Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
File: 9uGk5drZ5MwU4BaRDsS2adXjq5w.mft (raw, json)
Hash identifier: udtf7Qp6bqPG1QuvU4boeXXWVuMvkIrdgXKs8CDPlbU=
Subject key identifier: D2:7F:71:EF:F4:05:D5:4B:64:EA:11:4F:B5:EE:77:E8:7D:0D:9D:8C
Authority key identifier: F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
Certificate issuer: /CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Certificate serial: 01A12956598517A0F108E46A031AFD87B1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
Manifest number: 02B7
Signing time: Sun 11 Oct 2026 05:01:27 +0000
Manifest this update: Sun 11 Oct 2026 05:01:27 +0000
Manifest next update: Mon 12 Oct 2026 05:01:27 +0000
Files and hashes: 1: 9uGk5drZ5MwU4BaRDsS2adXjq5w.crl (hash: gjqgK7DcKjzjxPn5GmT9jC1152fF1bC9nBouiEXgx5o=)
2: H_uYynhuG6l8wZqNzHCCCngrv6I.asa (hash: cNBW9xKMdJGhXlb3YQvmEsKCGDZEJR6jaSu58wTwgns=)
3: SRCK7Ufu64KsijFRcRFiAbmnlfM.roa (hash: r3tIqkepOEqyJpInWtiArXc2WfvA20Y21WU/4jD8OPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:59:85:17:a0:f1:08:e4:6a:03:1a:fd:87:b1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Validity
Not Before: Oct 11 05:01:27 2026 GMT
Not After : Oct 12 05:01:27 2026 GMT
Subject: CN=d27f71eff405d54b64ea114fb5ee77e87d0d9d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:c7:8e:26:c4:6d:1e:98:99:15:2d:55:5a:
a1:14:60:ed:19:45:6e:6d:2c:6a:25:cb:39:be:cc:
97:9b:be:6f:d6:4c:aa:12:8a:7b:8f:f1:0d:ca:2e:
0e:c0:9f:85:16:b6:86:d5:85:f7:5b:c9:4b:10:bc:
b2:f8:2f:43:34:d5:85:af:24:5e:a7:d3:e3:b1:26:
53:5d:5b:53:8c:42:c5:4f:56:38:06:c9:5d:2e:4a:
c1:1e:30:09:ad:7a:fe:c7:f1:db:ec:6f:8a:5a:ac:
61:f4:ea:85:8c:52:b7:02:2b:aa:a5:ab:0e:a7:44:
5f:70:5a:22:8d:2e:6a:04:63:53:bc:ed:f5:0a:c1:
c8:74:39:fc:47:a0:df:da:8b:cc:7f:e0:47:8a:f4:
83:d1:c3:08:9f:c8:33:04:67:a5:9a:bd:96:31:fd:
91:b4:89:a2:89:24:77:92:c5:53:b1:8c:43:b3:41:
ce:d5:f3:ce:44:d1:78:1c:d4:47:4d:6d:b1:1b:03:
32:1c:8e:36:3f:ef:ff:e8:fe:c2:c4:e1:e6:ff:73:
a5:fd:cd:ec:ee:6e:9a:41:06:01:df:92:a5:ff:d1:
22:ff:a4:72:1e:47:40:e3:c5:2c:fc:ab:88:cb:1c:
17:dc:6a:eb:72:d1:e3:77:a4:3e:4b:12:78:de:38:
37:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7F:71:EF:F4:05:D5:4B:64:EA:11:4F:B5:EE:77:E8:7D:0D:9D:8C
X509v3 Authority Key Identifier:
keyid:F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:72:d8:c5:f9:df:d5:84:80:99:a2:f4:c5:5b:f6:aa:87:41:
6a:70:97:32:fa:df:f0:aa:b4:7a:0c:67:e9:4f:25:c2:a3:db:
5b:a1:40:ec:c7:69:ac:d3:2a:1f:5b:49:36:fd:0c:1a:c7:26:
d2:2e:d9:78:94:a6:df:0a:6c:03:80:16:15:68:31:94:28:40:
10:1f:76:ee:cb:2b:7b:09:cc:52:bb:eb:5a:01:8b:8f:da:b8:
bb:61:24:a6:40:8d:0a:74:9c:48:76:53:be:51:71:6c:68:08:
51:cb:17:c4:42:d7:0b:36:54:d5:e8:7e:a9:82:f2:59:b4:1d:
04:7e:35:7d:93:6c:71:d9:df:4e:b4:c0:2b:d0:c1:51:b2:5e:
b0:c1:30:61:69:21:2b:51:74:73:5d:e5:80:c7:6f:f9:05:20:
28:fc:7b:c0:55:b6:de:05:44:15:cc:95:7f:c9:e4:f1:7a:59:
a4:85:bc:4d:a1:11:54:23:a3:eb:09:77:e2:73:9a:52:47:3c:
5f:f2:ed:a3:e1:bb:c0:a2:5a:ef:91:7b:6c:b3:e6:66:40:65:
2f:91:11:f0:73:76:84:c1:83:8c:fb:2c:a0:d1:50:72:b6:f6:
5c:f6:0f:b7:d5:f7:c8:8c:f5:79:3a:65:6c:a9:18:fa:61:9a:
08:42:9a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:35:13 2026 by rpki-client