Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File: s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier: re/t4Jp0RS2zMXCo2sYd56H65zVt7P0sEbVR3p35R1M=
Subject key identifier: B8:6E:F5:70:15:7E:86:BD:0D:98:F9:1D:37:1D:9C:9C:FA:A3:F3:31
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer: /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial: 01A172B83B26FD0DE4DEDBFC18C3E7D7F836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number: 1AC4
Signing time: Sun 25 Oct 2026 11:00:38 +0000
Manifest this update: Sun 25 Oct 2026 11:00:38 +0000
Manifest next update: Mon 26 Oct 2026 11:00:38 +0000
Files and hashes: 1: 5pbnClUh_kjLeLo2LMo1Y3vUlB0.roa (hash: Df2su1WC1f8Y96ErLqJKLUxdchUeDa/xX3IGKu6zDvE=)
2: cvG-jh0yKd3zLB32ubBPh1-7dwo.roa (hash: V6xzuEneOg5ndhVSUWtzhVClWw0yZUrA/g0C/6rX9iw=)
3: gBeSyX3OIacsVNGP8Mb0jV9GelU.roa (hash: /xqQeuzxIVD73VffQlPGbA5YqJe0ZE3mXWCLH1Yq3B8=)
4: jgJjnBaMcQo884ecdwwWeiiVGwE.roa (hash: uwiSgB/KcqJF3KmjqsXsLwBRecZ/E7ry8OXiZq9C8PQ=)
5: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: XSLUKvgD6GCLdC+R474dcS+hSQ/yDj4e+uT+67jr/gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:b8:3b:26:fd:0d:e4:de:db:fc:18:c3:e7:d7:f8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Validity
Not Before: Oct 25 11:00:38 2026 GMT
Not After : Oct 26 11:00:38 2026 GMT
Subject: CN=b86ef570157e86bd0d98f91d371d9c9cfaa3f331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:5e:1e:f1:18:15:96:33:ff:3b:76:3c:4b:
ae:00:03:40:72:e6:de:89:ef:b3:55:33:3d:4d:f4:
ce:72:4d:26:e8:33:8f:54:17:df:7c:7f:06:99:f5:
4d:7a:6c:40:dd:7a:1d:92:92:0c:ae:2e:df:73:e5:
bf:3a:30:20:30:8a:a3:99:de:10:63:e7:0e:70:1d:
ca:2f:0c:97:ab:16:71:5e:04:96:d5:9a:12:c3:c8:
2f:8d:3e:94:a6:3e:a6:7a:e2:36:ef:52:3a:5a:03:
63:38:4d:9a:db:ea:4f:f9:1a:15:b1:15:80:a7:af:
07:0b:d0:28:41:37:33:e0:8a:39:ef:25:3b:3d:ed:
87:97:5b:8f:fd:75:f0:7c:72:df:9f:bd:43:fb:0d:
78:a1:66:71:1e:43:21:06:da:e4:93:ee:99:0c:26:
90:2e:bb:48:55:c3:0b:8b:cc:3b:8c:70:e6:71:bd:
52:e9:bf:57:52:79:26:83:45:0f:15:82:71:3c:9f:
83:28:2f:a9:d6:d0:45:c5:87:1f:32:a4:b8:57:16:
f9:fc:37:38:09:a3:f0:dc:c6:73:08:09:6c:19:23:
ee:cf:dc:40:d4:58:b6:d1:a9:e5:b6:d5:dd:bb:be:
15:88:a7:44:e4:3f:90:85:a1:f8:93:11:73:12:9e:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6E:F5:70:15:7E:86:BD:0D:98:F9:1D:37:1D:9C:9C:FA:A3:F3:31
X509v3 Authority Key Identifier:
keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a0:35:2d:4f:d7:1d:e8:49:f2:6d:54:45:8a:91:6f:89:2d:
a7:cf:51:0e:d1:97:71:f6:3c:bd:70:27:ea:21:5d:dd:35:e8:
33:0d:5a:93:e1:d9:16:f3:d1:e9:4c:3f:7a:bc:ba:1d:a6:ff:
5d:bd:09:ff:d3:3b:e8:cf:69:47:c9:b5:11:db:d9:51:fe:b7:
fc:c9:82:c1:e1:c8:34:21:77:d4:c2:74:36:50:d4:3e:e0:e5:
25:2c:c7:9d:0d:54:56:4b:8e:6b:e9:57:76:f3:bc:92:40:74:
e6:f8:ce:9a:c2:90:ae:f0:16:b7:b9:d8:62:c4:97:e7:3f:2f:
8f:79:6c:34:b0:28:38:ce:bc:4e:07:43:bb:7f:22:63:74:05:
68:0e:20:28:61:8a:94:0b:d8:9c:5b:cf:e9:e5:2d:fe:63:84:
0d:8b:4b:23:47:91:fb:6a:56:04:21:bf:28:ab:d6:b3:84:c3:
8f:67:f8:6e:40:1e:bb:3f:65:e7:5e:31:cc:12:5c:36:92:b9:
ad:fc:32:71:1b:ce:9b:f4:b7:a8:b1:13:86:c5:1d:64:1b:e3:
52:33:93:5a:45:8b:56:8d:79:72:25:24:85:45:c9:91:31:24:
07:cd:59:33:ef:03:f6:fb:16:cf:bf:4f:c9:bf:74:c3:f5:0b:
eb:31:9b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:33:30 2026 by rpki-client