Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: /kre3hl0TFmoDGbJTHBT5tXpyhoQEwFIyO0pVUxg20I=
Subject key identifier: F9:F7:7B:5F:5D:80:EF:9A:23:08:AB:DF:69:43:9A:B5:67:3F:E1:BD
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 01A0D494127E45EE5F9ACAE64E8ACBCDDC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 0467
Signing time: Thu 24 Sep 2026 18:01:08 +0000
Manifest this update: Thu 24 Sep 2026 18:01:08 +0000
Manifest next update: Fri 25 Sep 2026 18:01:08 +0000
Files and hashes: 1: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: ORM1NYdQOWGr1tAGu+n/kYKkCXWBDBiVqpHMGp0wfkY=)
2: k9k26h_wk2KwXBbexASmBckIdio.roa (hash: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:12:7e:45:ee:5f:9a:ca:e6:4e:8a:cb:cd:dc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Sep 24 18:01:08 2026 GMT
Not After : Sep 25 18:01:08 2026 GMT
Subject: CN=f9f77b5f5d80ef9a2308abdf69439ab5673fe1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:24:92:e2:2b:64:0b:d2:6f:d6:d1:fa:77:
2d:8b:72:82:51:cb:da:0f:f3:31:f2:1e:25:e5:c5:
5d:38:ba:fa:c8:42:d6:20:17:e1:11:33:c1:40:f6:
c7:fe:6a:7d:13:80:c7:b7:36:92:9d:dc:44:b6:60:
75:b8:f3:a2:f8:69:17:e8:9e:21:26:08:59:bc:37:
e7:16:c7:0d:cf:06:84:ed:f4:fe:87:6a:43:26:3a:
f5:10:dc:db:b4:14:96:01:8d:37:c8:2e:56:68:59:
a6:36:a2:30:bb:3c:62:ca:53:9f:fd:b9:41:3c:f8:
6e:7c:27:e6:45:3c:9c:e4:26:ab:47:70:25:5f:f8:
c3:0e:9c:a7:af:2c:ff:b2:57:35:6b:b3:b2:c8:4b:
00:c2:64:69:ce:5c:b7:44:8d:e9:30:b2:3a:44:ac:
2b:35:66:78:fe:ce:2a:2e:0c:43:8e:72:20:1a:ae:
e3:f7:27:64:13:1e:90:d9:39:35:b4:a0:9a:b4:f4:
34:e9:e9:5b:50:43:35:cb:87:39:2f:51:96:28:8d:
53:87:4b:0d:00:ea:a8:24:48:29:d9:2f:9a:e1:cd:
ea:af:a3:e5:bf:e7:d7:86:4c:40:7d:59:53:8e:59:
15:2c:4a:84:89:02:00:db:06:cc:c9:45:c3:de:f3:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:7B:5F:5D:80:EF:9A:23:08:AB:DF:69:43:9A:B5:67:3F:E1:BD
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0c:a6:5b:d4:46:00:2f:ae:5e:12:a6:4f:fc:dd:31:9b:ac:
f4:14:23:e5:59:fd:50:83:df:4b:f5:c6:28:68:78:ba:6a:a1:
32:07:27:e9:e9:31:1d:b1:f1:8c:60:bf:ad:24:d0:4b:93:e8:
a9:91:23:65:ab:9e:bf:fc:39:44:41:0d:8d:5a:57:d2:7b:d2:
11:73:4e:c0:6e:a3:fd:a1:85:8a:ee:3b:b3:47:34:0d:99:ad:
c5:94:34:e9:9b:69:7c:4b:99:cb:c8:8d:31:47:ef:a7:77:28:
91:38:bd:66:1f:62:28:d2:79:b6:12:98:e5:bd:86:51:4a:05:
9e:2f:de:13:52:b5:36:ae:16:5c:b7:96:ea:b0:7d:b3:b6:90:
61:55:54:2d:f4:a6:c4:1b:f2:aa:9e:18:8a:74:55:33:57:96:
e2:a6:75:7b:a3:a0:d5:00:e5:eb:b5:24:58:56:07:69:98:ec:
ab:23:d5:a8:d0:73:f6:3e:d0:ab:0c:47:bd:b0:3d:72:e6:b9:
0e:46:f7:48:c7:e1:1c:40:73:f5:71:ee:d9:85:77:fa:e9:e4:
cc:9f:24:c1:03:83:84:8e:c3:be:81:ca:6f:5a:03:cc:0a:cc:
48:79:0f:be:0c:fa:74:ad:92:cb:b8:c3:dd:5a:12:4e:af:9f:
a4:1c:93:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:28:05 2026 by rpki-client