Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: taCnUEgQ+S/cWYGE/4sE0y/EM08ymCU/THHttqOnPiY=
Subject key identifier: EB:B7:C7:67:EB:40:EE:4D:9D:65:A0:6D:BA:90:AE:FC:E3:D9:65:C8
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 01A13F398505EA4004684D209DE77EBD8FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0E0E
Signing time: Thu 15 Oct 2026 11:01:36 +0000
Manifest this update: Thu 15 Oct 2026 11:01:36 +0000
Manifest next update: Fri 16 Oct 2026 11:01:36 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: VSCU3zvJSlhKhomaFAXvUhe2LyxRa/sY+Vd4k8od998=)
2: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (hash: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:85:05:ea:40:04:68:4d:20:9d:e7:7e:bd:8f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Oct 15 11:01:36 2026 GMT
Not After : Oct 16 11:01:36 2026 GMT
Subject: CN=ebb7c767eb40ee4d9d65a06dba90aefce3d965c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:22:af:09:70:d1:01:65:8a:27:b3:28:58:
a1:29:13:12:89:a1:5c:a8:97:1f:67:f2:74:91:c6:
55:d5:64:8c:57:06:ce:b5:98:5a:63:c2:06:55:70:
8c:1b:3f:f1:07:cb:83:b3:8b:b7:36:73:84:f2:bc:
5b:12:8c:11:33:f1:f9:df:ec:ea:64:ad:d0:47:07:
5f:58:c6:b5:65:89:fa:dc:6b:27:49:e7:f8:f7:0f:
a0:4b:3f:5d:7f:19:a2:3f:77:c1:1d:48:dd:1e:b7:
21:47:9b:94:76:e4:28:72:e1:c3:b5:d9:f8:a5:c4:
38:7c:15:f7:2b:4b:68:77:dc:15:d1:14:60:35:e3:
b6:f4:3c:8f:15:f4:9c:22:52:bf:ac:67:ac:1b:89:
99:9d:82:81:d0:6e:38:eb:20:91:03:dd:15:06:50:
7c:1a:09:66:70:24:08:73:5c:cf:10:af:e8:d1:39:
ad:f9:58:27:d7:ee:b5:cd:f0:b6:bb:6b:2f:d6:ee:
ac:15:06:bd:3d:61:4c:37:6c:27:d1:08:f3:68:e1:
a1:4c:2d:54:2b:7f:7c:c0:42:72:34:c1:ef:59:84:
4f:53:fb:d7:13:3a:a6:41:a6:a8:31:c6:f1:a3:90:
77:3f:96:bd:74:0e:78:7e:c7:7c:d9:fc:98:3b:ac:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B7:C7:67:EB:40:EE:4D:9D:65:A0:6D:BA:90:AE:FC:E3:D9:65:C8
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a4:0a:8d:3c:ed:1b:e3:19:ee:38:dd:b5:f8:27:06:ec:27:
d5:f5:93:de:60:16:e5:f9:77:56:16:90:59:9e:b5:c0:32:99:
34:68:6d:6a:e2:d2:02:9a:b7:5a:9c:fa:14:cf:73:2a:df:a5:
4f:4b:29:a3:44:7a:c8:da:46:d8:84:37:3c:62:fb:82:2d:88:
c9:81:df:bc:6e:33:fa:a3:d1:9e:79:62:af:58:d0:c7:3c:1b:
19:a0:5b:fa:5b:26:ce:d2:54:73:07:0f:a4:0f:6a:f2:b5:23:
66:a2:8b:71:85:80:45:5d:be:65:94:47:e4:52:83:43:f2:74:
a7:1c:63:2e:64:9a:64:4f:81:b8:62:40:4d:02:03:ba:e0:52:
81:af:ed:5c:3a:ec:11:d3:f2:eb:f3:fa:5d:43:52:e5:e2:30:
31:c5:ce:90:29:19:eb:84:a9:8c:b2:7f:66:ec:f9:09:5d:7e:
98:2a:c9:1a:a8:26:de:54:8f:c1:22:44:84:e8:3e:6c:8a:a4:
7f:97:b3:bd:8f:69:72:e7:fe:b3:ef:b8:a4:81:38:1a:e6:14:
01:b4:74:d1:33:8d:51:74:b5:e1:29:0e:30:c4:7b:3a:a7:d3:
b9:f6:4c:2e:3c:2e:fc:03:9c:63:6c:c3:ce:ba:04:76:45:c5:
91:f4:f8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:35:07 2026 by rpki-client