Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
File: 9IDXn6hIvDDnvLU-9f8tBK27TyY.mft (raw, json)
Hash identifier: iiBb4WGVW4Dk3KsHnSWDqbbytjSwAjSonnCa0DgijVk=
Subject key identifier: ED:C0:9B:A6:AD:3E:F7:07:D0:62:F5:1F:66:1A:36:99:D6:82:6F:6D
Authority key identifier: F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
Certificate issuer: /CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Certificate serial: 01A188D29076022AD6B41324F187C0FD3B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
Manifest number: 020B
Signing time: Thu 29 Oct 2026 18:01:03 +0000
Manifest this update: Thu 29 Oct 2026 18:01:03 +0000
Manifest next update: Fri 30 Oct 2026 18:01:03 +0000
Files and hashes: 1: 9IDXn6hIvDDnvLU-9f8tBK27TyY.crl (hash: ei0vpM31saK/CyBXX7aEw+8SLrE5BBYQkF/beN1tnUU=)
2: ByerbL1cP92btLeefAdWjxplA_M.roa (hash: 3qNra9qr45ihN8IX80AtcCk2qIs3ym8XI4zn77mcJi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:d2:90:76:02:2a:d6:b4:13:24:f1:87:c0:fd:3b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f480d79fa848bc30e7bcb53ef5ff2d04adbb4f26
Validity
Not Before: Oct 29 18:01:03 2026 GMT
Not After : Oct 30 18:01:03 2026 GMT
Subject: CN=edc09ba6ad3ef707d062f51f661a3699d6826f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:9b:08:99:f2:93:5e:00:2b:bd:57:e9:69:
a7:25:fc:bd:ef:df:af:06:66:4f:fc:6d:2d:35:5d:
b6:86:18:4c:90:cf:7f:57:d1:a2:ba:38:70:00:51:
d3:ba:5b:23:cc:7d:cd:8f:9a:61:e1:28:0a:54:ea:
2a:dc:6e:01:55:3b:04:df:0b:b1:fb:ba:a2:ad:32:
26:32:09:ac:57:bb:ea:2a:e4:cb:6e:57:30:77:9e:
2b:f4:25:66:32:63:9e:a5:85:da:7b:82:34:4c:31:
ce:e2:20:e8:1b:48:65:a8:fd:6b:e0:5f:fc:d0:18:
40:f7:f0:16:8c:5b:19:e1:a9:bf:61:bd:4f:5a:e4:
9d:b7:56:8f:86:f8:9b:1a:00:b3:c6:b3:95:29:79:
3d:dc:66:a2:64:a2:89:0a:c6:fa:2e:8c:af:93:8e:
d0:c9:7b:58:33:87:b5:ed:60:da:64:6d:7a:f3:44:
d2:ab:4e:71:c6:9e:31:20:9d:d5:97:74:13:88:ef:
ec:4e:63:10:ba:58:88:e6:c1:dd:20:cb:3f:26:ef:
0a:b1:34:05:c0:3a:e1:f5:89:2c:f0:df:2c:16:86:
f9:97:e1:5b:2a:ef:3e:be:13:47:9f:fa:bf:77:38:
20:35:a2:fd:da:8e:9e:16:cf:04:05:16:35:d3:93:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C0:9B:A6:AD:3E:F7:07:D0:62:F5:1F:66:1A:36:99:D6:82:6F:6D
X509v3 Authority Key Identifier:
keyid:F4:80:D7:9F:A8:48:BC:30:E7:BC:B5:3E:F5:FF:2D:04:AD:BB:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IDXn6hIvDDnvLU-9f8tBK27TyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a5a7ab-d114-4354-b97a-0238b3b6895b/1/9IDXn6hIvDDnvLU-9f8tBK27TyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:03:4b:b0:e7:3b:da:ab:cc:e0:82:6f:4b:af:bc:91:09:17:
68:d0:3f:4d:dc:84:27:c2:23:58:ee:26:da:54:a4:56:0e:80:
87:55:f7:38:65:5b:bd:d8:63:55:0b:2d:94:8c:21:36:40:cc:
7b:51:2f:7c:9b:c4:12:42:16:33:37:92:34:48:51:bb:6d:df:
32:0f:63:03:a5:95:3d:59:d0:f1:86:f7:ea:11:52:9b:3f:b4:
03:f6:be:72:c3:e5:60:f6:51:93:58:33:86:31:65:bd:48:26:
58:bc:e3:28:77:49:ce:02:e6:12:59:15:73:2d:b9:cb:95:7c:
69:20:4a:f0:fc:58:60:a0:2f:c9:7a:e9:6d:f9:72:36:d3:6f:
17:a3:f4:27:c4:08:aa:81:db:2c:35:a1:b2:b4:36:a2:b1:44:
74:30:7a:de:42:79:1a:82:a8:b5:92:d9:0c:59:9d:5d:22:7b:
d3:f8:4b:e3:86:dd:d7:b7:54:31:f0:d7:15:de:55:ee:28:c9:
2d:f8:7c:30:af:22:b4:8c:38:3c:a1:6b:a3:ed:09:79:0d:22:
b3:df:c4:3f:24:b0:41:e2:84:3f:07:9f:c7:a0:1c:0d:d7:97:
0f:e6:8f:46:02:88:09:33:10:fb:34:71:70:1b:3b:b3:cb:34:
68:0a:63:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:35 2026 by rpki-client