Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: Q4KIiSHhX5RtYhnEJ4HdgDJeceFGUM9zk51OvoqG808=
Subject key identifier: 4A:43:55:32:86:DB:DD:3C:57:E8:21:63:A1:C3:B8:16:54:0F:48:96
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 01A1160554B4CA682CC378C1BF291C80B2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 1AAB
Signing time: Wed 07 Oct 2026 11:00:10 +0000
Manifest this update: Wed 07 Oct 2026 11:00:10 +0000
Manifest next update: Thu 08 Oct 2026 11:00:10 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: 2GSCCnemOA8/FwiSbrbLq8C3/0htwFU1b2rRoXRLJZg=)
4: CBb_QUmnyPXNyR2rB5w8NXHg72U.roa (hash: bD1I4HJtFjaX/Nr5+DpgVpAOzK/Hlp8fWNP0ho2Ow6s=)
5: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
6: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
7: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:05:54:b4:ca:68:2c:c3:78:c1:bf:29:1c:80:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Oct 7 11:00:10 2026 GMT
Not After : Oct 8 11:00:10 2026 GMT
Subject: CN=4a43553286dbdd3c57e82163a1c3b816540f4896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:5e:8f:32:26:98:14:8c:4c:f2:dd:d8:0b:
27:b0:ec:da:ae:13:1f:5d:45:05:c4:99:25:19:14:
da:7e:88:31:99:e9:65:6a:b0:ca:4b:69:50:27:b8:
48:c6:1a:20:90:74:3e:5f:7f:8b:43:65:53:0c:7f:
5f:21:36:8c:19:98:38:8e:ac:8c:03:28:52:7b:fb:
8b:6e:88:ef:f9:50:7f:a7:d6:0e:de:dc:c5:2c:65:
f8:d3:a7:07:98:15:c9:2b:22:0d:cf:b7:2a:35:af:
2f:ad:d2:b4:bc:74:8e:31:a5:56:96:9b:8e:8f:cc:
6f:97:42:2d:97:14:c9:7b:03:20:29:a8:f5:d7:bd:
d4:d3:14:2b:bd:90:23:8b:7a:3b:57:7d:13:33:86:
a4:ec:91:7d:5c:9f:3d:d7:f6:f3:da:0c:bb:f2:00:
e9:94:24:67:f5:44:87:e0:7e:0c:96:9a:18:5e:0d:
32:0c:f6:99:04:82:2a:c4:ab:bf:5e:01:2a:5b:c7:
f8:c0:9e:c2:73:83:88:b2:ac:fb:d9:bf:0f:91:db:
32:2c:de:cb:c7:3e:3f:93:5f:8c:98:fb:93:11:4e:
af:45:5b:75:e3:21:f0:2b:bd:2b:ab:59:dc:8f:f9:
91:c5:73:e8:e8:aa:ad:e0:d5:dd:3b:8c:ae:62:a6:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:43:55:32:86:DB:DD:3C:57:E8:21:63:A1:C3:B8:16:54:0F:48:96
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b1:65:6b:0a:00:41:f1:87:4d:cd:5e:bf:fe:29:d5:ac:95:
54:c8:75:b8:a9:69:b6:8a:23:e5:61:9d:f9:5e:0d:d4:39:3a:
82:35:f8:42:9c:1f:88:d9:1a:2d:e3:3e:bb:9e:29:53:dd:5d:
b7:40:f7:ba:86:b7:ee:5a:06:55:a1:c1:7c:35:3c:e0:e8:e5:
2a:0e:88:a7:d9:9e:b5:c0:2c:bb:0f:78:2a:05:2b:d7:f0:71:
7a:12:f9:51:f6:dc:2b:56:ff:8d:98:9c:b1:66:68:33:63:91:
99:60:9a:56:ea:a4:dc:d7:ca:75:bb:f6:ce:cb:65:56:39:e2:
c3:15:c4:b1:d4:5a:3f:6f:dc:18:bf:c0:14:b8:fa:7f:0b:1e:
14:b4:e2:67:eb:48:37:7c:7b:a9:e2:22:c7:2c:05:f6:c6:36:
b4:0c:e5:79:d6:53:40:6b:34:8f:bd:ae:6f:8a:5d:28:ed:3c:
d9:09:5d:f5:fb:51:ae:ad:b7:bb:cd:cd:ff:61:9d:d4:60:10:
e0:28:69:4e:e6:45:59:8a:dd:aa:a2:f9:06:b9:a8:92:ff:06:
93:23:0e:51:03:74:37:be:7b:33:51:9b:f7:52:b6:24:ee:e4:
eb:25:b3:ea:37:c1:dc:09:7f:1e:cd:86:c4:fb:bb:ad:9a:07:
a3:83:3a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:09:50 2026 by rpki-client