Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: sxSIDf2SkkZ/1e7XzjtUl4TL/3NZESkNgZ5y3iEbWTU=
Subject key identifier: 98:83:58:EE:E1:CF:2D:9D:02:86:10:6E:1D:61:06:71:1C:62:A2:66
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 01A1103AED986CEA3872AAA4B6670BD6AFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 1AA8
Signing time: Tue 06 Oct 2026 08:00:59 +0000
Manifest this update: Tue 06 Oct 2026 08:00:59 +0000
Manifest next update: Wed 07 Oct 2026 08:00:59 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: qL0JMwNMm24z71Ouf3ezIL7Y3DHG0Faikg3zr+0lgHw=)
4: CBb_QUmnyPXNyR2rB5w8NXHg72U.roa (hash: bD1I4HJtFjaX/Nr5+DpgVpAOzK/Hlp8fWNP0ho2Ow6s=)
5: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
6: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
7: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:3a:ed:98:6c:ea:38:72:aa:a4:b6:67:0b:d6:af:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Oct 6 08:00:59 2026 GMT
Not After : Oct 7 08:00:59 2026 GMT
Subject: CN=988358eee1cf2d9d0286106e1d6106711c62a266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:b1:d7:ed:85:6a:0c:0e:35:58:c3:a5:e5:
fe:8f:a4:9c:ec:0e:66:00:d0:9c:01:35:2d:79:2d:
0c:63:80:53:d0:cf:7b:b8:e9:1d:a9:3e:56:30:b6:
ce:26:d0:46:be:7d:69:81:a2:2b:f9:65:ad:da:64:
90:12:10:b5:d9:b0:ea:2c:53:88:a2:a1:ce:5c:bd:
ce:5f:80:a9:66:09:e9:1f:45:bc:b7:ba:bc:45:3d:
c4:32:12:db:d5:6a:11:49:43:5e:3f:e8:9b:72:9a:
65:4f:c7:a0:0c:1d:4e:6d:5a:b7:53:5e:2f:a1:ba:
3a:ff:f6:22:ea:e7:37:42:9b:c7:cf:26:b2:41:b5:
3f:44:8c:5d:25:d0:3f:88:c1:42:ad:07:6e:d1:07:
41:81:ad:4c:bf:c8:76:d3:58:9e:66:f0:8e:03:c2:
06:6e:c2:7b:0f:d9:7c:19:0d:6a:93:cc:5d:2d:5e:
5f:4f:56:4e:f8:73:77:8e:03:ba:32:01:09:e6:3f:
c7:03:6b:ae:5b:80:28:73:fe:11:62:f8:c4:76:7a:
e4:e5:56:e1:8b:7b:98:b0:84:0f:ed:02:4a:42:cc:
eb:3f:07:98:bb:21:e1:85:49:e8:bf:ee:cc:fe:e9:
79:3e:3a:6e:ce:59:43:84:b5:05:f6:7d:81:90:18:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:83:58:EE:E1:CF:2D:9D:02:86:10:6E:1D:61:06:71:1C:62:A2:66
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:05:95:c0:25:7e:dd:ee:1a:16:c3:66:db:b1:ed:96:69:cc:
87:40:b2:18:bf:4e:6e:43:52:42:ae:b1:10:c7:66:89:67:96:
2e:68:aa:c3:1f:7b:5e:f8:01:f2:a3:fa:ed:a5:c8:17:7e:bf:
2a:75:d7:66:67:2c:7c:5d:18:80:1f:9a:b8:c5:b9:de:81:55:
33:1c:37:02:f0:20:c5:0f:c7:77:67:fe:db:1b:57:a7:2c:39:
00:17:76:c2:6f:4a:b7:7f:06:ae:a5:5d:d7:f1:43:50:d1:dd:
ee:e8:66:dd:44:09:9b:8a:20:b9:e3:b0:cc:0c:c0:cb:34:0d:
f1:8e:70:80:6c:f4:79:32:00:03:04:45:3e:c2:db:ef:f3:71:
e7:11:e6:64:b8:6a:21:9e:f4:a6:e9:8b:aa:0f:ae:23:1a:bf:
a3:e2:1f:5a:a6:e6:69:82:88:b0:48:1d:71:c9:5d:7a:c7:7a:
79:df:4f:d8:a2:4e:6f:54:59:fd:54:bc:33:41:b4:a0:57:f8:
b1:7a:4e:07:52:2c:b6:e6:9b:9a:8b:09:33:9f:ca:b8:02:a9:
f0:36:ee:0b:45:25:6b:4e:6b:d3:95:47:86:fe:1e:0e:0e:8c:
7e:5e:d2:1c:77:1d:2a:52:12:cc:48:f9:15:69:e3:86:31:f4:
ea:05:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:45:59 2026 by rpki-client