Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier: AcfCdCipOL5MrwHSs+pV5S/t6QTqRMs+ur+0Gr7Qc6A=
Subject key identifier: 20:A0:59:3F:9C:42:CF:39:0B:AB:36:11:C5:FA:5B:CF:C5:36:55:BD
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 01A13D4A87B85CA9F7BEE4253FA10818DB60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 02:00:56 +0000
Manifest this update: Thu 15 Oct 2026 02:00:56 +0000
Manifest next update: Fri 16 Oct 2026 02:00:56 +0000
Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: 1Tg5Og7GmKqqmaG0YfbRFFgJqQPTUp25DY7KKax6HOA=)
2: sB9rgefHa3sSt6ZYnW1BwCOgmaU.roa (hash: svJIfKZ/TOmm8xXRzXlM/7QXfhtfTNna41fpYKpF970=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:87:b8:5c:a9:f7:be:e4:25:3f:a1:08:18:db:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Oct 15 02:00:56 2026 GMT
Not After : Oct 16 02:00:56 2026 GMT
Subject: CN=20a0593f9c42cf390bab3611c5fa5bcfc53655bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:36:c6:1c:8b:b3:bc:4e:c3:d8:bc:c9:b7:
88:d4:a5:6a:4a:47:2d:9e:0e:17:13:19:ff:c8:7a:
7b:3e:56:0d:41:e1:04:7e:c0:e1:61:f9:5c:a7:7c:
30:e5:bf:39:f5:53:d8:50:24:f6:7a:bb:10:d1:b6:
48:2c:6f:bb:43:2e:ca:8e:9e:d1:4f:df:40:3c:23:
64:f5:3b:3e:b0:6f:5d:a8:dd:22:7c:a9:e3:69:87:
cf:e6:0a:69:9b:3c:59:bc:82:84:1a:dc:a8:81:8b:
d0:0e:21:5b:a1:df:01:e2:75:0a:0e:93:56:39:f1:
1c:46:33:c9:4e:9e:fa:ed:53:1c:c3:b2:0e:05:d5:
6a:b0:ec:94:17:45:a5:7e:4e:9d:f2:17:8a:79:91:
d0:ed:1c:27:e4:04:ba:cf:4f:db:e0:cd:aa:ff:90:
5b:ba:14:9c:fd:08:18:f2:ae:3b:74:5f:ab:61:24:
3b:50:2e:b5:41:eb:60:77:e5:17:78:0a:84:21:48:
23:6e:3f:7e:e5:7e:9b:b9:80:7c:53:0b:94:cf:5c:
9d:e5:86:e8:c4:fd:c0:70:58:d0:82:08:9a:3c:67:
7d:d1:d7:a9:b8:35:07:78:67:9e:48:9d:1b:e8:f5:
83:6b:9f:0a:cf:87:4c:1c:50:2d:86:97:87:20:bf:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A0:59:3F:9C:42:CF:39:0B:AB:36:11:C5:FA:5B:CF:C5:36:55:BD
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e1:b3:1a:fc:6c:39:ad:72:d4:5c:71:7f:83:c0:c1:c8:f2:
d8:2f:1b:b5:37:ea:26:08:03:03:37:3e:56:cd:66:54:96:ab:
31:5b:55:33:e2:3c:1b:b2:e1:92:8f:5a:3d:ac:5e:f4:5c:5b:
1e:1b:af:04:e3:71:85:9b:6f:20:9a:66:58:8d:9b:91:9d:fb:
2b:57:65:96:f6:5d:e9:ca:fb:89:9e:04:dc:18:86:da:83:8f:
35:3a:e4:d4:ae:42:85:a9:d6:b4:6a:ed:6e:bd:14:ee:27:84:
7d:48:2b:2b:d8:d6:e7:da:c7:ad:74:e7:6f:40:d0:0a:8d:8d:
e3:d4:06:31:ed:f6:f0:ba:01:5c:04:dd:9d:ab:1e:4f:e3:98:
61:b3:8f:44:2b:13:9d:65:c3:19:aa:cb:fa:92:0e:ac:6f:18:
78:27:86:40:50:58:45:24:7d:15:2c:0d:92:9a:17:50:13:13:
9e:9b:ef:f8:9f:82:fe:56:e9:ee:79:37:5b:cf:58:dc:23:08:
d5:bd:44:17:af:5e:f5:23:f4:bf:50:8e:66:66:f8:db:89:31:
80:c3:9e:07:ae:a7:d3:2f:45:ff:57:79:eb:7c:ff:b2:91:40:
91:c3:c1:4b:19:d2:ce:46:12:f8:19:04:44:ae:33:53:0e:a7:
42:49:69:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:39:34 2026 by rpki-client