Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: 0b36laCwN4Ry3hEuuzShIdldAwUIBFoF4J9gkEj+ZhI=
Subject key identifier: 48:07:36:80:D9:DE:8E:8D:3C:37:7C:75:DE:E0:77:F4:84:0A:2C:BE
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 01A14918371B74C5AAD6897DBE9746ABD8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 1AB3
Signing time: Sat 17 Oct 2026 09:01:25 +0000
Manifest this update: Sat 17 Oct 2026 09:01:25 +0000
Manifest next update: Sun 18 Oct 2026 09:01:25 +0000
Files and hashes: 1: 14LKfzEcyprlucXZUzPgqnyuaSo.roa (hash: owEZKmUqoURhemkZHaPKsDWoCPoanQn9LH86MqhDwCI=)
2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: dHT5J2MEurL+UfEWPiVOVI2XIDaulVPJGs7v+nIEtTI=)
3: G5qi4rCJoI8AUX8isP7b0ojIn7g.roa (hash: FS/t0aq2LUO9zTLCRQWanvLuxo6AAzEoo01kqAkUXDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:18:37:1b:74:c5:aa:d6:89:7d:be:97:46:ab:d8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Oct 17 09:01:25 2026 GMT
Not After : Oct 18 09:01:25 2026 GMT
Subject: CN=48073680d9de8e8d3c377c75dee077f4840a2cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6b:0d:4a:6e:68:8a:6a:85:16:83:68:ae:f6:
20:4d:bd:b3:9b:88:ff:66:01:3a:95:2f:80:0f:48:
16:b2:de:91:78:4d:ae:96:ad:c0:2f:42:65:b6:15:
ed:04:ad:c7:be:a9:d6:07:7f:84:bc:0f:0d:07:d7:
17:55:f0:23:a7:ed:a5:f7:1e:2d:6e:b6:20:f5:c2:
ca:b9:be:ba:2d:44:a1:5e:97:f0:ca:ad:24:d3:6e:
92:50:3a:0e:35:a9:36:1d:0e:67:0f:66:be:f7:f7:
04:72:f3:1a:ea:42:b7:1a:eb:80:e0:cb:e6:3e:ed:
9b:8d:37:04:9d:67:fa:4d:93:be:df:5f:c8:72:a0:
b0:f2:7f:cd:76:30:b1:8c:3c:00:90:21:10:30:62:
54:df:50:a0:79:7a:64:82:b9:6a:ad:3f:fb:ab:38:
e2:22:a2:d6:0d:dc:88:27:a2:5c:5a:79:57:e9:6b:
4f:bd:57:c4:ec:5d:21:c2:32:ea:29:c7:aa:4d:fa:
54:25:db:cc:42:a0:38:36:1c:a0:73:0e:64:fc:10:
ba:e3:4c:78:49:34:a8:c3:d3:29:a2:57:b7:82:8c:
de:54:57:59:e4:b8:06:e2:09:23:75:76:45:4d:25:
10:4f:bb:ba:66:30:c3:ba:7e:28:08:af:05:4a:c3:
f3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:07:36:80:D9:DE:8E:8D:3C:37:7C:75:DE:E0:77:F4:84:0A:2C:BE
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0a:f0:e0:87:19:44:d1:9c:a7:9c:38:22:5b:ca:52:2a:f2:
72:36:aa:1d:18:26:ea:be:ea:ff:34:41:f6:17:82:27:f1:31:
fe:c3:48:cb:71:51:af:17:39:3f:34:c4:df:2d:fb:be:09:14:
fc:2f:dd:25:db:47:0f:a8:0a:d8:d2:4e:c3:5a:a4:d6:3e:60:
fc:b6:d9:86:e7:3a:8a:3a:06:fe:66:b2:2f:0f:18:3c:df:9a:
6e:9f:36:e2:5e:a6:4b:28:1c:b3:4a:83:3c:96:aa:c5:8f:f9:
09:94:04:d3:18:9e:08:3f:ac:1d:12:90:10:35:2d:4e:05:c4:
ba:93:cc:0b:3f:94:a3:d1:7b:7e:b2:f3:2e:38:b3:70:e3:62:
95:db:1b:3a:04:a2:f0:94:81:e5:2c:43:88:c2:79:76:66:bd:
85:c5:4f:dd:74:f6:f7:a6:c2:ee:a6:7a:c4:c6:f9:74:85:8c:
81:f5:12:7c:57:86:8a:a1:6b:a5:57:fd:be:1b:f6:f3:fc:75:
13:35:5c:5f:a0:d3:f9:94:31:e7:0f:83:81:65:a7:7f:ad:48:
ea:5f:81:65:82:01:45:22:ae:1b:03:68:66:87:c4:19:f3:40:
20:c9:ef:52:b6:3d:5c:a9:11:c2:1c:02:69:2c:b9:f4:6d:15:
81:97:ea:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:27:40 2026 by rpki-client