Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: RBGfP2KjnR2peloOG8gNblUPDyundTSyOkorIdY23d0=
Subject key identifier: 3A:9D:06:94:44:DB:42:9B:95:33:87:08:38:A5:6C:B9:74:23:EE:A5
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 01A0CD10EFD17D5261D54DBC84E76FEC635B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 0E4B
Signing time: Wed 23 Sep 2026 07:00:34 +0000
Manifest this update: Wed 23 Sep 2026 07:00:34 +0000
Manifest next update: Thu 24 Sep 2026 07:00:34 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: yle1Fx2fbDvWD1gaYGI4KI76nuM8fqXi36v35aWCqo4=)
2: sIunFd-UhDIY2he6578HnH9KYM4.roa (hash: cM+uL/KniFpxQyhA1SMW/C3f3nO1DxP+MeewVaQ/1Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:ef:d1:7d:52:61:d5:4d:bc:84:e7:6f:ec:63:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Sep 23 07:00:34 2026 GMT
Not After : Sep 24 07:00:34 2026 GMT
Subject: CN=3a9d069444db429b9533870838a56cb97423eea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:d6:5b:e3:8f:0e:eb:34:e7:04:14:70:4d:
93:9a:39:33:bd:91:83:fb:87:a5:b6:bd:c1:04:cb:
cc:d2:a4:3f:3b:13:d0:fe:58:73:92:8c:d8:cf:87:
a0:f2:ab:cf:78:7f:72:c2:0d:c5:51:e3:30:48:75:
77:e5:5c:d5:66:fd:65:01:f0:9f:a4:71:a7:c2:7c:
e4:e2:ea:66:30:a2:8d:fd:d7:79:26:8a:2e:44:6f:
2d:7e:d7:df:bf:80:c0:9f:ce:46:ed:ee:1d:ec:c2:
7c:c8:f1:ef:d1:86:69:71:0a:69:ea:19:38:a1:94:
43:1d:d6:e7:9e:af:c4:cf:e7:57:f0:5f:90:43:0c:
6c:e7:3f:7b:a4:a5:4d:2b:de:50:3e:fb:0a:67:ba:
bf:d4:98:79:69:e4:60:7d:8f:3f:28:f0:47:df:54:
fc:54:d3:20:9e:0a:02:0b:66:d7:ba:21:ab:47:c3:
dd:e9:20:f3:08:7a:de:f6:59:ac:c2:b2:70:65:a6:
1a:c1:a8:24:e2:a0:d5:10:31:09:05:2f:69:d5:5b:
20:f5:59:e0:cf:5a:99:97:5f:5f:5a:fc:fc:94:97:
c1:d1:7b:f5:07:1a:0d:9a:ac:19:f6:e5:6e:61:a0:
a5:52:e6:24:d6:e0:fb:db:d4:9e:00:91:e9:de:b1:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:06:94:44:DB:42:9B:95:33:87:08:38:A5:6C:B9:74:23:EE:A5
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:61:27:ba:5f:fc:47:f0:17:a3:00:d3:be:d4:70:ce:b2:2b:
19:95:a6:46:94:cb:ee:72:9a:12:d7:97:1b:88:1b:bf:0b:72:
34:5a:0a:8b:9e:49:a2:6c:5a:14:26:64:8e:3a:a9:f6:dd:b9:
40:25:35:fa:4d:1c:cd:b1:10:bf:43:4b:86:d1:78:2c:c3:d3:
00:ee:cd:ad:60:c0:83:94:92:04:c1:b0:d1:8e:c4:54:be:70:
34:25:28:01:6f:91:4c:68:be:44:0b:e3:a4:a9:57:6f:0f:1d:
86:22:e0:56:cd:ad:8b:ce:ac:9f:66:4c:de:08:b1:0a:b0:59:
99:a1:c6:8e:72:de:6d:cb:9d:8a:20:ff:e8:58:8f:8a:ca:0e:
9e:45:1f:3b:24:c9:e8:9f:34:eb:e1:14:db:65:77:bb:2c:4b:
3a:db:a1:07:4f:aa:b1:7b:f1:b2:bb:b2:df:e2:43:3f:22:84:
b5:bd:90:35:b6:1c:29:36:8d:8b:1d:a1:53:4b:47:00:66:13:
82:1b:4c:f4:b6:90:9e:4b:c7:65:61:67:07:4b:a4:88:83:0e:
0d:08:ba:5d:ff:d1:88:92:c3:3c:fb:b4:f2:fe:5e:54:2d:84:
4f:d1:d9:81:5b:0d:e6:3b:46:5f:92:d7:7c:97:e2:79:2d:b7:
06:2e:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:32 2026 by rpki-client