
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File: v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier: TlUdykGnt0GEw1RLPJZgcukXH/ZgDSqBVxe47lHxJOg=
Subject key identifier: 2C:D5:A4:9D:87:BE:A5:EA:28:5E:9A:10:E3:6C:4A:4F:8C:F7:AD:61
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial: 01A0D2009BD516AFB26A72BDD4C8B31A5ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 06:00:50 +0000
Manifest this update: Thu 24 Sep 2026 06:00:50 +0000
Manifest next update: Fri 25 Sep 2026 06:00:50 +0000
Files and hashes: 1: Ey3eMMmVsv8up-2fV-u6O1dJx5w.roa (hash: wOF8J5G3VP32rTAaqndoYJUfHTg8IW6zwflvdI+uR/k=)
2: Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa (hash: mo3MnUSjRXBRpf8WeDxv+8kqnyR/lvZN6eWOjKlJpmo=)
3: M2RriBLwk53BN_AgCVd-87noYms.roa (hash: LGroozM/G0ZhsOHB60KVI0lNgNMs6ZKBbzNIOIHAESU=)
4: YFcnRl_M05t459VMCerZuYb9XrE.roa (hash: 5ScuBPIRAl8lb3NflfakLxZuKrrPxH5eDtW2uHK/6TE=)
5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: AtI5EzEbr9ueAgBR4Vu+KThVWYmk+8uqHa+EYFakYo4=)
6: zmgz5RIVTXxCjLUGHC57LPwTTL8.roa (hash: xA1x3FAZvSwLZpJ7ksojvpjV1O0X4GhOLfsswPY/tiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:9b:d5:16:af:b2:6a:72:bd:d4:c8:b3:1a:5e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Validity
Not Before: Sep 24 06:00:50 2026 GMT
Not After : Sep 25 06:00:50 2026 GMT
Subject: CN=2cd5a49d87bea5ea285e9a10e36c4a4f8cf7ad61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:58:c7:bd:d6:b9:db:70:cc:5b:46:51:30:
c9:1c:55:2f:6b:77:58:08:24:6c:bd:d7:13:48:32:
e6:34:7f:46:ea:d9:68:ee:4d:87:c5:1f:d0:7f:8a:
1b:f0:52:8c:9f:26:d9:94:f8:a9:0c:1c:be:a4:0d:
ea:49:2f:d1:e7:8b:f4:f2:5c:24:bd:df:f6:bd:d2:
55:a8:5f:98:83:58:3f:a0:ec:61:aa:4f:34:8a:ff:
5e:58:f2:39:b2:51:ae:a2:65:69:f7:27:a7:f1:9b:
9f:a7:39:e5:bd:eb:7d:c2:45:9e:b3:28:74:93:6d:
77:6b:2f:4b:91:ae:ae:e3:c1:35:f1:42:29:d4:b5:
aa:46:9c:d9:da:bc:9f:7d:90:0a:17:cd:16:52:59:
03:b0:59:3e:27:42:b6:b1:39:c3:e9:23:da:a4:17:
90:58:80:c4:70:07:44:3d:62:d3:39:4a:dd:f8:46:
9f:8d:44:8b:31:13:11:47:71:27:1e:ac:f8:9a:f9:
79:7a:8b:8d:fe:dd:97:73:12:5c:8a:46:1b:41:bb:
f6:a3:bb:d9:29:85:3d:dc:bd:93:9c:ca:f8:a2:46:
05:2e:80:a1:2c:73:03:5f:0b:7a:fd:a1:cd:f1:e0:
71:9a:b5:3d:1d:cd:b9:64:cc:52:f8:1d:81:81:db:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D5:A4:9D:87:BE:A5:EA:28:5E:9A:10:E3:6C:4A:4F:8C:F7:AD:61
X509v3 Authority Key Identifier:
keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1b:5b:31:bc:27:e8:f5:ba:6f:52:06:18:92:91:6e:80:e4:
16:08:d5:bd:99:84:9b:7a:42:46:15:de:1d:85:ee:e9:87:e9:
12:0a:43:31:4b:d6:0b:66:a0:1b:b9:8f:09:fb:04:1d:45:84:
3d:53:90:e9:45:0c:cb:03:ba:db:d1:1a:54:18:3e:5b:04:d3:
4f:40:c4:db:3d:4c:90:1f:0f:b7:ba:47:6f:5d:57:83:79:79:
9f:6d:f7:3d:81:6a:c6:39:8a:28:eb:f5:45:e3:77:d3:f6:8c:
e6:d9:1a:d8:6f:1d:cd:ca:48:88:48:a0:bb:2a:dd:25:64:de:
01:ca:4e:41:7e:f9:b2:30:c5:75:d5:28:7e:41:a3:b1:6e:6e:
c4:e8:b0:e3:b0:57:dd:65:18:0c:45:5a:d5:99:54:c9:f2:ca:
7e:fc:b8:31:2b:05:f3:26:32:1b:f3:01:f5:14:19:58:fb:cc:
29:df:59:de:39:9f:51:e9:d5:85:f4:91:cf:35:57:22:b3:d7:
db:ac:d7:d8:20:de:49:ee:84:28:8a:5f:57:13:c2:44:80:8e:
f8:14:65:03:ed:2b:af:17:98:26:f8:46:3d:b8:3f:88:e5:8e:
a5:a9:50:6b:ee:7b:c9:11:38:7d:5b:04:e8:4f:ec:c7:0f:20:
04:50:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:45:17 2026 by rpki-client