Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier: mKMNF+qAOEQNIF6AdrjPW2tON8AQXOK/1LpfW10tGvg=
Subject key identifier: D8:7B:7B:DD:98:05:66:7D:85:2B:C2:8A:39:F5:3F:9E:18:C8:67:6C
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 01A0D72795355BCF4B0F8D43EA5A44800A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number: 1946
Signing time: Fri 25 Sep 2026 06:01:30 +0000
Manifest this update: Fri 25 Sep 2026 06:01:30 +0000
Manifest next update: Sat 26 Sep 2026 06:01:30 +0000
Files and hashes: 1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: sLFFL69igIkdWlrcI9e8FGWTrQ6CK/DbKwIl+ZzP+dc=)
2: QRYnwPzgKp-9B5SCFgwsSF3VtLI.roa (hash: g+/BMJPy7LXVieQvJddQ3qFl3eA3wSZtRhRO6IBuRQ0=)
3: ad8VziUyy5y7esWKDnVVM5dOvOs.roa (hash: BarUJX1J5UzrikBZata2TwtD1kQ45xC8YMxlVyw4wMU=)
4: mqgpdMuqiVglKY9miPJxo9C0iTQ.roa (hash: cS8JqXqtjXcEL0kXghoZe2Txkm/P1kISxoeWzSy0MNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:95:35:5b:cf:4b:0f:8d:43:ea:5a:44:80:0a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: Sep 25 06:01:30 2026 GMT
Not After : Sep 26 06:01:30 2026 GMT
Subject: CN=d87b7bdd9805667d852bc28a39f53f9e18c8676c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:21:f0:9d:99:d4:02:06:8c:ef:ad:ac:47:
73:71:32:30:69:48:ea:b2:2d:3f:a7:60:ca:2f:00:
92:3c:53:e7:98:12:62:be:c4:02:82:70:1f:83:42:
6a:7f:d9:87:99:34:b4:c7:c2:f7:03:34:02:19:e5:
fc:1d:9f:89:58:a0:66:87:4e:79:5c:6d:c4:14:fd:
90:8b:32:28:d2:72:02:82:cf:a2:04:f6:8a:54:70:
04:16:e1:95:1e:6c:8e:1b:da:a7:46:4c:3b:01:da:
81:b8:15:b3:e3:9d:70:b3:bf:a8:dd:f3:b2:56:28:
d7:78:10:de:d0:9d:97:c1:fa:30:f0:04:e1:4e:31:
e5:8b:1a:5c:4a:9f:c3:36:53:a9:87:5d:09:d1:6c:
78:47:1e:4e:1a:34:72:61:1f:21:7d:ba:69:d0:ae:
bd:cf:c5:74:db:4d:6e:9d:c3:de:30:dc:61:19:b1:
dd:26:11:2b:42:4d:d2:5a:6a:fb:cc:19:31:af:55:
90:f3:33:11:ff:3c:89:da:7d:26:89:79:2a:32:a8:
ac:c4:e9:bd:05:65:af:36:a6:02:83:2b:0e:36:1c:
08:24:6c:d1:57:bc:21:2a:f8:8d:c0:ea:ec:26:f5:
a1:a4:05:0f:aa:37:df:40:07:78:e4:f0:d4:ce:8e:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7B:7B:DD:98:05:66:7D:85:2B:C2:8A:39:F5:3F:9E:18:C8:67:6C
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3e:fe:28:68:16:c6:5d:7c:e0:25:d2:f9:fe:07:c1:ea:37:
94:09:6a:74:e4:df:09:51:98:5d:f0:48:64:86:ca:87:6a:50:
77:a1:83:e6:41:26:6e:0c:8d:5d:c4:79:10:1d:c0:38:c7:f2:
9b:0a:34:c9:9e:49:fb:8b:79:b6:db:c5:e9:72:7e:fa:e3:2c:
6c:aa:83:d9:40:54:80:52:28:6f:f8:7c:1a:9f:31:a3:18:64:
98:3c:fc:19:6e:b5:11:ec:05:98:d5:29:1d:d5:37:a0:b7:ee:
87:0a:a7:d7:55:d0:34:39:f6:18:c0:30:69:e5:2e:95:eb:7f:
dc:92:3c:9e:09:0b:90:1b:9d:b6:e3:91:d0:c3:d3:c8:53:b6:
85:70:ba:0d:c4:67:d8:ee:39:59:47:5f:4c:e0:2e:04:60:1f:
7c:bd:2e:f2:c8:7b:b4:af:06:20:7a:f6:0a:a1:9f:30:1a:f9:
e9:ff:d8:48:b9:1c:8b:3f:11:d4:2e:53:e7:3f:23:e4:27:6a:
4c:66:04:47:41:d7:73:d8:e8:e3:52:6b:99:ee:d1:60:25:02:
30:e8:7a:bd:7a:20:50:d1:c6:b8:2e:7a:db:27:e8:7e:c3:9d:
c3:71:a3:d5:a7:0c:a9:70:2d:cc:db:9e:02:71:5c:54:fb:a8:
b7:34:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:12:59 2026 by rpki-client