Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
File: 9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft (raw, json)
Hash identifier: wSmQAI0eeD9yY2dUTrUq/RlR7xWt2/XrYzViPXgpHAY=
Subject key identifier: F1:4F:0A:57:07:3F:27:55:D3:F2:78:C1:09:F9:38:B4:92:85:40:D6
Authority key identifier: F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
Certificate issuer: /CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Certificate serial: 01A0DD98065C6B162E96431FD65D13FC5E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:02:02 +0000
Manifest this update: Sat 26 Sep 2026 12:02:02 +0000
Manifest next update: Sun 27 Sep 2026 12:02:02 +0000
Files and hashes: 1: 9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl (hash: PBy6RtT02MnJ3KDFjLufWvjU1F6nW1tAUylN1b+s+cM=)
2: aNi0svyCpgLR9qbr5slNhqZZui4.roa (hash: sxaVc5dUd3tQBZrO+xETdU+soa2Zm49R0p3UmVfLY2A=)
3: r95ZVjX56jJiWkYQMRKyYv04zAk.roa (hash: atQuuUOVhYvlzY/3e8Hwna49gvmMP2+CuoGawCgA1Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:06:5c:6b:16:2e:96:43:1f:d6:5d:13:fc:5e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Validity
Not Before: Sep 26 12:02:02 2026 GMT
Not After : Sep 27 12:02:02 2026 GMT
Subject: CN=f14f0a57073f2755d3f278c109f938b4928540d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:dc:d9:9e:30:2c:02:88:5e:fa:47:34:47:
e6:87:c8:af:18:b5:96:08:ea:93:07:c9:c5:36:41:
cb:39:03:33:00:6f:01:9e:24:d3:6b:fe:79:4c:af:
1b:0d:83:9d:05:26:92:88:d6:55:9b:dc:d3:ff:a8:
6f:9c:f1:67:1c:75:22:03:74:30:be:1a:df:54:c5:
c5:c6:e9:01:4c:34:6a:a4:03:be:0a:72:99:d7:cc:
5e:bd:a9:89:f6:0e:f4:8b:66:8f:f7:8a:64:10:d7:
63:9e:ca:fd:48:d2:65:c1:99:d0:da:99:01:6b:ff:
ca:b6:e2:3c:91:24:29:8e:d3:69:52:25:31:77:76:
1d:dd:63:7d:c1:9a:67:88:45:25:18:b9:a3:bd:05:
1d:ce:0d:7a:04:ba:fa:c4:ca:3e:df:bf:e3:6f:e6:
04:71:be:e8:f7:21:0d:9e:49:3e:85:c5:cf:ae:3b:
41:81:b4:54:94:c3:7a:fd:fc:6d:a4:94:31:46:82:
55:ab:cf:40:2b:55:75:24:c4:28:15:1e:11:f8:6b:
a8:7f:38:66:fe:05:9f:7b:5b:47:b4:58:11:54:85:
21:84:9c:2f:63:6f:73:ae:29:81:93:f4:b1:cc:82:
77:97:8b:0a:e2:b9:e5:a2:a2:57:b0:49:80:f3:a0:
60:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4F:0A:57:07:3F:27:55:D3:F2:78:C1:09:F9:38:B4:92:85:40:D6
X509v3 Authority Key Identifier:
keyid:F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ce:c3:a3:6e:f7:8a:35:6e:28:82:e3:74:92:23:7a:c2:ed:
83:c9:3f:0e:64:ae:41:87:5f:db:a8:5e:41:9f:b8:d6:d0:05:
74:f2:58:92:20:a9:dd:c5:24:80:ca:f5:a8:64:9b:2e:34:a9:
36:c7:97:4a:b4:ee:b9:78:8f:48:99:25:11:a5:99:b2:17:98:
4d:34:fe:97:ba:35:51:85:5b:24:f6:a1:5e:e9:6f:39:eb:e6:
af:fc:b5:a8:cf:fe:8f:2e:18:5f:5d:2d:86:c4:9b:65:2f:ee:
4c:f8:ee:84:1f:04:73:fe:be:bb:81:77:38:ee:83:ea:44:fc:
81:f6:6a:c6:f6:a9:72:17:35:e9:a8:38:e8:4a:28:e8:0a:65:
e4:d3:e4:a9:84:0c:9b:45:b6:3e:5f:7e:bd:6f:75:87:b3:32:
da:84:5d:d1:60:42:a4:cb:6b:9e:d7:b6:36:54:fe:a6:6c:a7:
63:0e:cd:87:06:fc:b0:8e:09:dc:f1:b7:54:09:30:3b:1e:8b:
74:19:1e:7a:35:89:2a:05:d5:eb:54:eb:91:27:73:c5:93:8b:
89:30:45:bd:97:5b:4f:45:e8:92:1c:b0:74:2a:af:63:d8:76:
07:de:be:63:f3:10:af:4a:1f:5e:36:b5:f6:80:92:63:6f:a9:
c1:ed:a9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:53:16 2026 by rpki-client