Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
File: 9IDXn6hIvDDnvLU-9f8tBK27TyY.mft (raw, json)
Hash identifier: cHtb3s4G7l3RxOSrV0CejTeYecOxB9NB/G3iRtaTlRQ=
Subject key identifier: 51:2A:5B:3D:09:8B:48:34:B7:E2:12:4B:9D:E1:2D:E6:BC:DE:9C:CA
Authority key identifier: F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
Certificate issuer: /CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Certificate serial: 01A194690B8ED330EAD0719BF75BA88D4A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
Manifest number: 0211
Signing time: Sun 01 Nov 2026 00:01:14 +0000
Manifest this update: Sun 01 Nov 2026 00:01:14 +0000
Manifest next update: Mon 02 Nov 2026 00:01:14 +0000
Files and hashes: 1: 9IDXn6hIvDDnvLU-9f8tBK27TyY.crl (hash: aNubKQevMqO+BuieSndUGd7bYCKuSLaajTLMptFYjWg=)
2: ByerbL1cP92btLeefAdWjxplA_M.roa (hash: 3qNra9qr45ihN8IX80AtcCk2qIs3ym8XI4zn77mcJi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:69:0b:8e:d3:30:ea:d0:71:9b:f7:5b:a8:8d:4a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Validity
Not Before: Nov 1 00:01:14 2026 GMT
Not After : Nov 2 00:01:14 2026 GMT
Subject: CN=512a5b3d098b4834b7e2124b9de12de6bcde9cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:bd:cc:cc:fc:ff:b0:a9:d4:b9:f0:68:8b:
2d:b4:53:99:0d:62:3e:22:b0:92:ce:37:ae:22:fe:
c2:76:5f:04:39:91:6a:2b:c4:1f:28:52:60:22:cb:
25:48:70:ce:48:ef:d9:45:82:89:d7:b3:eb:89:c6:
af:fe:9d:0d:14:f8:b9:70:a4:34:c8:46:7f:cb:bb:
32:34:55:18:69:38:83:9e:32:85:0d:fe:f2:86:49:
48:5e:b2:29:20:18:4c:bf:b9:be:8b:cc:ab:48:52:
8e:d4:4c:8a:c7:1e:9f:35:63:0b:57:1c:cc:64:ea:
be:da:4d:b0:43:21:c2:ec:ad:bd:50:47:32:be:5a:
8b:89:01:82:71:54:8a:cc:4d:2c:40:e3:e9:96:71:
ce:b3:e4:07:1b:ea:ae:61:fc:07:2c:6f:71:43:fe:
61:61:db:98:6e:9e:f3:a9:3e:0a:bb:7d:1f:0b:19:
17:32:4a:6e:1d:2d:73:dd:ec:26:e3:6a:30:37:f7:
58:f4:cd:4b:b8:0d:ae:19:90:cb:fc:c7:86:de:06:
10:17:3d:97:20:4e:0f:ba:d9:7b:d7:79:f5:97:a7:
28:68:40:fc:d5:ea:23:9d:1e:e8:d6:f9:94:ca:ed:
3e:b2:3b:40:b0:27:73:fb:4e:7e:7b:ca:2f:6d:69:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2A:5B:3D:09:8B:48:34:B7:E2:12:4B:9D:E1:2D:E6:BC:DE:9C:CA
X509v3 Authority Key Identifier:
keyid:F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:29:eb:19:ab:a2:0b:5b:cb:29:08:46:04:16:fb:cd:f7:b2:
97:74:16:67:3f:88:d8:54:8a:61:f8:07:c9:d3:f1:c3:d1:fe:
9b:95:a8:95:4f:87:c6:02:2f:73:01:f9:af:5c:5b:b9:5c:07:
10:e8:8f:33:57:45:aa:4d:f3:60:25:6d:fc:89:64:4b:32:49:
03:2e:e7:57:ab:ed:b7:69:06:42:45:a2:cc:45:e7:68:0c:39:
65:06:0e:92:e4:ad:8d:46:80:76:32:33:3c:52:62:54:89:4f:
c1:68:05:52:94:e5:34:5c:36:83:77:5a:00:bf:94:41:79:40:
8e:69:33:cb:6b:fd:ac:37:6b:b4:2f:2a:bb:db:f5:c9:97:96:
06:7e:ad:0e:01:37:c1:7b:87:97:f6:11:2a:f9:a1:2d:fc:c2:
86:3b:85:c4:4f:f2:f7:92:1d:3d:1d:38:a3:02:d6:e5:aa:30:
b9:f4:1e:5e:46:98:04:b0:bb:82:8a:94:2e:12:98:98:9e:d0:
39:cd:17:bd:8e:30:d2:73:4d:5b:81:32:23:18:b2:f6:a0:10:
b0:0f:a9:b7:9e:93:ec:25:7f:b2:e7:00:f0:6c:e9:91:28:b6:
97:db:32:5a:c7:e2:1b:d8:da:b0:61:1a:e9:23:9e:e8:75:d6:
e0:8e:08:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:52:25 2026 by rpki-client