Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: Ft3PVVQnz9lJj7L0Bc63P3Qx4ApOOH4f21d4+YR4d2M=
Subject key identifier: 53:31:98:C3:53:EB:AA:58:86:71:28:23:EB:E9:BF:6A:41:7F:41:52
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 01A1DB38BC82642D0E929E8EC81DB121DD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 1AF8
Signing time: Sat 14 Nov 2026 18:01:30 +0000
Manifest this update: Sat 14 Nov 2026 18:01:30 +0000
Manifest next update: Sun 15 Nov 2026 18:01:30 +0000
Files and hashes: 1: 4seyTDBe9bL2x8Z_6sMBSrOYvgM.roa (hash: Ld+vj6OA1gKqESzL9huJc2LDFrgP5kvfK/8UeR3bm/4=)
2: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: 7lW4R95O6drPwsJflNG6COKEwCFs692qLTmv8tEtAXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:bc:82:64:2d:0e:92:9e:8e:c8:1d:b1:21:dd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Nov 14 18:01:30 2026 GMT
Not After : Nov 15 18:01:30 2026 GMT
Subject: CN=533198c353ebaa5886712823ebe9bf6a417f4152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:ed:63:8b:0f:94:7b:02:c4:d9:ad:ba:4b:
95:9c:39:67:ac:5f:0f:20:6d:8d:5f:24:f1:53:d1:
76:4f:4b:a3:e3:9f:ae:ac:fe:e0:49:e0:4b:df:95:
87:d1:68:0e:61:0c:66:35:9a:e6:56:01:54:e6:fe:
ad:64:d3:ff:89:d2:c9:9f:8a:5d:0c:25:e1:14:0b:
12:42:05:38:2f:20:d0:79:29:8f:71:20:4c:4f:8e:
6d:69:3e:90:0e:a4:91:71:cb:b6:4a:ad:30:22:06:
6c:a0:da:84:52:16:8c:0e:69:f9:3a:68:d7:bd:71:
3e:35:fd:da:31:77:db:fc:8f:41:e7:fb:a6:c2:38:
9d:bc:d3:d6:b9:c5:af:90:89:72:38:94:86:61:34:
20:7d:2e:7b:4b:c1:31:73:6c:ab:3f:65:5b:c4:6e:
6b:8e:a5:c5:a4:24:9f:9a:cb:41:ca:58:f2:c5:24:
eb:95:68:cf:11:bb:88:7d:45:5e:39:e8:f6:fa:b1:
3f:63:b7:9e:f5:bd:d4:69:73:1e:0c:24:5a:6c:d2:
62:a9:7c:74:57:f5:7e:aa:ed:f1:23:f1:ec:ee:38:
64:3c:32:8d:8c:aa:8a:ab:9e:11:ae:b1:cf:3f:c1:
ac:de:46:fb:aa:88:f6:61:1b:63:82:e0:35:0b:23:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:31:98:C3:53:EB:AA:58:86:71:28:23:EB:E9:BF:6A:41:7F:41:52
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b3:a2:1f:34:57:8b:8a:1a:2b:a0:87:a4:35:8f:f4:11:5f:
ab:a2:cc:2a:56:f1:d9:8b:d5:94:55:83:8c:bc:90:5f:1c:c7:
cd:ab:1e:d0:97:8e:0c:87:5a:8e:ae:ca:96:d7:73:ae:05:c0:
a9:c9:ca:e2:ae:31:f5:c1:44:44:3a:5e:dc:57:03:42:24:e6:
0f:5a:56:a1:5b:d3:59:f0:24:e1:76:48:84:d0:f6:80:51:61:
18:29:05:2b:73:c2:74:41:4d:a2:ad:9c:26:3e:9d:ea:96:ef:
3a:df:5c:0f:39:1b:1c:3f:36:05:f6:96:1f:41:24:f9:2a:cb:
51:0b:10:a1:7b:0f:b8:56:91:56:cd:16:9f:b0:66:29:57:a7:
a8:ab:48:a9:fb:b1:26:7c:3f:4c:8c:53:ea:ad:e8:8c:f6:3e:
71:ef:d7:c7:cf:ae:3b:d0:d1:c4:92:6e:98:15:2a:04:5a:3c:
91:6d:07:03:33:72:b2:9c:64:51:24:d1:87:6d:cb:74:05:54:
a2:bf:83:aa:6d:3c:d4:1b:f0:ac:ad:3e:db:89:fb:c8:6f:2e:
92:9e:ba:d2:23:22:35:4a:61:1e:0d:e5:4a:a1:8b:57:29:d2:
a3:5c:bf:0e:88:cf:d6:30:9f:4f:ea:a9:12:09:92:b6:96:2c:
dd:8b:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:46:04 2026 by rpki-client