Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: rjF+CkyVN6lfwmMaXYS2C7i7lpgl8+bsWO6B1XQjiMU=
Subject key identifier: 5A:1C:D4:8F:34:39:6B:5A:35:95:70:82:D9:5D:B7:C7:15:FD:26:8A
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 01A1DE396343A8AD0ECF13D2FB33D49A11C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 11D8
Signing time: Sun 15 Nov 2026 08:01:05 +0000
Manifest this update: Sun 15 Nov 2026 08:01:05 +0000
Manifest next update: Mon 16 Nov 2026 08:01:05 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: wkCcTGrMMMCnbrGmwcSNluhCqO3nJu78VEY4KlyPuGE=)
2: h5DIp02VidThuOHraMPFCodvygs.roa (hash: xwNLtlpo98S4VMl0NrrQV2mRppmcREH8EvSc90IeL2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:63:43:a8:ad:0e:cf:13:d2:fb:33:d4:9a:11:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Nov 15 08:01:05 2026 GMT
Not After : Nov 16 08:01:05 2026 GMT
Subject: CN=5a1cd48f34396b5a35957082d95db7c715fd268a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5f:f5:e7:44:10:57:7d:04:45:30:1f:4c:e0:
17:f6:c4:38:67:fb:c1:82:7c:4c:75:74:5b:f7:07:
d4:d7:4a:d3:23:c4:05:74:ab:82:5f:d9:7f:7c:eb:
82:c3:82:c8:33:ec:76:8f:bd:95:f8:26:f9:aa:69:
56:c4:1f:0f:c4:78:00:d0:a5:5d:d4:86:e8:ce:96:
60:92:cb:ac:5a:bc:0b:32:9b:b6:b4:de:37:ad:ab:
2d:ad:64:e7:5e:2e:36:6b:d1:8b:3d:f9:c2:cc:46:
bf:ad:e9:6f:29:3a:3b:a0:dc:95:a5:9f:3c:84:1f:
5d:e5:70:80:f0:e2:51:f1:57:14:9d:d8:5a:a1:5a:
e0:f2:ba:91:ea:3b:62:ee:a0:7d:ba:e3:00:44:12:
ba:ea:e9:71:26:71:79:35:07:3b:5b:c7:1b:0a:97:
2e:36:24:f3:75:5e:e2:25:cf:cc:52:31:7b:8a:a9:
da:d6:6f:0c:44:df:12:37:65:2f:e4:41:a7:61:90:
b5:9b:b3:99:c7:0b:ae:71:d7:c1:d9:44:3a:f1:6a:
b0:d7:96:9d:92:f2:2b:76:12:25:7c:1f:c1:fc:61:
e6:7e:a1:69:19:b5:4d:a1:01:86:2a:21:d1:86:1c:
6c:bb:32:fb:88:c2:a5:36:43:1e:3c:df:dc:6f:d0:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1C:D4:8F:34:39:6B:5A:35:95:70:82:D9:5D:B7:C7:15:FD:26:8A
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:87:83:2e:6e:9e:3d:3e:f3:28:d4:cc:77:69:6b:ad:32:28:
13:34:cf:7b:a9:a4:27:12:26:58:45:ab:bb:75:78:54:a3:b6:
90:2b:fc:1a:3f:a8:0b:a8:ea:7d:2b:1e:19:6e:11:ea:68:88:
d1:6d:fd:a8:c4:8c:3e:66:0b:97:51:ed:65:ef:35:21:29:8a:
04:b6:8f:a8:ff:5b:4c:14:49:50:02:0c:08:96:c9:75:87:94:
7a:d3:e0:f0:72:f9:4d:cd:73:dc:5b:46:95:88:10:74:21:7a:
4e:97:09:3e:13:12:8c:11:00:15:72:b3:76:ba:07:7f:a0:54:
8e:2a:4c:23:50:f3:5a:e7:bd:47:0a:3c:0a:55:79:68:87:d3:
e0:dd:0d:02:50:d2:66:e6:06:cc:27:d2:5c:b9:89:1e:e2:d7:
b9:91:81:c1:70:a2:07:c9:a0:ec:96:86:57:34:3d:00:e6:9b:
a8:ac:d3:21:3c:bd:46:12:25:4c:92:6a:1b:12:e1:4e:06:ec:
5e:5e:0b:6d:37:1f:ae:bd:0f:ce:21:78:cd:3d:e1:f1:b3:14:
f0:7f:2f:5b:8f:25:36:00:59:72:dd:3b:09:0c:3b:ad:87:c7:
2a:77:97:07:8c:59:5c:de:e9:e8:97:ce:42:a5:06:49:d2:cf:
d7:7c:46:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:54:20 2026 by rpki-client