Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: X38cT9xlwW9LugR3B1zsEfW3nUhqs7GUctlTuxNA4d0=
Subject key identifier: 87:1C:FB:C9:DD:60:31:DB:89:8A:5B:B2:41:5F:DA:66:E1:E2:DD:E9
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 01A0DC168A291B19C030C8CCB5885BDDAFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 111D
Signing time: Sat 26 Sep 2026 05:00:59 +0000
Manifest this update: Sat 26 Sep 2026 05:00:59 +0000
Manifest next update: Sun 27 Sep 2026 05:00:59 +0000
Files and hashes: 1: WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa (hash: 5/0dAfxj8roSB2N+rzuNs50RghH7Q+7eLmnDrf3ejec=)
2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: HXJslmNc6Aus0tGcbCZv8bcZl1JYDpKjkl7VbJS6zx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:8a:29:1b:19:c0:30:c8:cc:b5:88:5b:dd:af:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Sep 26 05:00:59 2026 GMT
Not After : Sep 27 05:00:59 2026 GMT
Subject: CN=871cfbc9dd6031db898a5bb2415fda66e1e2dde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:33:5b:c4:b2:0b:75:e1:70:4b:67:58:49:14:
cf:3f:9a:57:42:25:e2:27:ef:bb:dc:5b:13:66:51:
8a:4d:d3:c0:5f:64:c1:56:ae:b7:37:10:95:62:99:
45:86:a7:1d:25:01:34:f2:3a:71:95:a8:02:1e:04:
41:6e:c8:3c:4b:e3:15:97:fd:e0:1f:95:bb:de:f3:
0b:cb:6f:b9:8a:c9:0a:d7:78:36:d4:70:42:48:71:
18:ee:79:fa:9a:a7:73:64:06:09:a3:64:9f:f9:db:
f5:8a:cf:25:50:e1:f6:c6:eb:27:7b:fb:20:ae:3b:
e3:46:2d:73:82:a2:f6:a7:3a:eb:68:e8:28:ff:2f:
aa:54:d7:cc:66:3d:f6:d1:b5:d2:e6:eb:7f:19:39:
32:c9:4c:e9:79:02:b3:4d:7c:eb:65:97:0e:59:f9:
43:07:86:ad:0a:a7:dc:18:37:72:f3:91:aa:77:95:
17:fc:2f:25:0d:9a:dd:ec:a5:1e:c7:48:5c:75:0f:
42:b0:13:80:1d:69:3f:fe:5c:57:56:3d:f1:64:35:
68:80:90:0f:9a:51:de:5a:9c:24:f9:f3:5d:0c:b0:
40:40:e3:e0:29:23:f0:f0:82:64:21:61:09:88:f0:
f2:54:7a:00:7e:7e:46:d5:1a:22:74:81:1f:08:16:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1C:FB:C9:DD:60:31:DB:89:8A:5B:B2:41:5F:DA:66:E1:E2:DD:E9
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a8:fd:91:f4:5e:ed:17:c1:42:2e:21:54:bd:a4:c3:f4:73:
cf:0b:af:2b:78:e5:81:7d:26:e7:6d:24:f7:f5:40:2a:c6:50:
cf:70:4a:a2:4a:55:c3:25:f3:51:05:5f:55:23:cd:1d:f1:9a:
5e:82:ae:63:10:c9:a2:92:8f:15:e6:d5:b9:9e:a0:53:79:6d:
b4:91:61:a2:51:ad:4d:e9:bb:e9:fd:f0:19:9f:ac:18:1c:07:
e8:34:bc:15:b2:77:d9:7d:d4:6c:d4:a0:70:61:56:4c:e3:16:
cb:80:3f:ae:88:5f:41:3a:4d:54:8e:ec:42:29:26:8d:bb:49:
03:8e:14:9a:67:18:e7:e5:93:dd:2c:59:03:53:4e:94:6b:a9:
d9:a6:dd:c1:e1:e8:d6:34:ec:1e:bb:6a:c1:3b:d7:ac:df:8d:
2f:c9:b8:f4:c6:67:a2:7d:cb:97:69:5d:82:74:ad:28:14:d1:
83:87:92:9d:9e:05:9e:11:58:c9:24:04:f1:4b:06:db:02:47:
9a:58:1c:69:ee:5b:93:7b:b6:30:dc:d7:99:ec:3b:0b:21:cb:
d4:3c:3f:2c:b4:8a:4e:69:0a:fe:d7:b5:30:ae:6b:58:b0:8b:
f1:f8:4f:af:87:f8:b6:bd:d7:17:97:fa:af:d9:8f:7a:d4:eb:
c0:4b:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:35:47 2026 by rpki-client