Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
File: a09TDEYWY1E1ClclpwD7xdcchoA.mft (raw, json)
Hash identifier: Rj2qFSJHwhF4jWCS0HYLa0rmjVZMcEFCVuPFwQyFhEs=
Subject key identifier: F2:9C:1C:FF:F9:AF:74:27:FB:85:9B:20:08:86:41:C5:26:4C:D3:06
Authority key identifier: 6B:4F:53:0C:46:16:63:51:35:0A:57:25:A7:00:FB:C5:D7:1C:86:80
Certificate issuer: /CN=6b4f530c46166351350a5725a700fbc5d71c8680
Certificate serial: 01A06F15128B6301D48F1B0C9F0AD5420E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
Manifest number: 41
Signing time: Sat 05 Sep 2026 01:00:46 +0000
Manifest this update: Sat 05 Sep 2026 01:00:46 +0000
Manifest next update: Sun 06 Sep 2026 01:00:46 +0000
Files and hashes: 1: XqJMbW2vk4W1hoGUE-ij3mmWaU8.roa (hash: wwjL59OW3UC7V7CAOSmVDLYL1/AFybNZY6xPPQkXT94=)
2: a09TDEYWY1E1ClclpwD7xdcchoA.crl (hash: nmI2FGgrRwHUtWcIm80VUifkJnGF6JCABj7VRNlX6tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:12:8b:63:01:d4:8f:1b:0c:9f:0a:d5:42:0e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f530c46166351350a5725a700fbc5d71c8680
Validity
Not Before: Sep 5 01:00:46 2026 GMT
Not After : Sep 6 01:00:46 2026 GMT
Subject: CN=f29c1cfff9af7427fb859b20088641c5264cd306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:44:5f:51:af:98:99:ca:7a:5a:e6:d0:d5:38:
34:6a:67:ac:88:ac:39:2e:5e:c8:62:aa:09:2c:f9:
ef:74:5c:61:3d:4b:b6:88:98:bf:a2:09:6c:90:2f:
80:58:6e:54:1c:5e:09:f4:78:ce:15:7b:3e:f0:eb:
ea:1e:07:02:68:7a:65:55:60:47:8b:2a:f9:4c:a6:
1b:a4:39:14:9b:d0:3f:33:ad:f6:95:f2:90:1c:5d:
ea:74:4b:fe:b2:7a:57:04:d2:dd:3a:6f:2c:d4:8c:
ab:26:c2:0f:4a:be:f7:a0:c0:62:fb:bc:f6:26:2c:
64:e8:0b:98:84:67:28:db:b6:43:3d:b9:5c:7e:42:
74:e8:bc:c5:25:a4:7b:49:43:66:e3:42:79:61:7d:
c3:be:7e:2c:81:f1:68:de:a2:92:06:42:79:8d:3b:
ea:c4:55:1c:e1:00:06:ef:2f:75:33:2d:d4:55:7e:
25:08:f3:18:ce:ce:de:a9:3a:c4:f0:e8:d0:b3:ae:
ac:49:b3:f1:d0:45:5c:2f:ce:34:a2:66:2c:d8:24:
2c:88:7b:69:f7:2f:ba:c6:f0:1a:7e:9c:79:5f:c1:
7f:43:02:65:bf:92:36:a1:ed:89:43:48:a7:1c:cc:
69:de:5c:03:a1:b3:3d:a4:ab:5a:85:89:1e:f2:99:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9C:1C:FF:F9:AF:74:27:FB:85:9B:20:08:86:41:C5:26:4C:D3:06
X509v3 Authority Key Identifier:
keyid:6B:4F:53:0C:46:16:63:51:35:0A:57:25:A7:00:FB:C5:D7:1C:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9c:1f:3e:90:b3:fb:69:d6:d6:af:1d:c3:af:01:55:27:27:
f6:36:ec:a1:f5:e2:86:1d:1d:df:96:c6:75:a9:8b:ee:5d:a6:
a3:91:c3:e1:b3:ca:e5:ef:9f:f6:3f:10:43:a0:ff:a0:da:96:
c1:c8:fc:3b:97:8f:33:1e:39:d2:6f:43:2b:d8:a5:d7:bd:98:
6c:ff:64:74:0d:58:f1:6a:4a:a7:58:21:89:d0:b0:93:75:fd:
94:23:f6:2d:bd:a2:03:4a:db:b4:83:6d:c3:f9:88:20:e1:39:
26:fd:87:e1:27:6a:ff:c5:1d:bc:33:0d:c9:f0:4b:38:b7:30:
9b:91:fa:c6:5c:0f:d1:9e:df:3c:8f:ee:b6:ed:ae:c6:ce:5a:
f0:92:19:f5:2f:a9:74:08:5c:49:cc:c3:18:1c:bc:8b:4f:e0:
53:c4:b5:ba:e5:56:49:99:39:ec:a2:b5:98:b6:21:12:13:c8:
96:60:38:12:ea:56:da:9b:3a:ee:b4:cb:bd:e8:fb:26:9a:65:
bf:4f:ff:15:d7:af:c7:5b:4c:a5:dd:36:e2:7c:73:dc:88:e8:
32:37:7f:77:bc:ce:fa:ae:f4:e6:87:90:49:3f:19:5e:2f:79:
74:77:bb:2d:a6:d0:78:f3:fc:ab:13:5c:b6:b7:27:10:83:a3:
b4:69:5e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:10:33 2026 by rpki-client