Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: YYcMad9SF8jJ2Bq2YBcj+wYB4pDqrqTdwNP8rBvM2kE=
Subject key identifier: 65:59:49:FE:F3:B1:A8:63:F1:52:04:25:66:6F:94:DD:A1:05:0F:6C
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 01A114863BC684ACBF06E4D0DD2217C379B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 1A8D
Signing time: Wed 07 Oct 2026 04:01:43 +0000
Manifest this update: Wed 07 Oct 2026 04:01:43 +0000
Manifest next update: Thu 08 Oct 2026 04:01:43 +0000
Files and hashes: 1: BKEbuwMgtraLYD7tz_bOlWvPTyU.roa (hash: 4+VeGIyK69ig1zU9o8l43jPylF7T3GhRdlEeEiB531Q=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: vxrPT+1tJXO7Xgd+P+5GtEHwt+e+kbHi/2QzlwjAZQw=)
3: zr9U94ldVmEqABzp28N8U7oLDs8.roa (hash: uuO8FGDaDTUpNR5s2Koo87GcscBCUOkl1Mw1TeypQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:86:3b:c6:84:ac:bf:06:e4:d0:dd:22:17:c3:79:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Oct 7 04:01:43 2026 GMT
Not After : Oct 8 04:01:43 2026 GMT
Subject: CN=655949fef3b1a863f1520425666f94dda1050f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:1a:be:d5:c0:33:d8:66:3e:82:62:cd:98:
ba:54:ab:f2:d7:a1:87:d1:63:37:d9:ea:d6:18:ed:
2f:57:8d:1e:3e:cb:b4:e0:42:c2:49:cf:5a:fa:b8:
96:74:ef:18:4b:a2:55:83:d3:ab:1e:d3:ab:2d:41:
1c:26:bb:4b:51:1b:6f:86:56:f7:3f:dd:1c:38:f3:
25:a3:ec:de:4e:8e:85:21:09:90:cf:d9:b4:94:7b:
5d:b0:9f:64:af:56:22:91:81:1e:03:64:7b:ca:06:
60:ae:6f:6d:25:f8:68:56:e1:e7:69:93:f3:22:d1:
33:70:f9:21:08:3a:59:53:ef:77:ac:27:04:01:1e:
69:5e:f0:59:f1:d9:79:60:1c:0b:34:95:bd:3a:f4:
df:e8:a2:d0:08:3c:a4:5a:6f:20:6d:be:4f:f3:d3:
32:e7:11:5a:df:2d:4a:3e:b3:fe:fa:26:85:d8:be:
9c:4d:d1:ab:01:74:4a:3c:33:2b:9d:b9:aa:15:0b:
eb:c8:3f:9a:40:cc:2a:1c:70:0e:77:a0:b7:d4:ec:
c6:c8:ca:1e:7a:15:df:8d:19:11:94:96:ac:de:c8:
5a:bd:78:dc:bb:18:01:b6:1d:fb:e1:9d:c3:cd:31:
89:62:bf:05:f5:23:c0:93:b0:e7:ca:1c:66:04:83:
85:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:59:49:FE:F3:B1:A8:63:F1:52:04:25:66:6F:94:DD:A1:05:0F:6C
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fd:f2:c5:db:f1:5c:9b:fd:82:95:6c:99:1b:55:86:6b:64:
2b:b1:e0:4d:65:d0:d7:dd:4a:64:67:db:af:8e:88:a4:65:29:
7a:cf:df:e6:42:f9:a8:23:69:ef:61:5f:f3:d2:e9:8e:03:9b:
70:ed:cf:17:d6:20:2f:53:be:f1:f5:1f:85:cb:e7:5d:d2:58:
47:1b:c8:6d:62:f7:1a:a8:06:75:a3:dd:87:c0:10:5a:41:d6:
c3:a6:a8:4f:89:11:19:cc:5e:d0:64:55:46:57:7f:4b:14:0c:
05:4f:65:33:33:09:8e:62:f0:f9:fb:13:ec:12:1f:b3:fa:59:
4f:71:6b:23:26:66:33:f4:46:a3:fa:5c:f3:14:12:6d:8a:22:
1c:da:59:61:3a:7d:35:34:cc:ef:16:cd:d4:c8:b7:b2:af:b5:
0f:65:09:14:c9:a8:7d:94:86:20:f9:5f:82:0c:12:dd:be:ff:
de:91:69:77:62:18:52:00:39:0a:cf:fd:4b:83:ac:0a:9c:41:
2f:4b:65:4e:18:a0:bf:ff:1e:10:68:f0:d0:12:43:35:7b:21:
a0:2c:9c:3a:d2:62:b3:ce:80:72:52:a4:f9:5a:fc:28:da:0c:
12:1b:19:30:70:6d:f1:7f:ee:7e:f7:ed:3c:a4:85:5d:05:0d:
8e:8b:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:26:31 2026 by rpki-client