Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: timZRchJ1Ww8OR8Mkb5BQTDQGZ/e2v70PhZSBGjc2MY=
Subject key identifier: F4:04:15:4C:AE:CC:97:BC:5E:2F:CA:B9:BC:A0:3A:F1:CA:EE:56:F4
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 01A0016FC28B2C0E268C837087F1CF7FC46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 109A
Signing time: Fri 14 Aug 2026 18:01:36 +0000
Manifest this update: Fri 14 Aug 2026 18:01:36 +0000
Manifest next update: Sat 15 Aug 2026 18:01:36 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: TKZWiNCS5GKwEYETUvLvOvLyp7NM/QzxYtPzVbnDNkw=)
2: TgwXo42orCf9sT1fT8jrPa56jeU.roa (hash: GfcY69aJuiib4Ntp1/VS83/ai4i4eQHgc9DzBgB534U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:c2:8b:2c:0e:26:8c:83:70:87:f1:cf:7f:c4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Aug 14 18:01:36 2026 GMT
Not After : Aug 15 18:01:36 2026 GMT
Subject: CN=f404154caecc97bc5e2fcab9bca03af1caee56f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:45:d0:37:e7:79:91:1e:1e:3d:8e:d4:1a:
ca:a8:89:a7:71:1c:cf:06:50:2c:1b:1a:54:27:d3:
4a:d3:86:7a:68:e2:6d:fd:61:1c:36:45:36:db:0c:
54:e8:ba:eb:73:67:dd:d6:58:13:d5:1f:d3:5b:31:
1f:f3:fe:50:1d:db:23:ca:b5:48:36:1c:07:10:83:
4c:ea:e4:c6:b4:5c:ab:70:a3:37:aa:9f:78:6d:c2:
96:ce:70:3c:8b:10:96:67:15:64:43:b0:c4:58:a0:
bc:67:cc:bf:de:ed:59:83:5e:89:6e:0b:35:30:00:
e8:96:72:67:5b:ad:6e:14:5e:a1:4a:f4:df:0e:ed:
73:40:42:37:33:e5:c8:75:d8:a1:cf:09:21:55:51:
d9:e3:a1:ca:d1:ba:26:61:79:65:30:0b:75:73:fc:
95:38:a4:2e:93:55:4f:ec:19:20:fe:75:50:7e:e7:
7e:fa:c9:28:97:a8:25:ff:5d:1d:4b:a8:b7:ba:4b:
0d:05:f8:93:50:0b:bc:8a:f2:78:3b:96:b6:1b:67:
80:6b:5b:e9:2c:6e:6b:a2:56:36:4b:5e:b5:17:3c:
92:8b:1d:d6:0e:ab:ba:ae:7d:9c:7b:3b:dc:bd:2a:
51:42:52:22:66:94:e6:74:c3:6d:e2:3d:79:51:3c:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:04:15:4C:AE:CC:97:BC:5E:2F:CA:B9:BC:A0:3A:F1:CA:EE:56:F4
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9b:35:b7:d0:04:b8:6a:85:18:32:55:20:4b:8f:37:74:61:
ea:d1:f4:52:51:e5:f1:5d:93:4b:54:0e:df:79:06:60:b1:ed:
43:56:4a:b4:dd:ba:59:a7:1d:c9:c0:36:8e:5a:ee:d4:1a:b8:
f1:03:24:e5:a4:fd:cd:8d:b5:6a:14:07:56:13:e8:27:52:a3:
60:48:41:6f:36:11:7c:0c:f2:c9:93:3d:a6:90:a2:fd:22:9a:
f5:18:a6:26:2e:87:9b:59:a2:30:67:f9:90:f0:84:76:5a:f7:
33:7c:5f:b8:d0:69:19:79:0a:ac:06:8b:ff:8f:85:18:ec:11:
9e:f0:c1:87:38:32:80:5a:14:5b:08:e5:f1:03:06:af:8c:9c:
c4:10:40:49:4e:e5:02:c6:f7:37:b9:cc:bd:ef:bf:7b:ca:e7:
01:4b:ad:7b:00:0e:66:be:9f:20:7b:e3:5d:f0:e2:0d:14:96:
48:30:2b:6f:5a:65:96:d5:0d:a7:e0:b1:66:76:4f:a3:90:2a:
9f:38:8e:2e:59:e0:22:9a:40:db:a8:29:cc:7c:ad:f7:46:ed:
43:32:cb:fe:58:7a:55:73:0e:fd:57:65:f9:c5:47:11:1b:7b:
43:da:3a:f7:8b:8a:0b:13:08:ed:57:5e:9f:45:e8:56:26:02:
1f:6f:db:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:37 2026 by rpki-client