Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
File: 9a2pAdQIv39blDWSHkgAqPgtvas.mft (raw, json)
Hash identifier: K23FD3HcFODCLChqEX3u2OimI8dv6KWS7LvONbZgsXY=
Subject key identifier: 1D:F3:42:9E:EE:A2:98:B8:A1:21:03:29:09:7F:DF:7F:F7:7B:3C:DF
Authority key identifier: F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
Certificate issuer: /CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Certificate serial: 01A13DB7CF02594F59FFBE5334C2EA923081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 04:00:18 +0000
Manifest this update: Thu 15 Oct 2026 04:00:18 +0000
Manifest next update: Fri 16 Oct 2026 04:00:18 +0000
Files and hashes: 1: 9a2pAdQIv39blDWSHkgAqPgtvas.crl (hash: te6f+BBI7Qw8Lsk4OMa5uZ9MBjWwELbP63bANMx4MTQ=)
2: F7XejdmCaEGNMixUqQk4-J8w90Y.roa (hash: xFxOSrDhv/sfkFnURVLPeUZ69mrVPRSFZ5DZPDd5lR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:cf:02:59:4f:59:ff:be:53:34:c2:ea:92:30:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Validity
Not Before: Oct 15 04:00:18 2026 GMT
Not After : Oct 16 04:00:18 2026 GMT
Subject: CN=1df3429eeea298b8a1210329097fdf7ff77b3cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6b:48:bf:fa:79:c0:60:9d:1a:68:4e:86:30:
5e:05:02:4f:db:c0:46:42:ce:e2:ad:23:b2:58:c5:
8a:6a:f0:ab:3d:a9:a1:1a:35:67:af:63:6c:0e:bf:
83:16:4a:e0:c8:39:2c:b4:45:d6:4a:17:3b:da:33:
f8:7d:8e:cd:06:06:bc:fc:c0:e1:0b:a8:c5:b2:be:
e2:90:d4:c9:c3:4c:dc:a4:6e:43:81:e1:64:6b:d4:
9a:ff:ed:db:94:16:fd:76:a5:5b:49:ae:d6:83:91:
72:b1:a1:f5:0a:67:7b:64:d9:15:a2:c4:82:8a:56:
e7:64:b2:23:ac:28:1f:08:b9:25:86:d4:2a:9d:3b:
da:cc:9b:02:be:bb:7e:2c:2e:ee:78:16:7f:3b:55:
f7:7f:9b:f0:c8:4f:be:87:ff:62:c7:bf:da:61:fc:
8d:b3:32:a1:1b:11:c6:c5:61:b8:53:45:cb:59:d3:
7e:62:07:9c:7c:0d:64:ea:41:a7:01:07:6a:4d:1f:
15:ab:bb:61:da:ab:37:2a:65:fb:5d:ba:ef:b5:0a:
5b:43:5e:24:db:56:15:ee:56:d4:19:e4:53:84:ea:
64:02:43:1d:42:2d:77:3f:56:ab:ab:30:65:e5:85:
96:db:1e:46:bb:e8:7b:ea:a0:fc:14:4b:17:a2:c2:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F3:42:9E:EE:A2:98:B8:A1:21:03:29:09:7F:DF:7F:F7:7B:3C:DF
X509v3 Authority Key Identifier:
keyid:F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4f:3e:69:d5:06:56:1d:33:ee:c2:c1:21:6d:1e:7f:9b:36:
ea:7f:ce:8b:54:a7:a1:2b:c9:13:30:69:7a:9c:3b:3d:d1:16:
6d:49:05:c0:66:be:27:a9:6f:89:a7:bc:fe:5f:d8:c8:5e:fe:
83:00:5c:c3:ee:df:54:dd:d8:0e:24:6e:55:1d:15:02:e1:03:
29:59:91:21:30:c6:3a:0c:f9:97:f4:dc:78:48:5d:a9:88:6a:
28:aa:b2:e5:c6:70:68:1c:18:3f:35:4f:16:bf:58:23:ef:44:
96:1b:d5:fa:e9:17:d2:f5:e9:ec:15:0e:2c:eb:f6:3a:2b:5a:
a4:a7:8e:cf:97:35:06:7d:12:c0:b0:b3:9a:6e:e1:a4:62:1e:
9c:04:7d:02:46:b7:51:4f:d4:6d:21:68:a5:a1:fa:0b:56:e9:
f5:9f:ac:13:cb:a3:ca:59:a4:cf:49:66:d3:a9:48:aa:bd:a1:
78:5d:99:ee:27:40:44:cc:46:cb:48:46:fa:94:ab:89:cd:2d:
14:04:4d:ae:13:e6:6b:cc:5e:97:8d:2e:0e:99:f2:e0:d2:af:
f3:3f:35:09:5c:25:a9:59:be:72:fa:b0:68:15:8b:6a:c9:24:
40:cc:4a:bc:51:66:b8:d2:92:02:d6:30:d8:c7:d6:f1:f2:34:
1d:18:45:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:42 2026 by rpki-client