Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: Q1LtJ5rHLIQW4cVKqUFQIDY5EtYw2GF/PyqBGCgWuC8=
Subject key identifier: 0E:DC:C9:0E:44:F6:24:37:5E:0A:FA:5A:52:E2:2A:D8:38:05:B8:EF
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 01A13D8114F106BF11BB6A5D6C82087AD807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 03:00:31 +0000
Manifest this update: Thu 15 Oct 2026 03:00:31 +0000
Manifest next update: Fri 16 Oct 2026 03:00:31 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: eDvtpYLG9XeyEc0uf14o8RahBv62nShGd3UvFFm8LrA=)
2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:14:f1:06:bf:11:bb:6a:5d:6c:82:08:7a:d8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Oct 15 03:00:31 2026 GMT
Not After : Oct 16 03:00:31 2026 GMT
Subject: CN=0edcc90e44f624375e0afa5a52e22ad83805b8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d7:39:c3:2f:85:14:dc:83:1f:91:e8:84:cb:
6d:18:f9:5b:12:e2:08:da:c8:18:3b:70:08:91:d7:
3c:be:c5:eb:3b:b4:41:66:4a:18:d8:e8:93:5f:71:
b1:3f:59:19:52:6d:2f:60:d7:65:aa:7c:e3:00:d9:
30:c4:60:7f:6e:44:81:9f:50:61:8d:74:28:05:8b:
7d:11:a2:86:87:33:00:ad:2d:31:0a:34:b3:82:03:
9b:fb:9b:f0:55:ed:12:cb:61:d7:67:72:d2:08:0f:
d6:df:07:fa:7c:25:b3:ca:41:16:e1:06:9e:02:d0:
62:01:1d:d5:b3:cf:03:73:23:4c:3a:8f:aa:53:38:
7a:3a:d3:67:8f:2d:df:ca:10:0a:87:4b:18:2a:3c:
fd:92:10:b5:f1:0f:77:e0:6f:f8:19:97:b1:a3:34:
46:20:ac:be:c7:fb:3d:ee:24:e7:e6:7f:2a:84:44:
44:03:ef:52:92:3b:1a:55:58:f5:cc:4d:26:c1:d6:
78:6c:55:9e:8b:2e:45:fe:05:d3:8b:83:67:09:6b:
52:ca:8c:dd:ec:c4:60:d1:9f:b9:9d:c8:0f:cd:49:
47:e4:95:e0:f9:9d:c2:91:79:87:5a:95:be:58:6f:
f7:80:ac:53:33:8c:99:01:f1:d0:4d:96:fc:77:72:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DC:C9:0E:44:F6:24:37:5E:0A:FA:5A:52:E2:2A:D8:38:05:B8:EF
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9d:47:93:2b:54:27:a7:52:f9:ac:9b:5e:0e:7c:30:aa:2e:
04:35:09:1a:9e:4e:91:9e:aa:68:82:af:aa:46:6d:71:ed:ff:
33:e8:24:02:50:1b:03:5c:b5:9f:3d:34:01:58:b2:df:99:96:
8a:e0:e4:a1:68:a6:85:78:b4:b4:58:81:f9:33:42:c1:0f:2b:
bf:1a:c6:cb:6f:81:f4:34:5d:a4:c8:47:74:a5:2e:f4:87:1e:
70:9c:fe:f4:2a:d3:bd:52:99:61:3d:24:93:1b:2f:ae:04:61:
1b:74:7f:bc:cc:c8:be:f5:e8:42:e0:fa:3d:31:eb:b5:96:b1:
6e:89:b4:2b:71:07:5b:a7:6f:2c:ff:47:b5:da:74:9b:80:73:
fa:d9:a3:f2:c8:33:7c:98:35:c8:46:48:0c:2f:55:ff:43:ae:
12:4f:de:40:73:7c:ce:cf:79:80:29:eb:9c:dd:9e:2a:b1:64:
f6:ff:b1:47:bc:0b:da:46:4f:3f:ce:d6:3a:b7:31:57:6a:02:
f8:6b:d3:51:08:f2:42:22:2a:69:8d:ae:39:9c:94:83:f8:87:
14:f9:35:39:b8:f4:12:64:32:94:e4:6e:60:ea:67:e4:a4:e7:
4d:ed:dd:cc:6b:5a:b7:fd:e9:c8:b4:99:84:85:15:78:3f:4d:
8d:b4:54:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:21:03 2026 by rpki-client