Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File: s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier: R79HRPiR7thmOkjj9WtduAswttpY7fF+PFn/pvi9kLA=
Subject key identifier: 60:AB:E0:57:46:9E:90:2D:BB:7D:13:7C:99:CB:DD:B5:CA:BE:F3:03
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer: /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial: 01A1788355E97D5E407160812812BDE9DD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number: 1AC7
Signing time: Mon 26 Oct 2026 14:00:35 +0000
Manifest this update: Mon 26 Oct 2026 14:00:35 +0000
Manifest next update: Tue 27 Oct 2026 14:00:35 +0000
Files and hashes: 1: 5pbnClUh_kjLeLo2LMo1Y3vUlB0.roa (hash: Df2su1WC1f8Y96ErLqJKLUxdchUeDa/xX3IGKu6zDvE=)
2: cvG-jh0yKd3zLB32ubBPh1-7dwo.roa (hash: V6xzuEneOg5ndhVSUWtzhVClWw0yZUrA/g0C/6rX9iw=)
3: gBeSyX3OIacsVNGP8Mb0jV9GelU.roa (hash: /xqQeuzxIVD73VffQlPGbA5YqJe0ZE3mXWCLH1Yq3B8=)
4: jgJjnBaMcQo884ecdwwWeiiVGwE.roa (hash: uwiSgB/KcqJF3KmjqsXsLwBRecZ/E7ry8OXiZq9C8PQ=)
5: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: eO66YtBMLfEfNhSZfdE5BTAZ2amAfTOAnUH4GtAWz5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:55:e9:7d:5e:40:71:60:81:28:12:bd:e9:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Validity
Not Before: Oct 26 14:00:35 2026 GMT
Not After : Oct 27 14:00:35 2026 GMT
Subject: CN=60abe057469e902dbb7d137c99cbddb5cabef303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:52:96:32:fa:96:b6:aa:e5:f3:d1:eb:fc:
67:3a:96:c2:67:47:ba:5c:a8:e7:76:1a:a2:e4:1f:
74:80:5c:8e:1a:fb:c9:2c:81:6f:09:3d:6f:71:59:
a6:c2:5a:85:21:4a:14:7c:ea:d9:80:d0:db:b5:3f:
bf:f6:28:f8:a3:36:6a:e4:96:fd:95:68:33:f5:1f:
21:f3:c8:e8:35:60:3a:d0:92:fe:14:0b:1c:9e:d5:
6d:b2:cf:96:52:e3:93:d1:44:76:3f:ad:d4:c6:9c:
a1:bd:cd:34:a5:95:6f:4d:24:bf:d8:a4:09:d7:62:
84:df:87:40:1d:06:f5:24:cd:a2:47:da:98:e3:99:
b0:e9:da:d6:4c:b7:1e:6a:a8:a2:39:54:64:2b:d2:
18:20:d9:ef:f8:88:6a:5b:d0:b0:72:0c:0c:78:a4:
f0:49:a1:ab:21:7f:85:33:e2:d7:e0:f9:df:8b:c4:
4b:a1:24:4a:b1:d7:0c:d5:38:1f:4f:78:2d:f9:07:
10:1b:ca:66:6d:e7:8a:7a:5f:09:4e:fa:2e:08:65:
21:db:2b:75:89:0b:64:7c:0e:16:1f:51:63:c5:c5:
c5:13:d2:fb:c3:3c:7b:a9:59:85:7e:27:a1:57:f9:
64:a8:fe:42:bf:ea:19:28:10:43:05:15:b9:80:e8:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AB:E0:57:46:9E:90:2D:BB:7D:13:7C:99:CB:DD:B5:CA:BE:F3:03
X509v3 Authority Key Identifier:
keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:82:8e:59:ec:fe:dd:ac:0a:eb:57:7f:f2:28:e3:f9:84:fc:
e7:2b:01:29:29:57:f7:af:d5:7e:96:f3:59:9d:46:16:63:ce:
49:d1:b2:94:61:fa:14:0d:c9:c4:cd:f2:73:e7:0f:9d:ad:a9:
f9:f5:6d:19:46:19:b5:ce:bf:c9:f7:d9:c9:97:f9:3c:1f:c2:
4a:18:98:09:44:ba:3e:e1:d2:43:fc:ee:13:1c:ae:f1:f3:1e:
51:da:e8:88:91:51:9a:39:e8:2c:5e:cf:99:d2:f4:39:f6:30:
4c:26:78:d9:c1:7a:ec:26:2a:df:ee:12:d1:4a:01:9d:c7:5f:
8b:6c:c8:9b:c4:93:4a:e7:fa:19:60:d2:2c:fa:04:9f:1c:17:
97:1f:32:51:fe:09:43:ea:01:5d:0f:27:18:d0:b5:6e:99:c2:
28:2d:41:e1:a7:01:d9:84:d2:2f:7b:a9:79:8d:7e:14:da:41:
1a:d1:09:42:e0:6b:d4:9e:39:55:17:e4:8a:fd:84:cb:fc:be:
bc:89:70:71:4b:7c:16:b7:4b:40:a8:b0:71:5a:d4:8d:ed:4a:
f5:b9:8b:5e:5f:e8:03:32:93:d3:83:92:36:4d:89:95:fd:41:
5a:94:74:e6:f2:74:c7:ad:87:2c:22:ca:4a:73:48:6a:1c:5e:
0b:31:e8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:58:21 2026 by rpki-client