Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: 96PvsbeJJYMCriXghC2BquuMLB8UtFfYIMBAvfckqw0=
Subject key identifier: FB:FD:94:C5:03:51:60:EE:D5:5E:32:D7:9C:30:B9:19:90:AB:2B:ED
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 01A06E0318C7E2E7D720EF986F518B08BD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 1A22
Signing time: Fri 04 Sep 2026 20:01:31 +0000
Manifest this update: Fri 04 Sep 2026 20:01:31 +0000
Manifest next update: Sat 05 Sep 2026 20:01:31 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: n1zWC6yKxq9c2aNVk7CeqTpAdgbmgksJ60ttUzwyxQQ=)
2: T9rz93pJrKV5HZUDPNt-auvowcY.roa (hash: Y2TAvhfs7O4nAyyTTSyBt46eHZbCQZ13ePvrQ4ueMNo=)
3: rtoaF4eNoCfBlVaGIH3lILCxwDw.roa (hash: uP2Cltj1neggz9Zc7r+kubVviQuOHIeAbOo973WtReI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:18:c7:e2:e7:d7:20:ef:98:6f:51:8b:08:bd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Sep 4 20:01:31 2026 GMT
Not After : Sep 5 20:01:31 2026 GMT
Subject: CN=fbfd94c5035160eed55e32d79c30b91990ab2bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:7d:14:e9:e2:ad:bb:ec:74:36:7f:28:c0:
92:21:a6:a8:f0:22:48:e6:db:61:1f:f1:26:8d:7c:
ba:5d:46:b3:a0:2d:6a:c8:d9:b7:3d:ff:32:30:a7:
0f:51:50:df:05:fb:49:ca:7c:fa:94:df:53:fc:dd:
e0:84:e8:a9:ab:cc:b4:57:bd:fe:ad:e6:6d:4c:58:
83:cb:14:53:7a:b6:a7:ce:5a:8f:50:a5:9d:93:a6:
6a:8d:40:1a:f9:e9:5b:ad:a7:48:e8:0b:9f:0e:76:
c5:c7:b9:bf:78:46:aa:e9:52:9a:d1:2f:3b:d5:b7:
e5:41:4c:86:b4:05:6a:4f:a8:87:f7:81:39:bd:ef:
28:64:61:4a:bc:5b:12:ac:38:d6:76:a6:b0:b6:ee:
e3:b3:d8:cd:1f:3b:d9:e1:70:f0:20:6b:e8:3c:5c:
d4:6e:13:d7:8e:82:df:fb:5c:32:13:17:3e:af:ec:
1a:b1:4f:58:b1:dc:6b:80:2f:6d:5a:2a:1f:83:c4:
bd:9c:9e:70:4b:de:aa:71:30:fd:de:e1:60:71:4b:
70:e5:28:a2:cc:be:38:c8:94:a3:0c:45:5f:bf:a3:
29:1b:d6:9a:1e:60:89:36:53:64:13:17:c8:87:5f:
2f:5c:50:46:95:db:37:d2:50:43:89:39:e8:b2:11:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:94:C5:03:51:60:EE:D5:5E:32:D7:9C:30:B9:19:90:AB:2B:ED
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1d:61:ec:51:3b:06:55:80:0e:ce:0a:c2:70:81:46:d4:0e:
b2:3c:7a:64:6a:ef:8b:9a:d0:37:ae:e0:61:e7:3c:42:a4:29:
69:4c:dd:c6:c1:e5:4f:17:0b:11:1d:b9:6f:e8:f3:a1:ab:d3:
5b:c9:02:71:ec:74:70:8d:4d:97:64:e2:d5:5c:35:c7:c6:5e:
b6:af:e5:d2:18:34:ef:a8:4a:f8:eb:84:6f:b9:56:f2:6b:2d:
86:4b:ec:05:bd:61:8e:57:9c:90:86:9f:96:33:da:f2:e0:fe:
6d:f4:44:99:8c:3f:3d:dd:75:4e:c1:13:3e:68:d4:3a:ff:33:
50:7a:4d:ba:79:e9:09:a9:41:fd:51:e4:0f:c3:08:cc:05:2f:
05:ac:0d:00:b8:61:c5:b1:2d:91:b5:0d:a9:f8:19:53:91:c5:
43:f6:6b:58:93:7a:a0:76:3d:e7:85:ce:37:ab:56:88:ea:b6:
62:48:bc:a0:a6:52:72:e2:ea:10:5c:e3:ee:bc:20:a9:8a:97:
4b:f8:01:d3:fc:0e:f8:21:4a:58:2e:a2:e4:6b:f7:30:95:fe:
9d:24:2e:f0:14:c7:e7:71:7e:e3:70:96:5c:73:01:93:c2:5a:
1c:64:09:18:73:a1:a8:03:a0:ae:3b:90:05:ae:f2:ab:72:39:
a6:78:8b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:47:21 2026 by rpki-client