Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: zxxk7pKEhaKnkiHv1ijHkEkFaCteKA0XpBr7xBVMiBY=
Subject key identifier: 43:F6:00:54:94:7F:EF:6F:D6:A4:55:7F:E8:61:E1:9F:C5:29:09:06
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 01A14083174CA45EA0C337E84FD7126F64B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 138D
Signing time: Thu 15 Oct 2026 17:01:35 +0000
Manifest this update: Thu 15 Oct 2026 17:01:35 +0000
Manifest next update: Fri 16 Oct 2026 17:01:35 +0000
Files and hashes: 1: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (hash: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8=)
2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: AmdgOCCGZJAESDktf6UtUTrEZcAZRdraQr/gXGLa/Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:17:4c:a4:5e:a0:c3:37:e8:4f:d7:12:6f:64:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Oct 15 17:01:35 2026 GMT
Not After : Oct 16 17:01:35 2026 GMT
Subject: CN=43f60054947fef6fd6a4557fe861e19fc5290906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:21:92:43:8f:12:08:25:d1:1f:f2:f8:53:
ea:5a:ec:60:91:14:b7:94:13:d1:fe:a3:16:24:c8:
2c:ec:76:cb:6b:e9:86:06:b3:ab:ba:86:1e:88:d0:
f1:78:29:78:e6:e2:b7:14:37:18:15:69:90:b8:f3:
13:e8:71:8a:8d:15:bf:c8:46:85:40:49:80:44:23:
1b:59:37:28:35:bc:1a:bd:52:3a:b2:96:91:36:e6:
6c:1a:a7:6b:cb:6b:a8:7a:f6:4d:f0:d6:f2:d7:4c:
54:79:8f:c2:ec:83:fc:6b:e4:80:ed:1e:49:ae:d3:
02:44:ca:57:3f:6c:d9:98:a8:f5:b3:15:0d:10:74:
db:e1:2f:46:34:70:58:32:70:1c:dd:3c:6d:ec:3f:
a6:00:88:b3:e0:f3:c4:f3:90:fd:e4:53:fe:5a:2b:
26:3b:33:01:76:92:7d:8a:83:56:18:95:a7:5c:f7:
ee:e6:df:a2:02:cc:fb:61:ff:62:61:f3:65:fe:cf:
83:14:a0:72:5b:84:8e:ae:a8:9d:9b:14:91:3a:d9:
01:6f:5a:a1:cd:51:75:fe:00:07:e1:fc:05:b9:06:
d2:8c:b0:3b:23:dd:6b:13:19:52:93:1a:ee:70:eb:
ac:f4:6f:f0:02:8b:08:5c:72:e8:19:97:de:62:74:
d5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F6:00:54:94:7F:EF:6F:D6:A4:55:7F:E8:61:E1:9F:C5:29:09:06
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2c:25:01:ae:fb:a1:db:0d:bc:4d:81:2e:57:1d:e4:91:71:
47:b8:fe:e6:7b:43:7e:2c:1f:0c:4a:63:0c:7c:80:70:1d:a1:
12:02:9e:ef:1b:cf:3b:67:ce:fb:af:c4:97:73:08:ba:09:f4:
37:10:a2:56:6b:53:83:ce:84:d9:c6:eb:19:a6:66:3f:5e:6e:
db:6b:41:86:99:54:b0:52:00:b0:40:c4:03:29:36:04:16:4c:
d6:7b:09:59:1c:04:95:f1:44:c1:e7:82:18:0c:8f:84:c5:fe:
02:08:1e:44:4f:cd:6b:02:65:26:e9:7f:50:7b:f3:79:d7:c4:
f5:82:cc:8b:0e:ca:cc:1a:80:1e:e6:9d:74:19:db:62:f2:7d:
8b:33:1d:e1:32:cc:da:78:03:9e:3b:10:2b:9d:7f:8f:cd:30:
4a:cc:bd:6e:eb:3c:86:dc:eb:d3:30:fd:54:77:83:ac:15:5c:
55:8f:7c:95:aa:a3:f9:e3:45:95:22:f5:46:15:27:52:bb:14:
b1:10:60:95:fc:38:50:bf:a8:56:54:01:88:b2:48:39:26:5b:
f1:e5:fa:3f:38:ea:e5:2a:66:3f:29:e9:ea:0d:b2:90:23:bf:
03:76:a1:21:0d:92:98:c7:01:25:59:30:9d:05:b5:38:9b:e5:
f7:ba:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:52:29 2026 by rpki-client