Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier: qAUlT7yrwl5BAepq+LrtV+gbOsbVcVtkKNaIz86Yn7k=
Subject key identifier: 42:30:F8:00:21:F4:41:6C:AE:09:B7:AA:0D:E6:7C:DA:2B:2A:B0:CB
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial: 01A17EBCDA42ED1F4FDBF599D86E4EDD052B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 19:01:08 +0000
Manifest this update: Tue 27 Oct 2026 19:01:08 +0000
Manifest next update: Wed 28 Oct 2026 19:01:08 +0000
Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: 0yf6GoZBhwcCdwjiwqWeD4M40OElGOK21edIbYgsJiA=)
2: L3FElQgN_OK9ME85XjkPB5d4njo.roa (hash: 7fKQw9/kLDh7zT4p1MB3dQg/LI4nczVMbuMgYO277J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:da:42:ed:1f:4f:db:f5:99:d8:6e:4e:dd:05:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Validity
Not Before: Oct 27 19:01:08 2026 GMT
Not After : Oct 28 19:01:08 2026 GMT
Subject: CN=4230f80021f4416cae09b7aa0de67cda2b2ab0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:86:15:bd:70:d3:f4:a9:07:8c:ed:e8:14:
14:95:73:f5:94:04:e4:72:33:f5:e0:49:1e:c6:e6:
b2:db:23:69:7a:17:03:d3:27:a2:6d:32:da:50:09:
94:ef:c2:dd:68:4d:02:91:39:dd:b7:6b:d5:e7:3b:
82:1f:a0:20:e0:73:19:15:53:1d:3a:ef:a3:a9:8b:
7b:f9:2f:fc:98:12:d9:00:0a:79:37:14:28:86:a3:
ee:6d:ee:85:cd:70:4f:ea:5a:92:98:79:fe:d9:5d:
de:f9:6d:da:9a:42:c7:e8:c7:36:32:91:c9:fe:f7:
f2:29:2d:e7:c6:61:69:75:c3:0f:64:ed:a6:5f:0f:
35:b9:14:ca:6b:39:4d:74:17:0e:52:cc:67:90:82:
c5:cf:a4:c9:6f:b5:ac:d4:45:57:b7:6a:84:ef:5a:
1d:41:4d:78:e2:57:67:fa:ab:f9:bd:8e:9b:23:5e:
df:d0:62:fb:4e:63:50:59:47:bb:a8:da:37:e5:a0:
b7:03:ef:6a:58:d1:3f:52:d5:43:f8:fe:1f:4e:55:
5c:44:d4:f7:8c:b3:41:f0:e6:ed:60:f6:8f:fd:a8:
02:61:69:02:45:34:90:a3:26:93:c2:73:61:26:9e:
14:05:03:67:bd:f6:30:15:33:3a:dd:ee:2f:71:50:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:30:F8:00:21:F4:41:6C:AE:09:B7:AA:0D:E6:7C:DA:2B:2A:B0:CB
X509v3 Authority Key Identifier:
keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ac:7f:d2:76:01:46:aa:c4:0d:70:71:1d:88:8b:54:1d:d8:
cd:70:61:ab:ad:1e:50:4f:54:0d:df:4c:86:a5:88:e6:72:7f:
f3:2c:8d:92:ea:69:74:de:60:b3:7c:bf:5c:a8:a7:1a:cd:e2:
b3:c6:af:fc:7b:f9:f2:d4:c8:b0:6e:28:cb:ca:ba:dc:8f:45:
13:06:28:05:d0:17:8f:61:e0:10:05:8d:e7:16:8f:69:fa:1f:
8b:f7:16:43:3f:9a:2d:9b:b2:ce:33:61:38:58:9a:9f:27:a6:
b0:3c:54:3b:b5:f1:e9:cd:b0:91:ff:de:6f:33:49:60:c1:6d:
7a:30:ab:91:ab:ee:b2:b4:9d:7d:ef:e6:4e:5c:2d:1b:be:55:
03:66:4c:3e:1b:ff:36:4c:d5:19:c9:45:94:2a:c7:6b:11:73:
ce:d0:a3:41:f8:1e:3e:fd:48:75:30:d6:fe:a9:d0:06:96:ec:
79:b6:70:7a:0b:12:95:9a:37:e8:ee:f8:4a:85:55:3e:4b:c3:
61:92:37:29:58:9d:96:6a:65:8a:4b:40:0b:68:3d:a5:54:3c:
ea:0d:21:c3:5e:05:64:e4:1c:af:82:be:46:bf:2a:04:e1:ca:
4e:45:68:e7:bd:84:05:20:41:1a:6d:f3:8f:d4:f2:31:e1:15:
d0:12:6c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:38:27 2026 by rpki-client