Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
File: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft (raw, json)
Hash identifier: GJ9CH1qZVBao5ncRcOMNeey2pozNuo4GO6tg3ri6aeI=
Subject key identifier: E4:C1:F9:27:09:69:A2:76:26:6B:21:40:B4:79:B0:AE:78:BE:1D:9C
Authority key identifier: F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37
Certificate issuer: /CN=f4b2511fb074f5e1658535ba461e4580dbd84137
Certificate serial: 01A0EB53BA1876C61F2F648502BD4B4C4394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
Manifest number: 02B6
Signing time: Tue 29 Sep 2026 04:02:07 +0000
Manifest this update: Tue 29 Sep 2026 04:02:07 +0000
Manifest next update: Wed 30 Sep 2026 04:02:07 +0000
Files and hashes: 1: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl (hash: JjUtR3uQCFOLm3pRIThedvsti7L5J5vmfAiiKJ4AKMw=)
2: w4OPW1w1cwaWMj4uXqpkKkiEaKk.roa (hash: jUe+lcC4F+1K+YbOo4TiwqXw96cjr2eJwGRjPOVvNjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:ba:18:76:c6:1f:2f:64:85:02:bd:4b:4c:43:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b2511fb074f5e1658535ba461e4580dbd84137
Validity
Not Before: Sep 29 04:02:07 2026 GMT
Not After : Sep 30 04:02:07 2026 GMT
Subject: CN=e4c1f9270969a276266b2140b479b0ae78be1d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:28:6e:5d:19:3d:bc:aa:43:a1:4a:ee:86:
87:d6:43:5f:1b:38:95:70:08:17:cf:75:0f:9a:e4:
e5:bd:c6:07:0c:a2:be:fe:ba:8d:c6:6e:bc:b3:08:
8c:e5:19:10:1a:a0:b6:52:5e:73:f7:2b:5d:67:42:
a3:3d:2b:4d:67:0f:15:90:13:5c:e6:3a:52:c8:b2:
d2:66:ad:4d:8f:1d:ef:1a:07:09:76:d3:08:a8:4d:
55:aa:ac:1d:92:f5:9a:99:b7:e2:2e:5a:73:8a:63:
22:4d:13:03:a2:00:ec:29:76:23:ef:89:ef:d1:81:
da:c4:c4:b2:3a:3d:aa:07:57:7e:f0:66:83:4f:f8:
08:2c:e9:a7:96:6e:f1:35:d0:e6:e6:d0:28:53:5b:
fd:8c:35:e1:44:ef:ef:6d:62:16:a6:dc:2b:de:eb:
86:d5:f8:7d:c4:ad:21:a2:54:3e:09:34:9b:a7:21:
ea:2f:89:e4:19:33:7d:2e:02:7d:f3:4d:02:0a:5f:
65:03:5c:85:a4:c9:78:2b:68:06:27:98:3d:6f:54:
63:6e:c9:ba:0d:c3:f2:ff:13:86:03:00:29:aa:64:
f7:00:84:dc:6f:26:57:d7:3c:e0:9c:3b:51:f2:f5:
23:83:53:9d:de:29:05:e9:c0:1f:f4:cc:2b:2b:c9:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C1:F9:27:09:69:A2:76:26:6B:21:40:B4:79:B0:AE:78:BE:1D:9C
X509v3 Authority Key Identifier:
keyid:F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:19:f7:ac:9f:92:2f:10:00:5b:1d:54:4e:ed:bf:3a:77:d5:
bf:f5:1c:03:91:91:ef:77:d6:6b:8e:56:3e:f1:8c:57:d6:1e:
