Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: FusQS5Z1RAVDJH81nP8fNExe9u611jA8UtScX+4/g5k=
Subject key identifier: A7:F5:EA:98:62:88:38:B4:D3:21:26:26:58:9B:A9:FE:70:E9:EA:30
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 01A0CEC83005FDA6E83956A5BF7AC9B7CB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 15:00:20 +0000
Manifest this update: Wed 23 Sep 2026 15:00:20 +0000
Manifest next update: Thu 24 Sep 2026 15:00:20 +0000
Files and hashes: 1: 4seyTDBe9bL2x8Z_6sMBSrOYvgM.roa (hash: Ld+vj6OA1gKqESzL9huJc2LDFrgP5kvfK/8UeR3bm/4=)
2: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: u8D2JX++jWHRMIUyyv/dTM+qcMnDh7BnRUZhJpRsX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:30:05:fd:a6:e8:39:56:a5:bf:7a:c9:b7:cb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Sep 23 15:00:20 2026 GMT
Not After : Sep 24 15:00:20 2026 GMT
Subject: CN=a7f5ea98628838b4d3212626589ba9fe70e9ea30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:7a:94:13:eb:30:e0:53:33:fd:44:c6:ce:
c9:82:ee:6a:d4:76:87:a4:ac:bf:20:3f:ea:93:c7:
d6:f3:5f:d0:65:b3:a3:6b:7b:c9:87:68:83:40:1e:
36:d5:2c:21:d8:82:e1:f2:5e:d4:ab:e3:d2:93:78:
d5:72:1e:79:17:0f:cc:a5:36:3e:32:22:5e:5f:eb:
4b:0c:73:7e:a0:c8:e1:4d:0f:5e:cd:64:76:a3:c5:
50:a4:0a:f4:09:f8:bc:b0:68:c2:3a:fe:62:96:d0:
dd:72:33:27:90:29:b8:ed:1f:c8:ed:89:67:38:10:
31:56:34:07:c3:e2:5b:2a:10:fa:c1:53:65:90:ea:
7d:e4:04:0b:43:ac:c5:c6:1b:fa:ac:a8:f2:cd:23:
63:07:9f:fb:7e:8f:9c:89:c0:a1:6a:8b:fd:2a:27:
24:a2:13:36:6c:5a:31:89:89:0b:ef:a3:47:ac:d1:
4d:35:fa:83:2f:a8:44:5c:06:fb:a7:3b:47:15:f7:
ca:b7:9c:00:4f:ce:7f:7d:2c:2e:91:94:1f:8f:e0:
5e:63:2e:a9:ed:80:d3:0f:de:a6:7d:4b:1f:a6:d9:
d2:fd:04:a6:5b:9b:ae:7a:5b:f6:d7:9a:3e:26:f3:
41:47:42:b4:ee:a0:c1:c7:88:34:6b:ae:19:f2:60:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F5:EA:98:62:88:38:B4:D3:21:26:26:58:9B:A9:FE:70:E9:EA:30
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5c:4b:59:75:b1:37:82:81:db:45:da:04:57:07:49:0d:45:
b1:d8:39:50:81:c2:54:44:b9:35:ec:99:24:44:36:d1:18:a8:
92:05:a6:29:8c:45:4b:d3:e7:3f:3c:fe:45:a5:02:b6:5e:9a:
4f:3a:64:03:10:63:4b:54:bc:4e:33:90:a4:42:69:12:38:e1:
78:f1:5a:f2:66:86:0a:e1:33:54:70:43:58:3c:5e:f5:05:94:
4a:12:ec:72:6e:aa:9b:c4:d7:86:97:a9:f8:9a:c7:0b:c3:c4:
6f:1f:09:7e:34:a2:6d:bb:27:70:b0:f5:28:fa:bd:01:6b:a1:
e2:ad:db:b0:05:cb:a7:34:14:23:57:73:7f:57:b6:c1:98:21:
3a:6c:f5:58:4f:37:d8:b1:b8:70:29:42:db:07:0a:80:1a:39:
69:fe:cd:48:2c:c8:76:0d:c7:60:f5:78:b9:7c:32:4d:c0:d4:
8b:29:cd:2a:14:b0:0b:82:a8:97:f9:6d:e2:56:0c:a3:c6:48:
d0:7e:74:d2:46:da:e2:da:f9:dc:e4:d3:75:d2:e8:ba:99:1a:
c2:ff:9f:ad:73:b8:85:96:64:7a:69:33:16:cb:29:d0:7d:9e:
80:54:12:02:5e:16:c0:06:3b:67:23:07:ac:28:21:08:8b:bf:
e6:81:e1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:10:43 2026 by rpki-client