Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File: d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier: ukT4+n0z1Y0LsHKNWkrGhBK8CQofBnZLv0gk+vhS+G8=
Subject key identifier: B0:69:DE:37:09:80:24:AE:E1:1D:8C:31:33:13:24:3A:B3:51:57:85
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer: /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial: 01A1513F03155A588E5CC198983722F37510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number: 1029
Signing time: Sun 18 Oct 2026 23:00:46 +0000
Manifest this update: Sun 18 Oct 2026 23:00:46 +0000
Manifest next update: Mon 19 Oct 2026 23:00:46 +0000
Files and hashes: 1: 6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa (hash: pfVa1UicKiOy2Facu1pK6Uyiw1IMqVl6D7uB18F/7yw=)
2: 9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa (hash: sjrsCbBwaUlQ8V+c9dddc6DlyD0j++DkIm2cvSRmRTg=)
3: bWOm_rxxwcbWaTmu2SnHiIL1r88.asa (hash: QCA4tD64a2YOFOaYQUc8hAaRjVEoTC+6/Xd9DFb0omA=)
4: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: WY9eX2dRS0u+4dWubw+F0O5lLPUFr1kXcYgvJA4aR0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:3f:03:15:5a:58:8e:5c:c1:98:98:37:22:f3:75:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Validity
Not Before: Oct 18 23:00:46 2026 GMT
Not After : Oct 19 23:00:46 2026 GMT
Subject: CN=b069de37098024aee11d8c313313243ab3515785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c2:a9:d3:0e:99:4f:3b:92:3e:ad:15:b7:29:
5c:6a:14:84:b2:48:2a:13:68:aa:f4:54:1b:f2:38:
6d:01:23:8d:46:37:d9:51:ed:1c:81:59:c0:c4:dd:
57:30:7a:41:54:e5:f5:d6:5e:98:72:27:d0:f6:a7:
f2:96:da:aa:83:3b:79:ee:9e:77:1d:c3:e0:10:50:
c9:60:a4:cb:d0:84:65:02:8b:80:1f:14:c4:f6:ff:
2d:d9:33:d1:cd:0d:bd:0a:58:10:a1:00:d7:99:ce:
80:14:f6:2f:07:06:2e:ad:06:01:da:4a:cf:78:a4:
90:44:43:aa:9e:39:e1:45:58:c4:a8:e6:3b:30:d5:
e4:6e:f9:34:01:5f:ce:c2:6c:21:ec:4f:bd:66:05:
ee:ff:df:7e:cf:3c:04:10:6e:c8:31:c6:23:5d:ab:
5b:c0:d1:dd:ff:82:bb:a0:34:0d:ad:26:91:e1:1c:
72:ae:0b:cf:c4:77:1b:e5:8b:8d:9b:4d:c8:5d:58:
aa:47:8b:63:8b:65:80:f1:96:68:d9:83:c7:ac:be:
ea:36:66:d9:08:45:64:78:ec:d7:29:69:fe:de:62:
be:a2:58:33:93:5e:f9:f8:b0:35:0c:c3:b0:57:7d:
9c:13:f1:19:2f:06:4b:5d:a6:fc:4a:0d:f3:de:55:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:69:DE:37:09:80:24:AE:E1:1D:8C:31:33:13:24:3A:B3:51:57:85
X509v3 Authority Key Identifier:
keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8b:f3:ce:b4:9a:96:fe:d4:0b:66:a4:b3:7e:6a:98:80:f4:
8b:82:52:a5:99:98:44:1c:16:89:6c:a2:5a:8c:c4:af:dc:a1:
c2:ef:bd:aa:bc:52:16:44:05:44:a3:1c:40:65:f0:f2:ac:45:
06:05:8d:18:84:e7:85:7a:07:e1:4f:9f:23:d4:52:ba:df:3b:
eb:81:1a:e6:35:4b:a0:c1:f6:fd:4b:42:b7:75:27:c6:c2:fd:
f1:33:cb:c2:c0:a4:f9:fb:b1:85:40:71:98:fc:ad:b4:5b:b8:
0a:f4:2d:bd:f6:93:e6:41:c0:0b:76:76:fb:fe:1f:6c:49:b0:
fa:a4:a0:f6:c1:5d:30:b1:78:cb:15:21:16:01:ae:ac:7c:be:
d6:7d:5e:09:67:7e:6b:d4:cf:f5:32:48:c3:b6:9d:ff:6d:b3:
f8:2c:34:fd:f5:63:3c:d4:65:eb:af:ab:0c:34:f0:54:8a:06:
f1:19:4c:74:ef:12:20:d8:6a:ce:da:69:31:04:4c:74:38:8e:
25:72:be:37:11:16:9b:69:8c:ae:d2:1f:f2:6c:5d:d8:0a:de:
8c:fe:ec:05:b0:e4:46:d7:c7:a9:ed:87:84:c7:7b:64:2e:e5:
72:58:19:af:c5:33:bd:ec:42:db:0d:2e:04:51:2b:8b:e8:20:
20:a0:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:48:46 2026 by rpki-client