4a:dd:24:6c:6a:7b:01:6d:89:29:07:39:69:36:c4:1f:78:41:
a1:bd:19:be:1c:35:a4:9c:96:1b:5b:3c:73:61:db:ed:23:b9:
f2:c7:1a:ff:37:64:4a:0f:9e:47:11:ee:59:fd:62:eb:50:db:
94:90:4d:44:ae:b9:63:f7:f8:6b:c7:79:cc:8a:ea:9b:e1:5a:
dc:4b:55:e2:86:32:e3:f9:85:6e:a8:12:4e:18:19:0f:3d:2e:
70:fa:1d:be:a8:87:e3:41:3b:ea:f4:35:d4:49:34:01:2e:61:
5c:e9:b2:76:bc:9b:49:75:19:84:59:de:b2:a2:a0:7e:72:fa:
f9:f5:70:52:7a:3b:c5:83:d5:81:81:fb:ae:63:28:bb:f8:9e:
56:9f:7e:f2:8e:8c:0c:62:8f:6b:81:09:1a:29:c2:fb:7c:ef:
98:45:3f:de:fd:0c:3f:f3:a5:e3:ac:fe:7b:21:1c:d2:a8:78:
ec:e7:3d:a2:4c:27:3b:9d:e6:54:ff:2e:cd:19:59:fe:08:0a:
b4:03:a4:9e:f0:a5:25:d7:77:ca:78:01:7b:fd:d9:05:e2:99:
15:79:65:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrU7oYdsYfL2SFAr1LTEOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjI1MTFmYjA3NGY1ZTE2NTg1MzViYTQ2MWU0NTgwZGJk
ODQxMzcwHhcNMjYwOTI5MDQwMjA3WhcNMjYwOTMwMDQwMjA3WjAzMTEwLwYDVQQD
EyhlNGMxZjkyNzA5NjlhMjc2MjY2YjIxNDBiNDc5YjBhZTc4YmUxZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng4obl0ZPbyqQ6FK7oaH1kNfGziV
cAgXz3UPmuTlvcYHDKK+/rqNxm68swiM5RkQGqC2Ul5z9ytdZ0KjPStNZw8VkBNc
5jpSyLLSZq1Njx3vGgcJdtMIqE1VqqwdkvWambfiLlpzimMiTRMDogDsKXYj74nv
0YHaxMSyOj2qB1d+8GaDT/gILOmnlm7xNdDm5tAoU1v9jDXhRO/vbWIWptwr3uuG
1fh9xK0holQ+CTSbpyHqL4nkGTN9LgJ9800CCl9lA1yFpMl4K2gGJ5g9b1Rjbsm6
DcPy/xOGAwApqmT3AITcbyZX1zzgnDtR8vUjg1Od3ikF6cAf9MwrK8kwCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTB+ScJaaJ2JmshQLR5sK54vh2cMB8GA1UdIwQY
MBaAFPSyUR+wdPXhZYU1ukYeRYDb2EE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxKUkg3QjA5ZUZsaFRXNlJoNUZnTnZZUVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wYmFmNTEtODdlMy00NDM3LWE0NDYt
MDE5Mjk0Mzc5NmMxLzEvOUxKUkg3QjA5ZUZsaFRXNlJoNUZnTnZZUVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wYmFmNTEtODdlMy00NDM3LWE0NDYtMDE5Mjk0Mzc5NmMx
LzEvOUxKUkg3QjA5ZUZsaFRXNlJoNUZnTnZZUVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxn3rJ+S
LxAAWx1UTu2/OnfVv/UcA5GR73fWa45WPvGMV9YeSt0kbGp7AW2JKQc5aTbEH3hB
ob0Zvhw1pJyWG1s8c2Hb7SO58sca/zdkSg+eRxHuWf1i61DblJBNRK65Y/f4a8d5
zIrqm+Fa3EtV4oYy4/mFbqgSThgZDz0ucPodvqiH40E76vQ11Ek0AS5hXOmydryb
SXUZhFnesqKgfnL6+fVwUno7xYPVgYH7rmMou/ieVp9+8o6MDGKPa4EJGinC+3zv
mEU/3v0MP/Ol46z+eyEc0qh47Oc9okwnO53mVP8uzRlZ/ggKtAOknvClJdd3yngB
e/3ZBeKZFXllSg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 08:44:53 2026 by rpki-client