Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
File: 9IDXn6hIvDDnvLU-9f8tBK27TyY.mft (raw, json)
Hash identifier: pKEu3f0Mp1jGMa5kMhA74Z2pAGe3QlotsXBkzXqFhN8=
Subject key identifier: DF:AF:D4:89:C0:13:48:ED:76:BD:2A:93:C6:A9:CD:1A:12:5B:EB:49
Authority key identifier: F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
Certificate issuer: /CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Certificate serial: 01A1908BA3F9B5D3DF49DADA132A4B60B722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
Manifest number: 020F
Signing time: Sat 31 Oct 2026 06:00:32 +0000
Manifest this update: Sat 31 Oct 2026 06:00:32 +0000
Manifest next update: Sun 01 Nov 2026 06:00:32 +0000
Files and hashes: 1: 9IDXn6hIvDDnvLU-9f8tBK27TyY.crl (hash: pKY0SFuy7b2Y4Oi6V2h70y0ZP1Nre0fCMLKHr2LZpHI=)
2: ByerbL1cP92btLeefAdWjxplA_M.roa (hash: 3qNra9qr45ihN8IX80AtcCk2qIs3ym8XI4zn77mcJi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:8b:a3:f9:b5:d3:df:49:da:da:13:2a:4b:60:b7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Validity
Not Before: Oct 31 06:00:32 2026 GMT
Not After : Nov 1 06:00:32 2026 GMT
Subject: CN=dfafd489c01348ed76bd2a93c6a9cd1a125beb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:79:ee:5b:7a:7c:32:d0:e7:62:b4:f6:c1:
a5:50:c0:46:75:cd:cb:ab:2e:2d:38:4a:db:8b:75:
c1:0a:02:4e:1b:d3:e1:38:2d:af:78:c9:46:ae:aa:
d7:4c:6f:13:96:19:7b:ed:a6:18:c4:bd:9e:15:21:
58:d0:9e:d4:6f:c3:d4:c9:92:73:26:1f:94:01:89:
e2:89:bf:60:94:7d:80:bb:95:9b:91:37:20:57:11:
9c:05:1c:1a:2a:04:48:d0:db:65:8c:14:26:de:89:
42:33:d2:87:29:ba:fb:0f:25:81:d0:d5:80:1c:3c:
f0:9a:70:8c:20:35:d0:20:cf:f6:a3:b2:40:ee:cf:
d5:ac:e3:a6:6a:5a:a3:24:ac:ee:b9:73:c5:1a:91:
33:a9:cd:f6:6b:23:34:86:a9:75:3e:b0:1a:8e:c3:
87:3c:78:39:80:3f:60:03:8d:86:96:96:79:54:eb:
f7:82:9a:56:0d:18:58:69:ee:b3:0f:c6:9d:72:b5:
06:8a:64:00:f7:95:35:43:26:5f:20:19:46:58:1f:
7b:22:8e:14:74:75:c2:5c:0e:44:1a:1f:50:68:0c:
48:8e:9a:64:8b:49:6c:29:6b:f7:43:a8:4c:d2:45:
47:33:a2:0e:b6:4c:5a:ad:a4:20:c4:b1:8c:e7:2a:
04:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AF:D4:89:C0:13:48:ED:76:BD:2A:93:C6:A9:CD:1A:12:5B:EB:49
X509v3 Authority Key Identifier:
keyid:F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:14:ac:9e:8e:40:9e:85:55:76:cf:4c:70:30:9e:9a:47:79:
0c:4e:8f:f3:48:72:95:c8:87:7c:77:db:83:ce:51:03:10:dc:
04:b3:6d:5f:65:bd:4d:6e:cc:6a:ea:2e:65:81:34:a4:e4:30:
4c:62:f7:09:4a:08:c3:ff:eb:ec:d6:3d:54:c4:ca:1b:e7:d3:
ad:e0:7a:52:1d:0f:9d:83:2b:e8:e4:77:8a:fa:e9:67:23:e9:
64:2b:f9:0a:8e:6e:24:46:32:c8:e6:6e:af:e7:62:29:3a:ae:
18:3c:d6:77:99:65:58:15:76:47:f8:21:d1:6d:14:70:f7:38:
68:cb:fb:72:9e:39:1b:d0:a3:f0:d1:ce:c6:80:76:9f:1c:12:
dd:ff:80:b1:73:48:16:4c:ed:b0:a7:40:73:4d:40:81:0b:23:
6e:cf:35:ff:da:41:6a:66:12:49:9a:19:09:bf:d7:5c:52:13:
26:69:52:70:73:e6:1a:45:ed:3c:cc:bc:a3:fb:df:e3:d9:5a:
54:42:d8:bf:f9:a0:0c:e7:12:8e:dc:8f:60:f6:35:b1:54:e2:
da:b0:0f:a0:7b:30:c4:d7:7b:fc:49:a4:55:20:31:6e:2f:bd:
46:d8:f4:cc:48:ba:b5:de:1d:d1:a6:ea:10:f6:2b:aa:05:9d:
da:1e:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:41:06 2026 by rpki-client