Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
File: 9IDXn6hIvDDnvLU-9f8tBK27TyY.mft (raw, json)
Hash identifier: al2LA8kjjSht7qEwoTcbsvL0WVye+BJ4SOzBuHcy7Ds=
Subject key identifier: 0A:84:DA:70:3E:31:97:28:8E:28:1C:4D:81:08:AC:F6:58:30:5F:C9
Authority key identifier: F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
Certificate issuer: /CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Certificate serial: 01A08BD6610AFB186588BFAA657369A20D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
Manifest number: 0188
Signing time: Thu 10 Sep 2026 15:01:17 +0000
Manifest this update: Thu 10 Sep 2026 15:01:17 +0000
Manifest next update: Fri 11 Sep 2026 15:01:17 +0000
Files and hashes: 1: 9IDXn6hIvDDnvLU-9f8tBK27TyY.crl (hash: HtztZt17ijWSS1+Y1o8zGvpx7IzDVLoDYc7qhI6O81w=)
2: ByerbL1cP92btLeefAdWjxplA_M.roa (hash: 3qNra9qr45ihN8IX80AtcCk2qIs3ym8XI4zn77mcJi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:61:0a:fb:18:65:88:bf:aa:65:73:69:a2:0d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Validity
Not Before: Sep 10 15:01:17 2026 GMT
Not After : Sep 11 15:01:17 2026 GMT
Subject: CN=0a84da703e3197288e281c4d8108acf658305fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:2c:62:c8:11:8e:bc:c4:7d:e1:8b:d1:df:
5f:48:eb:39:63:64:08:20:1a:4b:05:3b:03:07:09:
ad:df:54:c3:26:b0:a6:b9:03:ea:ab:4b:8a:2b:ac:
87:ff:b6:62:f2:8c:e9:3f:94:a9:f8:e1:9b:d6:50:
55:34:dc:ba:20:1c:f0:9d:3c:cb:55:2a:8f:f4:64:
83:8f:d3:4b:7f:c8:ab:b0:8d:ec:ba:85:fd:ef:fc:
ef:be:be:1d:9d:ef:17:dc:36:01:8d:5f:16:b8:33:
6b:4f:d8:05:5d:34:21:2c:1a:17:00:a2:a4:b0:3b:
91:a7:05:ee:4a:a2:ed:27:3d:4a:b0:12:76:32:5b:
6b:6b:79:bd:6a:77:e9:04:4c:a6:56:bb:03:aa:bf:
94:9d:8d:f2:3e:10:27:0a:83:c4:35:fa:26:a4:4c:
83:02:cc:bb:fb:b9:0b:05:69:9d:13:91:31:89:e1:
e7:a9:77:a4:08:d0:65:80:3d:34:a5:c0:f2:65:59:
b5:06:9d:d1:27:71:d6:d5:a2:94:d9:92:19:06:a1:
2f:fb:db:8a:65:d4:fe:90:19:bc:80:00:c6:1b:7e:
e7:0a:2f:1e:7a:e1:b1:60:25:b2:3c:8f:e3:d3:58:
9f:d9:c2:ed:65:26:5a:fb:73:7f:1e:24:ca:e6:78:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:84:DA:70:3E:31:97:28:8E:28:1C:4D:81:08:AC:F6:58:30:5F:C9
X509v3 Authority Key Identifier:
keyid:F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:db:91:42:63:d5:f3:73:4f:ce:c4:93:e1:bc:2c:b7:55:06:
b0:19:61:61:fc:cf:99:98:9e:ec:72:1d:36:33:aa:6b:fb:4d:
c6:02:35:ea:59:f1:30:55:ec:e4:6e:22:7f:4f:04:97:0e:0a:
04:23:22:c6:23:8e:09:8f:54:83:ff:1e:bb:51:6f:83:5c:e3:
20:1d:b9:53:90:65:65:b4:a7:1f:0e:70:0d:c7:cf:2e:9b:81:
5f:94:c7:90:06:b4:2d:73:a5:a8:5b:b0:d5:8c:03:a1:f5:c2:
c1:3a:d8:88:44:98:33:6c:81:d8:48:87:01:c2:73:14:4e:22:
49:de:8d:3e:e1:f7:21:41:35:70:c5:b0:5f:9f:93:39:1c:70:
74:06:8a:2e:9b:f4:e8:2f:d5:3e:22:27:f5:cc:21:ec:10:78:
68:00:07:35:83:e1:28:7d:31:ef:60:fb:70:93:de:09:84:83:
b6:60:39:27:63:79:2a:8b:a9:54:b4:be:86:64:f2:9d:9c:fd:
83:e7:28:44:41:c2:4b:25:c5:ec:19:f0:db:ce:16:d2:ba:f9:
d2:8a:9e:9a:04:6d:c1:db:f2:2a:f3:70:2f:08:e0:fb:a7:9b:
84:54:c8:d2:61:71:94:cf:61:db:88:67:6c:3b:aa:10:a7:b1:
d2:7d:b8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:45 2026 by rpki-client