Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
File: 9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json)
Hash identifier: tXD2SMz4dysHMvMshnBdtJJZ6L+rLV1oMfbN/vXX2Ps=
Subject key identifier: B9:D0:E5:4B:6B:C3:E6:BF:42:9F:DD:A2:C4:80:5E:0B:79:F8:F6:8D
Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Certificate serial: 01A1AAF0AF844E58CC6B32B90AE9118BE221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
Manifest number: 1ADC
Signing time: Thu 05 Nov 2026 09:01:02 +0000
Manifest this update: Thu 05 Nov 2026 09:01:02 +0000
Manifest next update: Fri 06 Nov 2026 09:01:02 +0000
Files and hashes: 1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: xIYRVPEZSESL35f4uPwUjJ8fobchGR/gNnDKkkOtk4A=)
2: _nZKD9ZTGWn3ixeAqRkUR8-oFdY.roa (hash: E+dKSGK3CToMIv6bsluEab6asnsTgpRJX/4wcKUB3No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:f0:af:84:4e:58:cc:6b:32:b9:0a:e9:11:8b:e2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Validity
Not Before: Nov 5 09:01:02 2026 GMT
Not After : Nov 6 09:01:02 2026 GMT
Subject: CN=b9d0e54b6bc3e6bf429fdda2c4805e0b79f8f68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:5d:4c:95:6f:bf:16:50:3a:10:9b:2c:eb:
0b:fe:d8:52:5e:d6:4d:32:c8:fa:34:96:db:e2:e2:
e1:f3:3d:56:c0:10:3a:48:d2:4c:db:9d:e2:1b:3c:
60:71:10:5c:fd:49:62:84:b7:c0:2b:f6:d8:24:49:
bf:ca:3f:c4:1a:b0:bc:59:3e:86:2f:44:0b:37:32:
e6:cf:b2:86:79:ad:83:14:46:78:d6:1c:b4:66:c7:
b9:e7:13:11:2c:4c:11:f3:f4:22:1c:5b:e1:e4:20:
d4:3f:c0:1e:46:fb:96:44:0b:e0:9a:ba:e4:c6:b4:
a2:1f:8f:1a:30:d1:bb:37:6b:56:15:72:cf:b9:9e:
5f:b2:ee:3b:2b:e7:26:a4:7e:e1:20:d5:cc:93:e2:
d6:1c:8f:12:e5:3c:39:44:e0:0c:30:70:b2:63:f2:
23:6e:02:04:50:91:d4:26:9f:17:21:05:2b:18:d7:
f9:08:ac:5d:01:db:7f:f9:ca:01:1a:4a:de:cb:02:
dd:79:7f:a8:a2:60:e5:a4:90:09:ef:d8:23:c2:67:
97:1e:65:cd:bd:ad:8b:ad:e7:5b:ba:2c:ee:7c:d1:
26:3a:76:0b:ed:ec:dc:e4:c3:76:d5:7a:5e:62:3b:
b3:0d:0f:8e:7a:65:bd:90:ee:f8:58:ad:69:83:a7:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D0:E5:4B:6B:C3:E6:BF:42:9F:DD:A2:C4:80:5E:0B:79:F8:F6:8D
X509v3 Authority Key Identifier:
keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7d:ab:fe:a4:f0:bb:36:ea:83:9b:58:4e:5a:0d:0d:40:e2:
eb:34:c8:ab:1e:01:8e:a4:e3:39:37:54:ec:6d:42:3f:60:6d:
43:c7:9b:49:25:65:d2:63:ef:0d:3e:82:f4:bd:c0:e3:86:20:
76:1f:21:d8:10:a0:f5:63:1b:6e:3e:29:0a:f0:cd:e1:d5:fc:
9a:78:11:97:e9:4a:8a:1b:23:d7:44:7c:96:20:1e:15:41:b9:
cd:b9:cf:01:8c:8e:ca:d9:71:5a:9d:e6:0c:75:d0:e7:79:62:
5b:15:51:96:b5:2e:1c:9a:de:62:7c:6c:d6:ea:80:c4:f5:9c:
d8:29:b9:cd:37:29:1b:6f:97:2e:39:9c:f1:4d:b7:cc:a5:e8:
06:58:66:5c:72:57:2f:09:fc:26:66:a9:45:71:82:cb:d7:d5:
71:7a:b6:ee:43:51:d9:a1:c4:58:0a:61:63:93:26:d0:49:68:
dc:a7:98:b9:b4:95:6f:e0:93:60:a4:b8:a0:e9:09:70:f8:ed:
db:02:e9:cb:6f:11:e8:0a:8d:7f:40:28:d5:85:c9:e6:f2:c3:
ef:32:11:f2:8e:c5:7a:8b:99:46:da:98:9d:5e:27:16:93:0a:
d4:5f:17:cf:0f:bb:92:00:1f:c6:c2:39:7a:e9:7c:96:e6:d1:
40:78:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:37:42 2026 by rpki-client