Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: +gt2c15YOfRTn0umwhnqZ30b+7eR1uxcNlB+phN+NkY=
Subject key identifier: F8:C7:7E:74:AC:0F:0E:41:EF:5A:66:3D:98:70:50:E8:57:6E:86:3E
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 01A128B16A18CBD8B24B09A940A5E5B29F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 02:01:18 +0000
Manifest this update: Sun 11 Oct 2026 02:01:18 +0000
Manifest next update: Mon 12 Oct 2026 02:01:18 +0000
Files and hashes: 1: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: N202tzjmL4/pHYlQlsC6LelQZUscgHJN8C3/6JmndXY=)
2: kseNmYdhBq1K_noazDOmBmDbF5s.roa (hash: ATubQciMVM4Jml+pZxIMMSnD/6uFD6UKEHkdr+OIXB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b1:6a:18:cb:d8:b2:4b:09:a9:40:a5:e5:b2:9f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Oct 11 02:01:18 2026 GMT
Not After : Oct 12 02:01:18 2026 GMT
Subject: CN=f8c77e74ac0f0e41ef5a663d987050e8576e863e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:97:56:5c:a8:24:5d:87:12:2c:18:b2:80:b2:
40:70:35:5a:ff:31:9f:e2:7c:88:12:ee:e0:b8:26:
b2:3e:6d:43:6e:04:76:0f:e6:cd:b4:6c:e1:dc:8c:
65:bd:a3:39:d5:4c:64:e7:b2:85:df:d6:87:42:c6:
ce:e7:7d:cf:de:17:c7:b2:83:cf:d5:af:c8:cf:27:
8a:0b:5f:e7:42:ad:6a:49:33:7f:48:88:bc:ed:fb:
a6:c7:10:57:f3:27:b1:a4:9f:74:70:0e:5c:4f:15:
48:d7:85:cf:96:6c:fd:24:2d:01:56:04:2b:73:0b:
f1:99:69:90:a0:7f:79:c6:ce:86:a4:0c:ae:25:5f:
ed:98:2e:08:cd:de:51:40:37:c2:94:a1:2d:76:6d:
30:76:cd:f2:43:7c:e7:27:76:ab:17:3c:d9:65:e7:
92:a8:67:da:01:0c:d6:1e:52:04:5a:5d:d5:cc:b2:
c5:22:c0:ec:b4:70:6a:25:83:4b:1d:7d:32:3a:e1:
50:3d:7d:17:a7:b3:b7:b5:8b:43:21:21:62:6b:96:
4b:9a:66:0c:d2:61:2a:70:d3:10:48:62:be:3c:be:
10:3f:a8:d5:a3:8c:bb:4b:fe:7b:55:f3:36:a0:75:
64:ee:6e:45:e6:b0:01:0a:62:e0:18:19:49:c2:61:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C7:7E:74:AC:0F:0E:41:EF:5A:66:3D:98:70:50:E8:57:6E:86:3E
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8c:5d:b5:8c:f0:cf:35:b4:16:a0:44:70:81:b2:c0:3b:fd:
60:3c:8e:be:4a:85:0e:60:28:a1:bd:50:13:cc:52:34:e7:4a:
f1:8f:9a:28:52:30:6d:d2:b8:87:65:c3:50:64:09:51:48:87:
18:36:ad:65:36:6c:aa:66:da:6e:ad:8e:1a:0b:35:ce:55:c3:
32:ff:b2:18:b4:62:eb:00:6f:ee:c9:e2:37:50:83:1e:08:5e:
fa:c6:6c:b8:96:f2:ec:05:ab:d3:eb:7f:76:65:d2:2d:d5:66:
e0:af:07:35:19:5b:61:8a:b7:be:0d:7a:6c:1b:75:50:a0:0d:
6e:ab:9e:fc:3d:ec:98:59:68:46:63:a1:f1:3e:05:67:c7:a6:
4b:a1:9b:48:ff:ba:ae:18:85:08:ee:a6:62:6e:5f:14:05:77:
b3:50:b7:bb:c4:98:75:eb:20:03:44:8e:6e:bb:26:66:02:a0:
0c:bb:3f:a0:41:93:46:db:22:ad:24:ea:94:fc:c6:d4:ff:af:
c7:8f:c2:03:ed:7a:4c:cf:b1:3b:4b:a8:bd:9e:78:5a:45:16:
73:1d:9b:49:38:7d:dc:3c:38:b9:ed:ea:9f:04:1e:5f:73:34:
91:b8:20:42:66:2d:bf:b1:43:af:29:01:57:61:0c:84:65:09:
28:1f:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:24:50 2026 by rpki-client