Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
File: 9A68dJdsw9CsbGRtUHcPjZoWqeo.mft (raw, json)
Hash identifier: ndw887zcpXsO/kLn66ur4xu7aGx9qZjBmdUN00A8Iz4=
Subject key identifier: 77:1B:5C:44:04:08:F2:49:E0:7C:76:CD:6E:22:BD:07:50:FA:0B:F6
Authority key identifier: F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
Certificate issuer: /CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Certificate serial: 01A0408514F6D32C4C96599853E3695703F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
Manifest number: 0256
Signing time: Thu 27 Aug 2026 00:00:58 +0000
Manifest this update: Thu 27 Aug 2026 00:00:58 +0000
Manifest next update: Fri 28 Aug 2026 00:00:58 +0000
Files and hashes: 1: 9A68dJdsw9CsbGRtUHcPjZoWqeo.crl (hash: nrPwwKRei/qeXHbBfG2CabZzciDg5GVIUplBFWd6Zq8=)
2: cchuMiAwTdP7712IVa-5EwuoTbA.roa (hash: WntKm32ijw/Zst8nMPt2C0CBnjs1jMpSXp57ZJLNvM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:14:f6:d3:2c:4c:96:59:98:53:e3:69:57:03:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Validity
Not Before: Aug 27 00:00:58 2026 GMT
Not After : Aug 28 00:00:58 2026 GMT
Subject: CN=771b5c440408f249e07c76cd6e22bd0750fa0bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:63:ca:28:8b:0f:64:c0:45:80:af:b9:3d:
24:18:37:22:a7:c4:3d:24:35:a1:83:ce:db:ef:21:
81:a1:be:c4:b6:44:f3:3c:89:ba:dc:66:b4:ef:b4:
0f:6e:9f:d4:f8:99:ff:cf:09:a1:bb:bc:5a:24:43:
4b:c1:e6:05:12:30:0f:94:14:18:18:76:04:69:fd:
37:09:b7:43:ac:e8:f3:a0:eb:e0:cc:27:9f:b8:78:
c6:f6:63:88:d8:83:f3:ac:24:09:af:fa:ba:ec:80:
86:9e:f3:98:46:c7:c9:2d:00:da:24:7b:e4:3e:ba:
c6:19:e2:94:1f:06:ce:66:d7:6c:f1:61:2c:99:d5:
38:4d:5c:c3:fd:ab:90:43:72:bf:91:d5:cc:20:96:
75:f7:6f:a7:af:51:da:ef:dd:24:da:7e:dd:c0:87:
a3:c8:23:c5:e8:5b:43:fc:0f:6e:01:72:ba:8c:f5:
10:5b:95:12:6e:27:6f:20:96:6d:2f:e0:3c:66:ad:
14:d9:6e:42:46:4e:22:9d:dd:d4:ad:02:4d:c6:33:
ea:6f:2e:78:8b:64:05:62:fa:34:fa:db:48:7b:a6:
98:04:12:bd:bf:92:ed:7e:a9:67:ac:cc:d8:59:b7:
0c:36:2c:e3:8c:91:f9:48:20:23:20:73:33:a3:70:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1B:5C:44:04:08:F2:49:E0:7C:76:CD:6E:22:BD:07:50:FA:0B:F6
X509v3 Authority Key Identifier:
keyid:F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:00:f3:70:ae:51:91:52:9f:25:1a:1e:2f:62:60:4e:ca:11:
ed:95:4f:fb:a4:23:f9:15:4d:51:f6:94:c3:0a:71:4b:a9:1b:
c1:47:2b:3d:38:97:91:ef:d7:ae:90:b7:44:0e:bf:05:da:8f:
f4:fe:75:76:b8:5f:aa:57:07:30:14:21:8e:a5:ab:5a:73:46:
69:00:21:71:80:ad:96:7b:78:8f:b9:41:dc:7f:a0:e0:6d:b9:
30:d4:96:de:61:21:39:e8:9f:c2:37:91:d0:8d:82:a6:ef:97:
87:ed:cd:8f:58:e8:6f:e2:5b:5c:26:91:cc:e6:82:d6:10:ac:
fa:b2:32:70:61:42:f1:e7:fe:94:52:17:3c:55:d0:b7:5b:f4:
2a:55:fb:b3:36:dc:fb:36:89:df:97:2f:55:6d:82:b1:e1:ae:
ea:c8:d0:bb:c2:ec:ff:bf:02:e6:f8:f9:05:9a:0c:53:cf:0e:
6b:cb:06:d3:46:ef:63:69:38:69:61:63:f8:f8:1a:82:58:9c:
2c:96:c1:60:29:b3:71:a2:78:72:a7:82:bb:70:c6:ab:93:87:
85:2a:e9:21:1b:61:18:9c:5f:8c:fc:cd:a5:d9:89:3a:29:a1:
32:9e:32:d0:78:15:d4:8a:03:8c:9d:c7:dc:f1:a8:05:a5:2e:
1d:8b:d8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:48 2026 by rpki-client