Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: 2kxSXjBXuJ3wmrRDhhe7pF+mvO5Ag7wU2PXh3iKCVB0=
Subject key identifier: 64:8C:D5:64:B3:4B:10:68:EE:87:7A:CD:39:BC:B3:6D:42:80:D4:3F
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 01A0A0A685DD4827EABBD449F051D067D787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 1A57
Signing time: Mon 14 Sep 2026 16:01:02 +0000
Manifest this update: Mon 14 Sep 2026 16:01:02 +0000
Manifest next update: Tue 15 Sep 2026 16:01:02 +0000
Files and hashes: 1: 8gINa2lFaHAK60FtqIDDhXwZP7w.roa (hash: z1FvylnNOuEEDQQea39SZ8k3cYtqZE6bJ6wCeGonrDw=)
2: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: /+RNcWAU1v6K8L/tXZnF/wqAx4GRzX838EjE9oNfu90=)
3: IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa (hash: NPCHrCQgVoOMqCSPlDc/hj6wxQzJAbSJUalGFEL7VEc=)
4: tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa (hash: unf/ZbmoQZ2C8O0WxuwscfoRSvADWqKnPxDoOQZPINs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:a6:85:dd:48:27:ea:bb:d4:49:f0:51:d0:67:d7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Sep 14 16:01:02 2026 GMT
Not After : Sep 15 16:01:02 2026 GMT
Subject: CN=648cd564b34b1068ee877acd39bcb36d4280d43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:d6:e7:0b:9c:33:cf:b2:28:d5:e6:f7:82:
2d:05:cf:ff:b8:45:70:61:f0:cd:b6:32:24:20:bb:
31:ba:b2:3f:8a:8e:c2:37:5f:b3:34:fc:28:b7:ec:
50:a8:72:32:6f:b3:b4:3d:f1:84:f8:4c:b1:c9:6d:
9f:ac:3a:2c:a7:68:66:2c:1f:f6:48:cb:cc:9b:30:
93:1a:05:8b:29:be:a8:ca:d6:e2:9b:0d:78:88:cd:
00:6a:dc:6d:3d:f1:17:6f:e3:10:b9:a0:ab:9c:27:
71:89:e6:1b:3f:1e:b9:5b:51:65:c1:70:df:8c:6b:
ec:49:a1:16:4e:6f:c1:fd:4c:55:37:32:60:60:7f:
66:0b:09:29:2c:6f:31:6e:b6:c6:58:4b:b6:71:57:
f2:4b:50:53:61:29:db:4b:5c:42:a5:8a:8d:11:11:
1c:64:c8:9c:34:81:85:e4:d2:0f:fc:50:be:bb:f6:
b3:3f:fd:9b:a9:43:2e:e8:ec:a4:3c:e0:1e:2a:6c:
10:16:fb:bb:cb:e2:cf:25:68:aa:84:c3:a3:69:76:
f7:40:65:34:0b:cb:42:55:49:36:21:34:bb:2b:d8:
44:c8:75:cf:a7:36:12:d9:56:d5:a3:9f:65:cd:88:
2d:29:5b:6d:d3:a0:cd:ae:4f:b3:e4:aa:48:c3:75:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8C:D5:64:B3:4B:10:68:EE:87:7A:CD:39:BC:B3:6D:42:80:D4:3F
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:12:7b:a6:21:31:46:97:ac:59:c6:03:79:d7:ff:78:98:32:
09:a2:26:d9:a0:6f:0e:e1:dd:d1:25:4b:e9:ac:d6:7b:fe:9d:
f4:27:7e:4a:53:b6:7e:fc:c1:85:3d:01:81:ed:70:59:93:a9:
f3:6a:5a:ad:2c:47:e6:3e:15:3c:38:44:57:e1:fa:b7:48:b0:
44:92:08:b6:2c:90:70:af:95:fa:31:05:96:70:02:ec:91:ac:
a3:c8:47:10:6b:c9:6d:53:16:bd:5b:ed:72:4b:f1:f6:10:63:
d6:5b:f5:b0:0a:a8:28:74:3a:6d:90:be:2c:51:7b:5a:2e:9e:
eb:d9:1e:b2:68:e1:dc:9e:47:4d:8d:9f:4c:9a:89:da:b3:a6:
53:73:65:38:0e:f0:63:fb:d2:78:e4:67:60:7f:7a:e4:3d:4c:
79:ba:86:1b:3e:d3:f3:98:98:3a:78:d4:b2:4a:90:ed:98:25:
15:c3:5f:e3:da:0e:e6:22:9b:9b:16:c7:e2:1a:e7:78:44:0e:
0b:35:50:88:87:48:1e:24:b8:96:6b:1f:15:c1:54:e5:f9:1d:
49:f0:75:4d:0f:a2:71:fb:60:97:fe:2a:38:1c:d4:32:82:48:
e3:ec:f6:32:bf:f3:c0:db:6f:84:aa:d1:03:d2:5e:f4:3c:e8:
3c:62:7e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 18:16:19 2026 by rpki-client