Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
File: 9WR7mt8n-vd9-AgsVVG3N1asPe8.mft (raw, json)
Hash identifier: GEmwoHzjqtzv6Po+jvqUwjcTGriy2KCr6bqKZYWUk0U=
Subject key identifier: 10:C8:8D:C4:AF:D1:33:CD:B6:73:C2:B0:78:9D:A9:B4:87:CE:AD:9E
Authority key identifier: F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
Certificate issuer: /CN=f5647b9adf27faf77df8082c5551b73756ac3def
Certificate serial: 01A0D6824DD4AC5A621DEBC879D604716AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
Manifest number: 01FA
Signing time: Fri 25 Sep 2026 03:00:58 +0000
Manifest this update: Fri 25 Sep 2026 03:00:58 +0000
Manifest next update: Sat 26 Sep 2026 03:00:58 +0000
Files and hashes: 1: 8L86gshlVnRWr5gdY2DjZCCezS4.asa (hash: YjYfeGlfl/t841MtUmbFSM8G4/SKtO5ZfDYqZpGqHMA=)
2: 9WR7mt8n-vd9-AgsVVG3N1asPe8.crl (hash: lUEE9WpzMXKmlTNwXKLhhNoRdrSLnCSiWFuMXa+2KTA=)
3: kcx511HkgH6_p24UHLo0MXG7V-A.roa (hash: dNUOg34buyXeNE8RHao0TAiuQSfhv2tTmHDrugM/EPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:4d:d4:ac:5a:62:1d:eb:c8:79:d6:04:71:6a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5647b9adf27faf77df8082c5551b73756ac3def
Validity
Not Before: Sep 25 03:00:58 2026 GMT
Not After : Sep 26 03:00:58 2026 GMT
Subject: CN=10c88dc4afd133cdb673c2b0789da9b487cead9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:40:93:e1:c9:d8:95:47:2a:0e:fe:55:be:
41:a2:1d:1c:fb:d2:7c:50:c5:0a:a5:64:45:1f:b2:
40:56:b9:e2:e8:20:fa:ab:93:d3:ef:d8:6f:28:e6:
11:1a:8b:c8:1a:5c:2e:8c:23:94:c7:69:fd:77:70:
27:f1:e5:d0:bc:1c:f3:1a:20:74:d0:e5:5f:95:a7:
a4:16:5a:5d:fb:6e:80:39:a5:ab:ff:02:57:7c:98:
32:cd:66:45:3f:9f:28:58:b8:7d:3f:19:42:71:cd:
28:2e:a8:c5:c4:8c:fc:20:a4:fa:b3:79:40:0e:a5:
6f:0a:d8:cb:45:73:af:37:6a:7a:d4:2e:d5:f4:2d:
6d:08:de:e2:88:7c:47:ef:ad:63:95:66:fa:ab:f7:
ef:21:30:51:57:f6:f1:a2:26:a2:be:21:bd:23:89:
09:33:7d:8a:1d:a6:6c:97:3a:ee:f9:ed:a8:c4:88:
b3:0e:f3:b4:a1:79:91:c9:04:23:f2:53:87:07:7a:
f6:39:92:91:ff:b1:89:17:1a:f8:c4:07:a4:22:80:
71:f9:ef:2d:a7:cb:52:a8:ff:57:ea:95:6e:1d:67:
93:66:ce:17:05:97:93:33:e8:d7:40:98:45:0e:e0:
6d:e0:04:19:b1:cc:e9:60:dc:79:84:65:e3:c3:45:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C8:8D:C4:AF:D1:33:CD:B6:73:C2:B0:78:9D:A9:B4:87:CE:AD:9E
X509v3 Authority Key Identifier:
keyid:F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e3:1d:78:a2:8b:63:4d:84:86:e1:da:98:b0:6b:17:de:50:
62:3f:81:70:5b:85:73:d7:23:7b:5c:4f:8f:1b:fb:7d:46:f5:
13:df:4b:aa:00:4c:1e:7d:63:f1:44:02:d2:8c:aa:09:1b:51:
a5:61:9e:f1:02:00:3a:33:38:a0:3c:53:21:93:6f:b1:27:51:
a7:84:a7:62:60:28:4b:84:74:b1:52:b8:35:27:e4:23:dd:b4:
98:13:72:d9:31:ae:7a:a1:b8:d5:01:ce:34:e7:89:3b:51:5e:
6d:7f:63:7b:be:43:8f:e3:60:43:e9:ad:1e:38:36:ed:b1:01:
aa:cc:1a:fd:40:9f:9f:5d:bc:8b:69:22:82:af:92:bc:0a:60:
e3:fc:f4:46:53:65:08:40:03:03:6c:c3:46:f5:88:4f:36:de:
5a:be:47:71:79:46:02:18:64:9d:8c:2b:bd:c2:91:f3:2e:e8:
8c:cf:aa:74:f7:3e:22:f5:6c:a8:ad:cf:f6:df:5a:4a:c7:57:
f5:c5:7e:f8:e9:95:ad:c0:ce:7c:bd:28:5d:07:2d:30:92:f2:
ea:32:ca:ab:8a:11:b2:9a:d2:32:ca:af:ba:0e:92:a2:55:34:
41:82:af:49:bf:11:38:55:6a:0f:6c:4b:71:9b:cf:bf:a6:62:
ae:3c:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:20:45 2026 by rpki-client