Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
File: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft (raw, json)
Hash identifier: vaC4JtBgrNcam5u696ssnu78o0lSSjIH6HxU8cVdluE=
Subject key identifier: 85:A0:25:D2:FD:4F:E3:AC:D4:4A:39:1E:27:19:28:E7:93:31:66:E4
Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
Certificate issuer: /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Certificate serial: 01A0D315BE8B230B24DBDA99AD609780DEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 11:03:32 +0000
Manifest this update: Thu 24 Sep 2026 11:03:32 +0000
Manifest next update: Fri 25 Sep 2026 11:03:32 +0000
Files and hashes: 1: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl (hash: KNSdAApyGmrw52BLzK6gi1tLGMQfUTjJyoPWNluzKQk=)
2: UKATPR0b1kY7oFPVkZYEepDy3LY.roa (hash: CrwvVmRRQkszz0pHbbKO1FTUZbPyR5yvt9U+ujLmXCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:be:8b:23:0b:24:db:da:99:ad:60:97:80:de:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Validity
Not Before: Sep 24 11:03:32 2026 GMT
Not After : Sep 25 11:03:32 2026 GMT
Subject: CN=85a025d2fd4fe3acd44a391e271928e7933166e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:09:1f:7a:ea:ac:4b:ae:ad:bb:ad:19:c8:
f4:6f:57:1a:f1:5a:32:ed:c8:e7:68:91:50:8f:7d:
68:ac:f7:c2:52:e8:35:f0:84:86:9a:42:31:d5:02:
76:c1:f7:5b:0c:7b:ef:d9:a6:bb:79:8c:e4:24:26:
73:6f:1b:fc:df:dc:7c:45:5c:3b:59:76:4a:5e:24:
dd:1b:b0:f5:b8:98:56:7e:45:fb:10:94:a6:86:3e:
0f:d3:c3:19:2f:73:cf:a2:e4:17:ac:62:bb:fe:ad:
88:78:34:e1:82:0e:61:7a:34:15:f0:69:24:aa:b6:
1e:5c:f8:93:3f:7c:fe:4a:04:b3:2b:a7:1c:d8:46:
f6:bc:65:e7:6b:49:88:09:c1:e3:72:67:54:6b:bb:
72:e3:57:1f:7d:08:ca:9f:93:25:25:8f:b9:75:19:
63:ee:e4:6e:65:38:a5:4d:a0:47:db:9b:27:08:99:
71:a9:a2:76:51:53:9e:98:7b:d8:3f:58:c8:ce:c8:
0d:66:85:59:fe:45:83:64:95:09:c6:b7:e7:0f:91:
47:93:16:88:de:62:c3:82:89:87:02:d8:cf:f6:99:
ef:31:95:eb:b8:04:a8:34:06:fe:18:c8:eb:4e:3c:
99:ec:2c:33:2f:20:73:2c:de:b6:d0:ce:4a:61:98:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A0:25:D2:FD:4F:E3:AC:D4:4A:39:1E:27:19:28:E7:93:31:66:E4
X509v3 Authority Key Identifier:
keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a9:ce:53:2b:49:d8:69:57:f3:db:8b:b2:07:74:18:48:f0:
e5:22:0e:a3:57:1f:91:79:38:d1:b1:55:58:25:5e:a2:9d:19:
46:49:79:35:ad:c4:cb:05:d3:f1:a4:70:9c:ce:b8:99:a3:33:
85:5c:5d:98:3e:0e:94:3e:57:13:78:e6:84:9b:e6:00:1d:03:
21:c3:a2:bb:c3:a1:75:52:32:af:ef:42:3f:fd:84:69:14:ff:
60:94:e1:66:16:71:be:a4:76:4b:00:ec:c6:51:4b:98:37:ad:
b3:11:a0:16:f0:41:79:51:73:a3:fa:d4:e3:cc:86:91:03:e2:
81:0e:80:4e:ac:f5:a1:2f:27:1c:94:e7:44:79:a0:b5:48:76:
16:08:3e:9d:ae:70:de:25:f1:34:00:7d:1e:9f:f2:3b:39:01:
c1:92:b3:e0:c7:d5:c9:d4:ca:ae:8e:bb:2a:c4:88:66:71:b0:
26:48:98:af:b4:e5:a9:2b:81:59:99:7d:e0:36:a5:19:ac:59:
5c:00:ed:7b:06:7f:db:aa:45:a3:e3:00:14:ad:84:3e:9f:a6:
1a:1a:9f:45:e7:df:66:30:6e:1e:6f:bd:b4:74:6c:54:c5:6c:
6b:f7:99:1b:a2:76:42:2f:bf:ba:96:5d:c8:45:4f:48:07:85:
d4:b8:5e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:25:34 2026 by rpki-client