Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: yS3ugzls0XoOW77kjrRo43PEsQ+bVYCQZNgJAylavRo=
Subject key identifier: 72:BC:D1:AB:85:A7:DE:F1:71:AF:1B:5A:A4:C7:C8:51:73:89:3D:C3
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 01A0CE237762DC40773920559B6BE5DB8176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 1178
Signing time: Wed 23 Sep 2026 12:00:25 +0000
Manifest this update: Wed 23 Sep 2026 12:00:25 +0000
Manifest next update: Thu 24 Sep 2026 12:00:25 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: Fz4CvnXbnYSr/9gA6IaLLLaLMKVAdje1k7RqnoTlhAE=)
2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:77:62:dc:40:77:39:20:55:9b:6b:e5:db:81:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Sep 23 12:00:25 2026 GMT
Not After : Sep 24 12:00:25 2026 GMT
Subject: CN=72bcd1ab85a7def171af1b5aa4c7c85173893dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5a:3f:59:41:f2:1a:5d:b7:98:96:66:73:5e:
4a:8b:22:b1:85:de:c2:32:c9:12:14:c2:6b:7e:80:
ed:65:de:e0:98:6d:d0:2e:52:ff:cd:82:98:5f:7a:
25:c9:ca:71:90:34:7d:36:3b:6b:b3:20:9e:20:31:
bb:42:01:00:b7:1e:08:5e:62:4c:d2:98:93:6c:67:
0c:de:8b:d8:82:31:b3:31:9d:93:7d:66:5f:2e:c6:
c3:97:c1:94:44:fb:39:ed:86:2a:8e:0f:46:d2:9c:
0b:8c:33:60:07:c4:2b:78:db:c3:22:10:aa:b1:f5:
2e:99:f6:68:4a:be:e9:81:8c:40:51:e9:02:7a:ad:
a1:64:99:2c:09:bc:5d:30:89:f8:a2:e5:91:41:bf:
60:a2:76:4b:d3:5b:a7:06:05:d1:43:3a:ac:37:1f:
39:b1:5c:ff:11:ca:e0:5b:f2:5b:08:d9:18:cb:a8:
f5:ad:2a:03:52:f5:dc:c0:a4:63:d4:01:34:6e:4e:
d1:11:0f:61:2d:70:07:fe:78:70:aa:a4:d6:7e:4a:
8d:c5:29:00:d5:d1:66:fb:18:eb:d7:c5:b5:90:04:
5f:fe:94:c9:9a:de:0a:4e:c4:e2:b7:f6:01:44:e3:
ab:37:99:f7:a4:2c:50:e8:d3:ca:78:5d:fd:76:70:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BC:D1:AB:85:A7:DE:F1:71:AF:1B:5A:A4:C7:C8:51:73:89:3D:C3
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:14:f1:52:b0:c6:79:d3:e3:99:2d:41:0e:f9:20:52:4f:12:
91:2d:42:2a:7d:92:5f:19:28:0a:41:f4:a3:1a:01:04:d2:7a:
96:c2:24:77:2b:f0:67:19:a7:11:3a:c7:e0:41:e0:d5:d1:9a:
d7:d8:da:83:c4:b0:80:a1:63:a3:b9:b1:db:38:92:bf:fa:26:
3e:f4:b5:ef:75:52:ce:ed:71:7f:ef:e3:0f:2f:37:30:a8:e2:
88:62:fa:1e:a5:00:3a:cd:8c:1b:da:d8:24:df:ed:45:08:93:
ae:98:46:20:7c:8a:20:95:c3:85:92:43:d3:77:81:12:43:6e:
1b:14:31:c2:81:34:d4:2a:9b:e8:fd:eb:f1:b8:21:dc:26:78:
0d:e2:d7:47:02:00:ab:53:17:ab:c0:1f:80:10:d7:c4:4c:6c:
88:af:37:a4:e8:0d:d6:52:74:02:9c:a5:67:9f:7f:04:81:eb:
5f:cd:97:c6:d3:c3:fb:86:51:51:cb:84:fe:c9:78:90:56:b5:
21:ad:44:bf:8d:88:f5:79:a6:c6:a2:d4:62:2e:16:fe:9f:b2:
55:e4:55:84:1b:48:2f:65:7f:a9:2c:6c:ab:35:43:42:e3:21:
91:8b:0d:97:41:bb:44:ae:59:80:a6:49:a9:7c:57:97:b1:f1:
4c:1e:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:46:55 2026 by rpki-client