Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: m75Qq4GCF15FDSmwT/IOatlqdsKYhBGRR4R7kgv/V78=
Subject key identifier: 81:B7:3A:AF:7B:62:51:77:1C:83:8C:0F:3A:09:20:0A:B8:23:FF:5A
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 01A122E622F38E1EE1A675C7EC971F858031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 0795
Signing time: Fri 09 Oct 2026 23:01:09 +0000
Manifest this update: Fri 09 Oct 2026 23:01:09 +0000
Manifest next update: Sat 10 Oct 2026 23:01:09 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: K8FP6fYMi7lE76DUWClGxRPC4CVGnndaIamgVzmvOqg=)
2: JKxruJrsyQODEt0lo_2igVlEBhw.roa (hash: 2Ldq4wJQTMkIcJXiRtPhwdIrKaep4MniRxTOmuYmXUs=)
3: UrR8he9LeX1_n_grB04eKjIEfn4.roa (hash: 6VYM1BE9h3lSboPJRgPSxyvYhSPFOMNMfzzxqBF3w0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:e6:22:f3:8e:1e:e1:a6:75:c7:ec:97:1f:85:80:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Oct 9 23:01:09 2026 GMT
Not After : Oct 10 23:01:09 2026 GMT
Subject: CN=81b73aaf7b6251771c838c0f3a09200ab823ff5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:c3:68:c9:e9:27:f9:3f:e1:27:81:42:e5:
b3:9e:51:8f:46:ea:08:00:22:ba:27:8e:7d:25:3f:
87:98:28:e1:b7:ef:29:42:ce:a4:a4:58:70:7f:8a:
1f:bb:ed:ba:c4:a2:56:d4:fc:d5:0b:29:4f:0e:5a:
32:3d:63:d4:2c:ad:d6:94:bc:e8:55:c9:72:52:8a:
96:3a:73:e4:fd:15:a4:4b:8e:d8:fa:02:27:66:12:
e9:35:6e:bd:f4:f3:2e:5a:cc:af:01:e9:f5:f1:f6:
c0:f6:52:27:bf:09:08:72:45:f2:c4:d6:1a:69:ef:
93:6c:45:f5:f9:ca:27:94:ef:73:9e:e6:9d:72:58:
8e:3e:af:b4:63:04:56:7f:e7:4a:80:da:73:99:b5:
4b:00:4d:04:99:85:67:a6:4f:c0:57:58:ca:0b:c2:
73:c0:b9:e5:c8:cb:8f:05:2b:82:7a:78:d8:33:8d:
8d:b3:dd:3a:d1:80:8b:cd:b7:32:7d:84:5e:cf:3f:
92:c0:0c:0b:33:aa:22:7a:f7:78:48:01:94:4c:53:
ef:cd:35:45:6e:a3:02:a8:e1:26:86:e2:c9:c0:19:
e9:69:62:50:d0:53:aa:56:bf:d3:6c:4f:b4:7e:78:
b5:68:5b:49:02:10:0a:5f:20:ce:cd:aa:b9:b9:5a:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B7:3A:AF:7B:62:51:77:1C:83:8C:0F:3A:09:20:0A:B8:23:FF:5A
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f0:d9:d5:53:1b:eb:f9:81:e1:15:db:aa:a1:cb:d4:1e:87:
ef:ad:9e:07:64:79:bc:05:6c:a2:bc:ca:b8:62:cf:98:b3:f1:
e2:5a:61:67:f9:b4:3b:af:b3:35:ca:8f:8d:8e:02:31:ff:0b:
a4:d6:62:75:a6:71:15:f8:ff:0d:13:e9:91:b0:58:34:40:47:
f5:7f:15:80:13:12:6f:56:3f:a7:11:42:9f:e1:6d:08:7e:4b:
e2:9d:61:6a:99:80:76:35:8c:1a:26:52:de:f0:ac:71:ba:14:
f3:9a:1c:c4:98:30:ca:b1:a2:1e:32:8b:73:12:29:b7:ac:55:
80:f7:c9:b9:cf:3e:10:7c:c2:60:34:af:08:75:13:a1:c5:44:
de:29:ab:67:40:15:c0:49:ff:89:65:1d:b8:63:22:52:60:bf:
c2:9b:eb:5e:4c:db:fd:93:c2:f0:ac:54:a5:fe:d4:f9:bb:c6:
e5:a1:d0:95:0c:32:c2:6f:75:36:91:22:31:27:6e:38:9e:35:
46:a4:99:9b:23:0f:8a:66:fc:f2:51:62:88:33:54:ca:20:26:
18:a1:91:70:46:99:f6:83:ce:5f:eb:ca:88:9f:a6:95:d7:54:
3d:69:29:48:eb:bd:96:00:27:68:d1:63:ac:75:af:52:ce:7a:
47:cf:39:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 03:11:19 2026 by rpki-client