Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: XgRqoOnCjQdbwL01ta6suYov+FJikzOVjergf4dKp/4=
Subject key identifier: DF:E4:31:C1:3F:E5:0D:09:80:BF:5A:F5:91:95:1F:FC:73:24:47:23
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 01A13DB80500E2AC862895985DEF56CA841C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 04:00:32 +0000
Manifest this update: Thu 15 Oct 2026 04:00:32 +0000
Manifest next update: Fri 16 Oct 2026 04:00:32 +0000
Files and hashes: 1: 4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa (hash: m7wSLBG3yMM59qxFhuh+wuLPCbDahbo3ByN0pwy2TGw=)
2: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: N1opBGiljfxOKSSGae7dcOOwaUj5OAaGJOP/rbH25wY=)
3: d6fj2hsf73awFuJ9_OrVwzH3RUU.roa (hash: q5EEFAAUQDhZrlGyPfpObbd8Uk9pSouDXHiB9RSx/i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:05:00:e2:ac:86:28:95:98:5d:ef:56:ca:84:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Oct 15 04:00:32 2026 GMT
Not After : Oct 16 04:00:32 2026 GMT
Subject: CN=dfe431c13fe50d0980bf5af591951ffc73244723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:c6:68:cc:1d:57:af:5e:0a:1f:5c:84:8e:
57:10:08:ac:4a:21:bf:9e:a1:6f:a9:df:e7:31:0c:
92:99:85:6b:91:0f:35:bc:c6:6b:37:0c:75:2c:98:
76:a2:ff:38:09:21:c4:18:b1:12:10:a1:de:22:59:
33:68:42:e4:4c:a9:c8:5c:fb:af:f6:81:3f:27:5b:
01:9b:7c:a5:09:26:a1:ec:12:46:f4:6e:65:b8:cb:
ba:ef:76:4d:a6:bb:2a:dd:36:56:01:29:46:83:cc:
c1:ce:85:ed:a5:9d:7e:7e:b6:1c:61:42:c3:34:6a:
82:27:59:40:21:97:5a:56:59:d8:f6:a8:49:ca:28:
a1:07:2c:59:48:b3:c6:be:0d:c2:9b:ee:ed:a7:48:
5a:65:9c:fd:32:3c:4e:86:03:44:ab:c9:44:c3:9f:
f8:42:7d:ba:ed:5e:4c:d6:b8:f2:59:26:4d:bb:69:
f3:a1:15:cb:94:40:5e:d8:6e:b4:e0:47:20:0b:75:
78:5c:64:17:0c:0e:7c:c4:f7:45:12:46:85:ef:1b:
a5:03:32:4a:2e:74:0a:b3:34:26:25:48:f3:a8:29:
bc:eb:31:52:47:36:df:51:70:e8:38:9f:45:7a:52:
f4:b9:33:16:1c:ed:27:39:6a:9a:4a:b0:16:51:c8:
cd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E4:31:C1:3F:E5:0D:09:80:BF:5A:F5:91:95:1F:FC:73:24:47:23
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c2:12:8a:db:05:1c:9e:69:18:77:33:cc:ed:72:e9:f7:d4:
35:ff:8e:30:94:b8:8f:4a:a9:62:36:f9:02:c6:00:a2:24:f9:
7c:31:67:b2:aa:db:4c:71:70:ff:5c:ff:84:9f:4d:ed:8e:0a:
26:08:ca:35:21:61:1b:4f:03:00:a1:8f:7a:3e:02:4d:04:33:
e9:3e:f1:c9:d8:9c:c3:67:09:a3:45:f6:ba:4d:de:77:07:d7:
c9:1e:7c:d9:76:d3:13:c9:0e:ea:6d:1d:37:f1:fc:ac:02:fa:
c5:34:76:32:88:90:3f:84:41:3e:f8:a4:bc:08:3d:85:c8:26:
3f:ad:32:22:65:65:58:7f:d8:3f:e3:4f:7f:e8:e7:de:36:dd:
40:ed:e8:e7:4a:22:1f:fe:88:01:47:c3:f7:e4:83:19:5a:4d:
26:ae:40:79:4e:b9:76:07:1c:a4:3c:2f:60:92:ee:35:06:8e:
6b:eb:01:1b:69:a0:19:61:b6:5f:3f:de:cc:07:aa:62:49:bc:
a9:ef:99:39:64:93:7a:51:bb:33:67:8a:b7:1d:bb:ac:61:ca:
b9:dc:07:2b:60:d7:67:9b:60:2a:62:ca:61:4b:18:95:cb:39:
a9:22:ae:aa:93:35:c1:a3:8b:f4:74:36:b1:a7:55:54:ea:47:
76:f2:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:16 2026 by rpki-client