Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: GwXmCU2aKeNeNj4mnggypQBgd6Ew9DrNoFVloheeJmw=
Subject key identifier: 2A:FF:58:3D:FD:B4:E9:98:EE:A3:CD:31:D2:6E:04:6F:EC:0B:CA:A9
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 01A13E25DE82AE2D2DE4646B9856F6D80C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 17E0
Signing time: Thu 15 Oct 2026 06:00:31 +0000
Manifest this update: Thu 15 Oct 2026 06:00:31 +0000
Manifest next update: Fri 16 Oct 2026 06:00:31 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: Q9JkkdCpTBSJKlyEBnQmVxUZdFUZpCJqtipEF8Tk0Tc=)
2: mEgDM3l5c0LrVuCqn477ft25k3w.roa (hash: KJ2JP42lCHcxJukTZAz4D69v5GnFU1eWXwSmVHNVnQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:de:82:ae:2d:2d:e4:64:6b:98:56:f6:d8:0c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Oct 15 06:00:31 2026 GMT
Not After : Oct 16 06:00:31 2026 GMT
Subject: CN=2aff583dfdb4e998eea3cd31d26e046fec0bcaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:77:da:5b:40:3c:3a:4d:9e:0e:9e:53:49:
bf:45:f9:1b:17:a7:0c:92:66:7e:4c:bf:19:03:06:
a4:56:f8:21:86:e8:e8:1a:a7:a3:48:6e:01:60:6a:
22:59:f7:04:2b:de:f3:6b:ad:5a:2b:4e:66:64:47:
b3:d1:18:5e:f1:ea:31:8f:a8:a7:7b:f0:fa:54:79:
df:e4:5a:57:ea:0b:58:4e:72:a1:c8:02:d6:f2:c5:
59:be:8c:f4:0f:06:04:d7:98:f0:db:81:72:3e:2d:
10:e1:dd:46:56:02:ed:cd:a6:72:78:6d:12:bd:42:
f5:7d:db:7c:60:05:0c:6b:ad:30:39:fe:1f:2f:62:
ef:6f:19:df:2f:c4:53:17:5b:57:87:e1:b1:ce:03:
81:f8:8d:45:91:f5:cb:a3:0c:f5:ed:f7:07:fa:94:
20:e1:5a:7e:f6:a3:13:6b:fe:ac:3e:87:43:3a:53:
31:b6:87:f9:51:60:24:44:a8:04:c9:82:ca:91:04:
b0:a1:04:2e:ab:50:9f:71:61:11:34:cd:51:ce:8c:
92:1c:b3:73:3e:79:43:40:79:a8:50:19:ff:31:3c:
60:17:a5:80:bc:ed:f0:f4:fe:be:ba:cf:5b:7c:60:
e1:6b:ee:cb:bb:d9:c6:e2:f0:0e:29:90:82:2b:b6:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FF:58:3D:FD:B4:E9:98:EE:A3:CD:31:D2:6E:04:6F:EC:0B:CA:A9
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4c:3d:d1:49:c8:af:af:12:4f:bd:4d:3f:3a:b1:f1:2a:69:
a6:36:16:f5:9c:7f:9a:5f:6e:90:4b:d8:96:51:95:76:46:76:
77:60:3a:ac:f5:8a:0d:ad:5a:bc:f3:85:1e:54:70:b2:5f:6d:
60:64:f1:7a:9d:d8:cc:f3:d5:98:ce:a7:37:a6:01:7f:6c:84:
62:81:85:86:6b:92:06:79:41:d2:cd:db:1a:45:f9:1b:6f:ce:
28:bf:cc:51:ac:c0:47:6f:cc:81:e3:52:0d:51:f7:db:c3:2b:
01:aa:4a:89:9f:6e:2b:4f:46:8b:13:fb:09:d6:b0:33:1d:9b:
37:dd:61:cf:61:40:e5:5f:fb:31:20:28:48:6e:ad:fe:cd:fe:
fe:02:8f:d6:29:24:f3:49:3d:e8:30:7f:ed:37:0f:33:3c:2a:
5b:22:d7:3e:95:15:11:48:1e:9f:30:0d:37:23:9a:1c:5c:ec:
49:60:22:4d:60:ed:31:53:d4:c6:d9:e3:34:01:ce:6b:a3:cf:
e5:9b:a9:6f:f8:a5:fe:90:16:68:12:9c:e3:e6:a5:70:bb:f7:
99:e9:fd:19:16:1e:6c:59:c7:80:42:b2:30:ea:ba:c1:9a:f8:
e4:7e:3a:49:72:4f:eb:25:e0:ec:2c:a5:f4:21:e0:0c:7f:de:
1c:c0:c3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:26:00 2026 by rpki-client