Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: MNurIzI1qKJ79B7OK/WoDc6Og3UuPiiE3mnUJ9waQ7Q=
Subject key identifier: 7B:55:8A:3C:BB:71:00:64:82:5F:70:EC:F5:C3:65:FC:76:17:36:2C
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 01A13CA567CCC355B28274A964C2EC225733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 1AA1
Signing time: Wed 14 Oct 2026 23:00:35 +0000
Manifest this update: Wed 14 Oct 2026 23:00:35 +0000
Manifest next update: Thu 15 Oct 2026 23:00:35 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: tdWOEdBF85Ubb2hM+n9O+NB35322xjOVX3xsmtX/JFg=)
2: HZePOmsjkPsg7dlktNrDrbvkEoQ.roa (hash: EMtZKX87wa385GEwMyBcWWCzgkUjroenf3wknZ0qOr8=)
3: feUrijd_KveyJ7eNJ1rBQYy4hhQ.roa (hash: 8ChsNr7pTk9JhrykIfRkpxl+JlzU+6lvsFJu1WkZIeY=)
4: jbQbuOumCNgoddvSeNQ0EqiLIvk.roa (hash: r2PNx4QtBVQh/b8nKhzHQVcKqAGoHRGsycMInrQsQyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:67:cc:c3:55:b2:82:74:a9:64:c2:ec:22:57:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Oct 14 23:00:35 2026 GMT
Not After : Oct 15 23:00:35 2026 GMT
Subject: CN=7b558a3cbb710064825f70ecf5c365fc7617362c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:01:bc:50:34:f6:63:80:36:74:25:91:74:
7e:0b:8d:50:d0:8a:95:bb:26:81:6c:1a:92:ee:e8:
5c:ab:ef:fd:1e:2d:fc:05:04:37:12:a4:f2:b1:ec:
79:4f:fd:01:78:06:1b:03:06:5c:b7:57:46:f2:19:
6b:23:a1:ad:14:8d:11:b7:04:92:20:aa:36:04:f5:
9f:f2:98:4a:fc:25:7c:34:77:5f:c2:45:5f:a9:d5:
98:bd:ef:88:3f:67:10:a7:98:31:ad:ff:8c:a3:15:
43:15:25:a7:46:8b:55:03:d1:12:93:84:e1:ba:54:
7b:99:b2:0d:2e:5b:0f:eb:44:ac:ae:92:06:57:ce:
ca:96:15:3c:5d:e5:c9:49:e9:12:da:de:72:2b:09:
11:85:01:f9:f0:1f:07:7d:42:e6:18:72:59:ad:0e:
32:bb:27:ff:2e:bc:50:e0:4b:df:a7:8d:b1:fb:71:
91:16:e4:24:5d:29:9e:be:91:ea:7f:4e:b2:bd:7b:
ae:c0:26:26:cd:95:ce:c5:1f:54:f4:bc:0c:46:94:
29:d9:f9:c8:ca:3c:aa:57:aa:a8:eb:14:e0:ea:95:
67:95:6c:f7:ee:6a:8f:7b:c8:19:7b:fe:85:b5:ee:
8f:89:9f:80:04:ec:4c:c1:69:53:ad:ce:8e:7c:c3:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:55:8A:3C:BB:71:00:64:82:5F:70:EC:F5:C3:65:FC:76:17:36:2C
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:29:98:23:4a:56:9d:37:c5:37:4b:7d:33:50:f6:27:2c:96:
93:3c:ed:6f:12:c3:18:56:da:3a:b5:18:08:01:20:a9:4b:01:
db:61:15:c3:73:ba:2f:a0:51:0b:25:d5:43:cc:45:3d:06:44:
b5:2d:08:83:1a:3a:69:da:72:45:7d:41:a8:99:54:0a:d8:9e:
dd:cf:c5:f3:a1:f7:06:a7:aa:90:82:f4:71:e6:ee:78:2a:94:
47:e6:9d:9e:02:c2:06:13:ab:39:30:82:4a:4c:9d:5a:a9:e5:
d4:09:91:f6:75:c7:fc:36:97:4f:54:99:5b:c5:6f:8b:99:17:
51:0c:66:45:4d:dd:29:5f:e5:67:3b:be:bc:6d:86:72:fa:2a:
4e:be:2c:c2:1f:0b:6d:82:68:ec:f0:48:85:b5:ca:fd:7a:20:
87:05:61:8e:dd:ab:62:d6:33:c5:e0:b0:12:5b:a6:22:14:2b:
17:48:6c:f6:73:8c:4b:b9:16:c6:36:c3:f5:12:31:06:20:0e:
29:0d:a1:42:8e:6f:ef:ab:f4:93:b7:8e:b4:f2:07:46:d5:34:
12:42:5f:ca:7e:cb:40:dd:dd:3f:5d:31:b2:9e:9f:91:e8:2f:
b2:53:03:d9:f0:51:47:47:95:3a:c8:d0:ce:82:4e:ba:e4:b3:
6b:bf:43:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:53 2026 by rpki-client