Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: 4LVpDuHrGN0hmDltWPxS2dNb4cNPAgQ26s38OsHZ69o=
Subject key identifier: DD:EB:32:02:1D:F7:5C:ED:C3:6C:70:98:0D:6C:39:23:B3:22:EA:2F
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 01A141CC567B5AA0C2F1F6E6CD6A1D110F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 23:01:12 +0000
Manifest this update: Thu 15 Oct 2026 23:01:12 +0000
Manifest next update: Fri 16 Oct 2026 23:01:12 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: I1V9umW6ddQwoZgL0wPRFbL4fsnrTPFz6eLeM/GGo1Q=)
2: GNmi18wQl4vtlo-9lVpDdUD44U8.roa (hash: PX3LxFRdOujIRS22JaSLS22PgqGNSnD4VtofU70m2Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:cc:56:7b:5a:a0:c2:f1:f6:e6:cd:6a:1d:11:0f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Oct 15 23:01:12 2026 GMT
Not After : Oct 16 23:01:12 2026 GMT
Subject: CN=ddeb32021df75cedc36c70980d6c3923b322ea2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:54:db:9f:26:3c:fa:94:17:87:9e:91:1c:
1b:34:f6:17:33:84:a4:cb:51:cc:00:c8:e7:85:43:
00:27:c5:c5:64:c1:4f:f8:72:7a:28:c5:52:1e:7e:
14:16:15:36:19:f4:ca:0c:53:11:e1:fa:5a:6f:ca:
26:32:c6:d9:ed:38:97:cb:36:ec:ff:aa:ec:0d:ce:
ec:51:bb:62:1e:55:c7:2d:87:59:54:3b:36:15:e2:
b8:18:4f:3d:e6:37:f6:fb:8f:c5:a9:6f:57:74:af:
1a:3e:04:b5:1e:b2:e7:a4:f4:10:aa:24:15:1f:5b:
9c:93:52:a0:67:eb:c1:6e:af:68:6c:d1:c2:56:f9:
4b:87:f7:1d:c0:df:06:9e:df:8c:28:c9:97:8e:e7:
e4:2d:20:8f:03:5f:49:a9:96:15:38:f1:e3:00:b5:
4e:61:5f:25:24:4d:d9:1d:53:d2:28:e0:d2:73:7a:
26:9e:6e:ee:af:a0:21:46:2e:ba:ba:a1:87:20:04:
ef:0d:4e:4d:bd:19:11:51:55:fb:51:02:e5:88:f7:
37:6c:6f:0d:e9:71:c6:d7:43:ad:de:cd:cf:b5:c1:
0e:31:a3:0f:d6:4a:fb:a3:0e:a4:a5:e8:7d:d1:c0:
73:e8:55:99:44:f3:df:79:db:9a:e6:8a:02:ff:f6:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EB:32:02:1D:F7:5C:ED:C3:6C:70:98:0D:6C:39:23:B3:22:EA:2F
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:aa:9e:ae:bf:1b:30:b3:c1:df:81:dc:7b:29:05:38:80:32:
ff:be:06:39:5d:16:46:7e:79:c8:e9:c0:ad:5d:81:34:fe:ba:
1d:39:20:b1:88:9e:42:b9:0a:c1:97:5c:72:81:56:c4:1c:72:
0a:62:35:9e:14:c3:72:3d:84:47:0e:20:dc:44:63:73:c7:8e:
c0:19:a9:56:14:69:e2:aa:16:6d:5b:47:c9:92:c9:21:f5:06:
27:d6:b7:68:77:a0:39:aa:8d:54:8e:a8:68:a6:72:23:96:0e:
af:30:03:c0:04:41:94:9e:dc:9d:36:5c:b9:80:8f:bc:5f:3d:
2e:35:5d:92:48:5e:a9:55:12:4d:1e:98:eb:b2:e9:d0:92:9b:
52:27:62:f3:e2:eb:fc:95:1e:0c:58:88:28:a6:2a:82:48:21:
f7:0b:b4:08:c3:56:58:60:80:37:0c:09:cd:43:8e:2f:1e:ec:
3a:25:39:c5:bd:2d:c6:3b:e4:3e:63:b0:7b:b1:6f:14:b0:7b:
ee:16:a0:e9:8d:ff:c0:a6:ee:28:79:68:b7:57:f2:27:6c:2d:
41:df:c1:ef:32:29:fd:41:ab:07:b6:13:bf:55:31:85:66:6c:
bf:89:b1:b6:96:6f:ef:71:6d:ed:90:df:32:12:76:83:4d:66:
9f:80:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:10:17 2026 by rpki-client