Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: jV+BgJdBl0bNCf5p67ywVE+Tt22B8gxGxlwNZJ0/6qE=
Subject key identifier: 5F:DD:F5:CB:D3:B4:D4:1C:E7:38:6C:F2:01:AA:CE:45:6F:97:86:E7
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 01A0FF477AB7FEFF83C8453B40AF57F765CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 01:01:09 +0000
Manifest this update: Sat 03 Oct 2026 01:01:09 +0000
Manifest next update: Sun 04 Oct 2026 01:01:09 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: GHbhMF4tOn/A5VjAbn0nRU6nDEfNmPS17lz4DRsooc0=)
2: smlZ7JTHvm4P3nZNzZsryZ_yA5A.roa (hash: +VBNM06YqR+uhNJp3b1HBKPNStgs2sJGwRLlTNxj+ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:7a:b7:fe:ff:83:c8:45:3b:40:af:57:f7:65:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Oct 3 01:01:09 2026 GMT
Not After : Oct 4 01:01:09 2026 GMT
Subject: CN=5fddf5cbd3b4d41ce7386cf201aace456f9786e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:82:cd:4b:00:4b:bc:92:99:dd:50:b2:a0:
da:4a:c8:13:95:19:ac:4b:af:fa:a2:27:8d:46:65:
62:4a:26:a6:fa:67:03:8a:6a:30:59:df:bb:ae:0a:
05:ec:20:7b:ca:51:3b:3f:05:e9:ca:ee:82:7f:54:
a2:a4:a1:05:c6:69:82:3d:aa:9c:b4:cb:d4:78:08:
b8:53:11:8a:7e:d9:b5:61:ad:bc:d7:48:5e:22:ee:
65:e0:65:57:31:43:0c:36:91:89:7f:78:9e:1d:7a:
6e:4b:52:97:b6:05:26:fd:60:7e:42:7c:20:cf:da:
19:79:e6:5e:c9:33:86:68:65:a6:06:05:cf:8c:85:
62:cb:be:77:49:0d:ac:42:df:95:96:79:0b:0c:3d:
bc:6c:f3:27:e6:ca:02:62:90:78:6b:53:f6:69:99:
61:73:de:c7:3d:e6:40:07:b9:54:42:5a:e5:a8:08:
d1:04:3e:59:4c:44:1d:77:98:e9:10:94:2d:23:0e:
73:9f:81:ff:77:43:7a:b0:c1:78:80:08:70:6a:fc:
b8:d2:76:98:5a:fd:f1:75:42:00:b6:fa:cf:19:7e:
38:bb:77:ca:58:a5:04:ea:cc:eb:0e:fb:c7:e8:a8:
41:b1:30:4f:2f:7f:8e:20:46:a5:d8:32:75:0a:d9:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DD:F5:CB:D3:B4:D4:1C:E7:38:6C:F2:01:AA:CE:45:6F:97:86:E7
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:70:11:c3:f4:0e:cf:69:7e:68:9c:67:2b:b3:f4:86:b7:22:
5a:9c:81:67:af:25:c6:63:2c:84:9d:80:41:40:6a:83:c2:aa:
a5:ab:da:7b:4c:53:f7:97:f6:5d:4e:5d:b9:bb:7e:dd:1e:14:
71:7a:3b:76:e7:42:f3:77:14:6d:23:e3:c7:18:1b:5a:c4:c0:
44:28:6c:31:9a:52:09:8a:22:59:5c:7b:5e:18:99:ea:39:a6:
3d:a1:3b:a9:43:95:d1:f8:22:50:c9:24:44:4d:4e:50:62:3b:
12:71:37:f0:2a:98:e8:d6:2f:46:d1:a6:cc:20:e2:dd:2c:3d:
17:36:e1:f1:37:b3:29:01:6f:2a:ca:bf:e8:b2:ba:56:03:a5:
29:0a:de:20:02:d3:36:3f:20:ce:bc:95:9b:03:6b:3c:47:c1:
cc:4c:84:dd:01:df:e4:68:51:43:d2:96:bf:11:bc:2a:95:dc:
8c:4d:5d:9c:c9:eb:c6:a4:be:99:a4:b6:6e:36:60:52:fa:cc:
2b:f4:9d:9b:58:2d:d4:34:95:b5:98:97:53:7a:62:ae:e9:74:
be:d5:b9:cf:86:80:61:1c:a8:05:cd:3f:5b:03:fc:c7:3b:2a:
c7:b1:cc:31:75:20:44:dc:93:ed:42:33:55:68:37:d9:72:77:
e9:8f:fb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:09:00 2026 by rpki-client