Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: UPSCj9nfNNHMK4sgOJjLeb2r0a0FAFAyyD6GzfWQYAQ=
Subject key identifier: FF:D5:D7:A6:18:82:D4:CC:65:F6:0D:AC:34:75:CA:62:F1:19:2C:62
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 01A1401585DA7D097E330076FCC8AFDF706D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0DA4
Signing time: Thu 15 Oct 2026 15:01:54 +0000
Manifest this update: Thu 15 Oct 2026 15:01:54 +0000
Manifest next update: Fri 16 Oct 2026 15:01:54 +0000
Files and hashes: 1: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: WkIm2Ojvru0w5HV48nL8JnVGy5nDvEcSsohu7BNDLVI=)
2: QBd5Wpp5kWkoCSM4_95uiC5JDV0.roa (hash: flLVepDAjYfRnttnJvSS11YgDPxXUtJLpwyzAOjne3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:85:da:7d:09:7e:33:00:76:fc:c8:af:df:70:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Oct 15 15:01:54 2026 GMT
Not After : Oct 16 15:01:54 2026 GMT
Subject: CN=ffd5d7a61882d4cc65f60dac3475ca62f1192c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:cd:07:f4:4d:90:6c:20:66:2e:67:ad:13:
c2:f9:2c:ab:0c:f8:1e:95:7c:fa:0f:51:dd:a4:65:
a6:9d:64:1a:a7:20:c9:0c:e6:63:57:f3:a2:c1:c6:
c2:77:83:11:93:01:59:78:55:7e:38:58:ef:72:f5:
91:e7:e1:d4:ce:8c:a4:30:02:bf:3d:06:ba:5a:4b:
03:b8:72:55:f2:93:34:ed:57:b1:6d:da:a1:fa:82:
af:ab:f5:7f:2e:03:4a:ac:96:2e:57:e9:92:c6:53:
dd:d8:32:c3:f4:50:68:3f:16:f2:4b:76:ee:72:a4:
5b:f6:48:31:d8:1f:02:74:cf:82:70:16:ef:f7:a0:
93:d7:84:aa:0f:4a:26:b1:20:c9:b5:57:b7:cb:1a:
55:9f:23:5a:1a:ad:d8:cb:bc:dc:b2:b4:95:34:f2:
25:2d:f4:1b:71:69:62:87:64:e2:61:69:fa:1b:07:
ef:d2:bf:de:0f:94:21:6e:96:e1:f3:b4:68:5b:6a:
60:85:2f:94:03:54:97:21:2a:0c:78:c0:2b:40:88:
fe:66:5f:43:d0:20:b4:2f:b9:65:95:b0:33:e7:eb:
d9:7b:5b:59:d8:e8:4a:dc:09:a3:68:4d:48:a1:d7:
2b:6c:16:54:bb:1b:79:46:19:4c:cc:0a:b9:79:90:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D5:D7:A6:18:82:D4:CC:65:F6:0D:AC:34:75:CA:62:F1:19:2C:62
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6f:c6:17:04:c0:f7:d0:76:e6:96:8e:58:95:f8:21:52:7c:
71:19:76:e4:02:b9:0a:35:11:d1:36:90:99:c1:08:40:ff:d1:
6e:ea:1f:9d:1e:16:ed:75:74:d1:4b:d1:99:50:c1:e1:04:e9:
bd:fd:87:dc:23:ac:d5:3e:c6:21:65:aa:31:8d:9b:9f:fd:17:
0f:7e:de:b4:54:bc:25:f4:e8:ec:14:2d:81:6a:a1:41:a1:d5:
fe:ec:a6:46:d5:45:89:4b:ed:ac:a8:24:80:b9:5f:78:24:f7:
1f:e9:ef:3b:ec:01:d0:9f:da:30:ba:b8:71:af:2c:b1:b4:17:
31:b8:5a:c3:d8:53:96:5f:f4:c7:52:bf:0b:28:d6:c5:95:ab:
39:f2:c8:fe:17:c5:93:eb:12:cc:b7:2b:e3:de:e2:0c:48:b5:
ea:9f:4e:78:53:d4:23:4f:f2:22:c7:2a:99:5b:a2:39:b5:10:
a2:7e:5e:9e:12:72:f8:22:cb:02:18:7f:60:46:c6:11:f2:24:
73:b9:88:46:a2:6e:2d:b9:3b:5c:53:49:62:20:eb:d3:a9:26:
10:d0:54:25:28:06:82:ec:5b:88:70:ff:6c:36:6e:a8:01:f3:
2b:f8:3f:a3:5b:5e:ba:76:00:26:ea:bd:49:b1:15:19:5d:fe:
0b:73:9d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:08:20 2026 by rpki-client