Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: Z2bUg0N3WkzQBcSLckDYTbSwHhzT4I85B7epbZ8MjuY=
Subject key identifier: 4F:00:73:AF:3D:E4:9A:24:86:E6:AF:60:2A:AF:81:71:D0:57:F0:9F
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 01A187F6314818BB13E523052C25C2086C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1ACB
Signing time: Thu 29 Oct 2026 14:00:20 +0000
Manifest this update: Thu 29 Oct 2026 14:00:20 +0000
Manifest next update: Fri 30 Oct 2026 14:00:20 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: ue43rDZJfqsQX7c1sSXffmdrJOyK1tXIRfe2r4yfBqM=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f6:31:48:18:bb:13:e5:23:05:2c:25:c2:08:6c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Oct 29 14:00:20 2026 GMT
Not After : Oct 30 14:00:20 2026 GMT
Subject: CN=4f0073af3de49a2486e6af602aaf8171d057f09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:46:db:a3:e3:81:7f:55:56:f3:8b:ee:da:
df:fe:38:83:8a:65:ce:ce:db:49:a2:3a:c5:6e:4f:
ef:23:e3:9c:a8:c0:4c:83:5d:3f:ff:c0:fe:d9:8a:
14:d9:5b:8b:0b:fc:b5:9c:c4:4b:ac:96:a7:ba:e9:
56:28:46:51:96:b9:fa:7d:86:f7:37:0d:50:a7:74:
ac:12:68:25:e9:5b:7f:7f:5b:e1:a1:19:df:e7:45:
0b:f8:87:b4:7c:67:d1:e8:bb:b2:86:9b:ff:fc:c9:
f9:42:28:72:69:12:e0:4f:1b:10:bc:be:4a:ec:54:
4c:1e:bf:67:90:1c:2c:1a:97:5e:a8:c5:1f:fb:0a:
a1:07:1c:18:32:82:94:c9:cf:c9:ac:ed:0c:8b:0d:
69:6a:7a:dc:57:ef:0e:6a:6c:71:c1:3a:09:24:9a:
c6:a1:5c:9c:f2:5c:1e:11:df:27:57:7c:fe:35:45:
dd:25:0a:de:71:97:6e:06:fd:8a:8d:78:3f:7c:b4:
c4:8c:53:b2:df:04:96:da:aa:bc:7d:55:49:75:03:
7b:10:1a:7e:1e:0e:54:44:b4:00:28:e2:9a:d9:46:
f9:2a:19:e4:b2:72:50:bd:25:46:92:3e:0d:56:1c:
4c:87:46:f2:12:65:94:df:38:39:4a:4c:15:1c:b4:
e4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:00:73:AF:3D:E4:9A:24:86:E6:AF:60:2A:AF:81:71:D0:57:F0:9F
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:63:79:91:e0:93:85:83:83:fe:66:19:c8:a8:ce:ec:bd:e9:
76:36:45:57:ab:78:d9:01:c7:d0:8e:07:7d:f2:5a:63:ec:ba:
48:12:2d:dd:eb:79:21:71:b7:41:23:ec:be:e3:d6:4a:f2:9c:
b4:a0:19:11:96:a2:65:a7:fd:81:f7:98:a8:2e:bc:1c:c4:90:
f3:8b:31:6a:81:ff:cd:09:e0:19:84:91:13:db:11:83:58:d1:
6b:7e:d8:49:87:3a:31:92:82:ab:2f:5b:b2:47:c0:24:b6:45:
61:da:b0:c5:f7:47:5b:e4:a2:a0:b4:dc:f3:17:d2:c2:ec:53:
fb:6d:f1:3d:d2:7c:41:7e:b2:cc:0d:55:c7:4d:03:8e:98:85:
7b:27:c3:28:04:73:6e:55:7a:0b:eb:79:6c:68:60:30:55:d9:
48:0b:86:de:8b:ab:ff:50:96:cb:f3:cc:e3:e4:d8:d7:6f:ed:
ef:a2:cf:19:7f:9a:07:86:1e:e8:ad:c3:52:62:7a:ad:5d:3c:
af:94:18:e2:6f:84:b7:c9:fa:76:37:e4:3a:29:48:46:80:f1:
cb:c5:74:f2:20:9b:4a:8f:06:d0:6a:70:6b:fd:6c:4c:0f:62:
0a:91:f7:0a:d5:2e:c7:e1:d0:90:5c:78:72:88:60:57:1d:69:
d4:64:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:09:23 2026 by rpki-client