Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.mft
File: 9TERk7IVV1FGVI7yfs1pX7mc8Lw.mft (raw, json)
Hash identifier: HrRcTvjHCHzvgUGLmvggGsSJE53zBstm4/EB8K3Kvss=
Subject key identifier: EC:F4:04:41:1A:84:05:AA:EE:D2:C2:35:BC:41:D6:AD:64:33:11:07
Authority key identifier: F5:31:11:93:B2:15:57:51:46:54:8E:F2:7E:CD:69:5F:B9:9C:F0:BC
Certificate issuer: /CN=f5311193b215575146548ef27ecd695fb99cf0bc
Certificate serial: 01A172B835E9F9A412125F6983BB1CBDAD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TERk7IVV1FGVI7yfs1pX7mc8Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.mft
Manifest number: BA
Signing time: Sun 25 Oct 2026 11:00:37 +0000
Manifest this update: Sun 25 Oct 2026 11:00:37 +0000
Manifest next update: Mon 26 Oct 2026 11:00:37 +0000
Files and hashes: 1: 1Z4JzCvnteCIKQszXHQFc967ne8.roa (hash: Z72/1v0tdbPVk5wGh68TOmDWGusOqq/srlhRedp+nCA=)
2: 9TERk7IVV1FGVI7yfs1pX7mc8Lw.crl (hash: wZL9HA+6DWnnbgVTA1ZzHGGbribfEFINBb8okyxlUQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TERk7IVV1FGVI7yfs1pX7mc8Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:b8:35:e9:f9:a4:12:12:5f:69:83:bb:1c:bd:ad:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5311193b215575146548ef27ecd695fb99cf0bc
Validity
Not Before: Oct 25 11:00:37 2026 GMT
Not After : Oct 26 11:00:37 2026 GMT
Subject: CN=ecf404411a8405aaeed2c235bc41d6ad64331107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2f:ce:59:db:76:59:8d:31:22:ac:5c:33:1a:
f4:ec:2a:f3:78:8b:1c:87:de:37:a4:79:7d:a9:44:
89:1b:5a:f6:b0:d6:2c:a8:08:5f:bc:36:be:2e:8f:
67:08:36:de:20:fc:19:51:bc:23:eb:1c:64:3b:46:
a7:8c:b2:9b:10:e4:45:bf:8b:3b:78:c4:fd:8d:1f:
0b:5d:f8:c4:8b:ce:9f:16:85:58:0a:e6:80:57:7f:
a9:a6:c2:16:77:15:92:b0:31:9d:d8:57:4a:63:d2:
c0:1c:df:cd:b2:8d:05:93:34:17:3f:8a:0d:cd:12:
c6:27:fa:84:03:f1:e4:55:84:0d:8a:b3:c8:16:cb:
35:ba:2d:f1:c8:fb:0d:eb:5e:02:a9:84:0f:86:91:
6e:8a:3d:47:8f:0d:f1:4e:62:dc:e3:51:7d:cf:a4:
6b:41:a5:8a:cc:95:f8:0e:68:1b:a5:50:09:43:b4:
cc:5f:14:4a:e2:de:37:e0:f4:40:c5:4d:af:2e:37:
e1:96:4d:1e:a4:16:19:65:67:27:93:74:17:94:75:
a6:02:2b:ad:71:65:3a:48:22:28:97:2c:c5:b8:a3:
8d:40:b4:d2:66:ae:07:10:32:bb:55:18:13:49:a6:
c4:4a:1a:cb:33:32:63:bb:c3:bb:7e:47:49:df:6e:
c0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F4:04:41:1A:84:05:AA:EE:D2:C2:35:BC:41:D6:AD:64:33:11:07
X509v3 Authority Key Identifier:
keyid:F5:31:11:93:B2:15:57:51:46:54:8E:F2:7E:CD:69:5F:B9:9C:F0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TERk7IVV1FGVI7yfs1pX7mc8Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:00:22:ea:c4:85:b9:9d:c9:9a:9c:79:5c:27:1f:25:c5:29:
2e:20:3f:12:b2:38:95:cd:13:e0:43:3f:e6:22:15:01:fb:e7:
37:15:7d:b7:2e:8e:49:ff:05:03:05:b6:69:16:c8:a4:77:f6:
a2:73:f7:55:2b:98:4e:ad:07:93:5e:be:44:6a:24:12:25:3f:
d7:97:1b:8d:2a:26:83:f9:1f:52:92:2b:38:92:62:57:81:a3:
8c:1f:08:6f:85:e5:1e:a8:01:cf:19:f4:1c:83:74:51:86:2c:
c8:fe:73:bb:c6:90:75:db:4c:db:40:9c:80:65:e4:46:af:de:
c0:47:e2:4f:80:c1:36:5a:c0:0d:75:cb:b6:cf:39:13:2c:38:
05:36:0a:49:59:a3:2f:4f:88:52:ec:4e:52:66:bb:46:d8:23:
e2:75:62:bb:73:3e:00:e1:d3:63:23:81:7d:bb:f4:f5:71:dc:
fb:aa:37:c6:aa:51:d5:f9:57:69:64:bf:f8:f5:53:ae:f6:30:
2a:b1:3b:5d:b5:5e:0b:cd:34:37:67:77:e5:b6:50:36:bf:b0:
52:cf:30:9b:8d:88:82:a4:18:75:bd:64:35:ac:a7:a9:d3:41:
e4:51:a8:ce:23:71:05:19:f5:de:7d:9b:77:2c:7d:96:0e:7a:
c6:2a:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:46:06 2026 by rpki-client