Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
File: 1-dhnzCTQvonwX8hyWOCHemAVgLk.mft (raw, json)
Hash identifier: tZVBCDPF1jIErXaEKR/XJodyLaAZSBza6z8bKcY6J08=
Subject key identifier: AA:9E:41:93:B9:91:16:22:C4:C9:D8:3B:6F:AB:A1:D9:A7:49:CE:F6
Authority key identifier: F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
Certificate issuer: /CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Certificate serial: 01A0DCBC38ADDA9D5F9116395E9626426150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
Manifest number: 91
Signing time: Sat 26 Sep 2026 08:01:57 +0000
Manifest this update: Sat 26 Sep 2026 08:01:57 +0000
Manifest next update: Sun 27 Sep 2026 08:01:57 +0000
Files and hashes: 1: 1-dhnzCTQvonwX8hyWOCHemAVgLk.crl (hash: 2ItZChauWRr3/EFTM4aRl6K9f14AChDKlXpgMqiY6G0=)
2: eI9NerJ1c6tinDx9yJcsboAQaCc.roa (hash: /4R9eBzzDT2s1cbNz4Ys3Jws6eQW6QelhjomMlmRAmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bc:38:ad:da:9d:5f:91:16:39:5e:96:26:42:61:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Validity
Not Before: Sep 26 08:01:57 2026 GMT
Not After : Sep 27 08:01:57 2026 GMT
Subject: CN=aa9e4193b9911622c4c9d83b6faba1d9a749cef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:ac:a0:04:3f:b4:19:0f:6d:c2:ff:97:16:
7c:ef:c8:4d:6a:a9:bb:0c:6c:4a:15:57:fa:2a:32:
20:cf:be:1c:02:b9:11:23:e7:df:be:d2:f0:39:34:
71:10:23:d5:e0:a2:f1:c8:45:35:c7:9e:a9:0d:ce:
a5:ce:43:43:16:1d:b4:f9:2b:c7:7d:cb:68:6e:ea:
88:f2:0a:ee:d0:0f:85:70:61:f3:00:27:77:cd:39:
4f:94:40:7b:b9:03:9d:e9:6c:c7:fc:da:f4:33:af:
ee:c2:86:ee:09:ce:53:10:02:ec:bc:9b:fa:fa:ac:
93:13:76:62:5d:2e:9e:15:73:c9:52:12:5f:78:88:
3d:e5:7e:6c:5a:9b:16:1d:42:55:7a:42:35:be:ba:
ca:43:d5:8d:d1:eb:cb:44:0b:7f:e4:df:0d:ff:a5:
8b:1b:8d:de:b3:47:13:19:a8:23:1d:a1:54:16:09:
e7:b9:4e:ee:68:aa:2e:07:99:41:98:8e:0c:50:84:
59:dd:ea:02:3f:29:f3:4e:88:41:39:4a:52:9f:4d:
59:05:65:f2:21:e4:d0:aa:c4:e0:e6:b8:0f:48:31:
16:85:4a:04:e6:17:c6:5c:4a:8e:a6:cf:a8:55:20:
73:92:e3:02:09:0e:ad:d9:48:fe:a4:d5:05:d5:b2:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9E:41:93:B9:91:16:22:C4:C9:D8:3B:6F:AB:A1:D9:A7:49:CE:F6
X509v3 Authority Key Identifier:
keyid:F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a8:2d:8b:29:e0:85:ff:3a:58:37:9b:38:89:6a:79:40:36:
3a:44:3b:9a:bd:b9:b8:f7:07:ff:7a:4c:43:a9:00:cf:21:ff:
cc:3d:2c:2d:9f:32:f7:e0:2f:ed:28:c1:4a:99:8c:4c:5c:b8:
b5:d0:41:87:c5:91:c8:f1:39:70:35:5a:5b:76:d9:58:66:39:
23:33:67:3f:c8:ce:c1:7b:cd:98:f8:24:f8:e4:4d:60:b1:a8:
31:1f:7d:2b:3f:41:af:7c:f0:a4:6b:33:8b:75:31:ba:b4:5c:
8d:29:65:3d:c9:14:66:02:e7:4b:d6:0b:ab:8d:ae:34:48:9a:
a3:b0:d3:a0:b2:5b:c1:be:10:8c:e7:62:90:2f:e0:af:6d:e6:
da:58:bf:3a:c9:d5:8f:3c:5b:d7:7d:bf:b6:d8:62:7b:e2:38:
12:ef:86:9e:60:ba:c4:b0:82:6f:92:c7:bf:fd:b5:01:d5:89:
9d:dd:14:d0:51:df:6c:5b:80:85:bb:93:23:32:74:96:76:7d:
d0:d4:97:3c:8e:5d:60:15:46:4c:f1:72:1d:53:68:03:73:af:
00:29:53:d2:d5:ac:38:c3:c4:a9:0e:16:98:66:27:e0:ea:28:
cc:ef:5d:e9:47:58:d2:6e:34:c9:7e:00:e9:54:a0:d0:71:22:
1c:6e:28:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:47:50 2026 by rpki-client