1VoCnimpxHCf9Ihpc.roa (hash: Y1lvrGMwjV5DGLBf//Ugh3tArJ+z6zA+0q1mFnD1D78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:4b:d9:6f:4e:f0:4a:79:86:f0:a4:3e:e2:05:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Validity
Not Before: Sep 25 00:01:50 2026 GMT
Not After : Sep 26 00:01:50 2026 GMT
Subject: CN=b02963d5c027b1e1fab4d7682e6d029d741ca813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:cb:f6:5a:0c:01:8f:af:52:7b:47:32:5a:
2d:77:ab:76:ab:8a:79:d2:24:a4:2b:13:81:26:e6:
24:5c:c1:39:d9:bf:3d:f1:c5:ba:19:16:1f:2a:29:
43:67:03:56:c4:d6:5e:ec:e1:65:54:a4:33:55:55:
8f:54:d5:49:71:29:1b:06:2f:b2:90:9c:26:42:0e:
71:96:18:9f:32:58:ca:9b:d0:95:c5:20:ae:89:8c:
dc:2c:5f:c2:a8:12:ac:a3:eb:2c:81:c1:39:b2:c9:
eb:06:4c:d9:aa:d0:52:39:f3:49:c2:15:5f:bf:75:
f5:fc:cf:aa:ee:f5:fc:54:0b:b3:a0:38:66:fb:99:
1e:16:49:bc:e8:aa:1d:c1:6f:c4:7e:65:c6:c0:f8:
f1:7c:2f:0a:f9:a0:3e:7a:42:35:42:af:5b:5b:23:
99:ec:e2:f2:cd:61:bd:73:17:1f:0c:57:95:48:16:
13:23:6d:f0:89:ce:66:7d:02:64:04:f8:20:f7:36:
34:48:a5:76:4f:63:8f:c4:ad:8d:97:fa:13:95:c0:
07:70:ab:1d:b6:ef:ba:8f:ca:51:e6:8c:3d:3b:d2:
40:73:01:0c:b2:7a:f5:89:d5:d6:02:91:31:e6:8f:
1a:25:bb:fb:d6:04:f7:c9:99:f5:2b:53:f3:22:e9:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:29:63:D5:C0:27:B1:E1:FA:B4:D7:68:2E:6D:02:9D:74:1C:A8:13
X509v3 Authority Key Identifier:
keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f3:3e:12:06:6c:be:3d:f5:d4:6a:37:ed:01:e2:74:91:ef:
92:90:00:2c:c6:b1:75:41:d1:ac:08:0a:68:f0:2f:af:00:cf:
a5:ed:ec:01:0f:06:f6:69:6f:38:2a:1e:9b:00:0a:47:6e:66:
7c:26:58:42:06:60:82:b7:05:6c:40:e6:54:d3:c7:d4:a0:59:
ff:d6:f3:1e:50:2c:42:ee:26:80:12:69:b6:96:74:39:96:06:
c5:98:c0:65:91:96:c9:66:7c:82:6f:95:f2:a3:b2:0e:49:7a:
e1:2a:62:b8:65:9b:5a:f0:c5:0f:8e:60:14:58:e3:7a:4e:dc:
89:2f:1f:b2:02:d1:36:3b:a4:a4:c0:8a:28:fe:2d:84:d9:49:
22:68:09:71:bb:68:8a:4c:77:32:71:2b:22:c6:e2:12:80:ea:
fa:a2:b4:0d:6d:1a:96:c2:69:10:a9:53:f7:1f:71:5b:37:24:
4a:67:88:11:63:e8:42:52:ad:a6:a2:a0:d0:4d:32:b2:60:67:
bd:71:86:9e:fe:68:34:ce:a8:67:d6:ea:7f:33:97:e3:c3:8a:
53:c8:77:15:b2:1e:27:03:d6:0f:97:94:a6:c6:34:f5:0d:ef:
96:5a:1f:3a:ac:14:c8:49:4a:25:ef:70:43:10:a4:d7:15:18:
18:57:fe:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:29:40 2026 by rpki-client