Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: er0/5LmfupXUHMc4F2Ac9Uh4cCdOZjIqEvTU4SEk4Sw=
Subject key identifier: 7F:E2:CA:07:74:0E:13:E0:46:0F:7F:23:D1:20:BD:E3:C7:98:8C:29
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 01A12541F96B52C459F9A9996303FFCBF5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0EC1
Signing time: Sat 10 Oct 2026 10:00:42 +0000
Manifest this update: Sat 10 Oct 2026 10:00:42 +0000
Manifest next update: Sun 11 Oct 2026 10:00:42 +0000
Files and hashes: 1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: CV1462X5m76dVHz6xsChCIWnGL7aYs1d6P0KpEENTUA=)
2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:41:f9:6b:52:c4:59:f9:a9:99:63:03:ff:cb:f5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Oct 10 10:00:42 2026 GMT
Not After : Oct 11 10:00:42 2026 GMT
Subject: CN=7fe2ca07740e13e0460f7f23d120bde3c7988c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:46:86:ee:8a:7d:99:27:c9:de:b5:a9:25:
4f:26:22:38:05:87:d5:83:2a:e6:0a:d2:75:f0:03:
cd:d2:8a:77:89:80:f4:0e:11:b7:2d:3a:b7:9c:5e:
3e:85:b4:2b:3b:70:7a:e9:9e:2d:36:f7:af:d7:97:
ff:ec:07:f3:06:e1:33:11:6e:ed:c8:38:09:1b:0e:
ba:81:74:f6:84:1b:42:ae:97:c5:bc:6c:29:92:e2:
65:f6:c2:83:d3:5f:27:50:fe:5f:8d:8c:72:82:21:
a3:8b:da:e0:37:1d:6f:21:87:41:02:4e:db:5d:f6:
6d:d3:28:2f:da:03:a4:a9:7c:96:08:76:34:66:d4:
2d:5b:bf:83:3f:b3:a6:c3:a2:c4:51:7a:d8:3f:e0:
71:ee:c5:61:63:24:e8:ac:c3:d2:cf:d9:e5:30:b2:
94:68:cb:7e:a8:bb:09:12:6a:5b:eb:b4:bb:97:a8:
92:16:cb:7d:61:a6:51:2e:23:e3:a2:bd:e7:41:e3:
ae:e5:08:25:9f:c9:61:7f:35:28:44:8b:f3:72:d7:
15:b7:60:d6:ef:ce:b5:4d:c2:17:d4:f4:05:7f:e0:
13:50:84:93:b9:e9:3c:f8:d1:95:58:9d:70:a3:02:
81:7c:c7:09:9d:28:e2:7b:e5:5c:34:c6:5d:f1:25:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E2:CA:07:74:0E:13:E0:46:0F:7F:23:D1:20:BD:E3:C7:98:8C:29
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fe:1f:05:d7:59:07:53:d0:d3:b3:88:ad:ef:8a:e0:df:24:
0b:53:61:8a:73:ef:a1:17:1f:4e:9f:b4:b6:cf:f4:af:6c:a8:
87:71:fd:92:08:52:76:c6:3c:0a:3f:0e:f9:cd:48:50:72:cd:
31:21:e8:ed:ea:a0:45:b8:1d:9d:0f:40:67:85:1c:e3:34:91:
6d:49:79:18:c8:ac:c9:13:86:9d:e8:6e:c0:d2:94:60:b9:b1:
b7:18:0a:e4:cb:52:fd:40:d7:a2:62:fc:8a:8f:c1:ba:19:61:
73:6a:1b:05:37:7c:14:1c:5e:9a:22:fa:78:91:2d:7e:67:2a:
35:49:ce:d6:9b:ce:f1:36:85:31:f5:98:66:4f:d5:8d:72:de:
63:ca:c2:5a:d9:c5:e1:20:5b:8a:03:d5:02:91:69:d3:61:cc:
8c:52:52:78:02:02:52:0d:e8:ff:60:f7:93:98:02:24:80:2f:
81:00:68:a3:a1:60:fe:70:56:f3:5e:9f:4c:a9:fe:d6:e4:dd:
40:4f:79:55:d7:c4:8c:d0:d2:4b:98:0c:03:ec:cf:e4:c1:4f:
6a:d2:e3:55:77:88:63:1e:fe:fa:c3:89:cb:c8:a0:ac:82:c6:
9c:f1:cc:b9:56:bf:dd:ed:db:4f:4b:e4:aa:51:6a:51:01:c0:
fd:87:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:25:53 2026 by rpki-client