Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
File: B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json)
Hash identifier: of35czOoocXsylW1NLbJ8wQpt43NV8iSfsB3PFiC7W4=
Subject key identifier: 07:E9:0D:DB:74:5B:FB:96:ED:84:07:9D:79:AB:34:33:52:A0:8B:80
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial: 01A17F985AE96D0058D3CD7E6F0D6EBE4B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 23:00:53 +0000
Manifest this update: Tue 27 Oct 2026 23:00:53 +0000
Manifest next update: Wed 28 Oct 2026 23:00:53 +0000
Files and hashes: 1: 5NepKsibkXxq0cC5aAvvP_8JjP4.roa (hash: 7HOC7sGZGamyWKAmcPUs1h2P6lOKJ+z20+QYh7rUkew=)
2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: eBkEvPkbBE8EcPCWSYRA8Z0ZJFeLaAlMhc5PqYjatbw=)
3: PTKJDn9baa8GDsyUDbvLdvKpH_Y.roa (hash: M6ZYD9tQnpCFir5Cu0FNk295lOfSt9eoRIH1690apck=)
4: VGYXm9SrAnPQDO4KzyfYQTctcKE.roa (hash: t6wWWjbtPwKCRrEiQDaW7hfJLS6tTVFXTMhhJiW17DM=)
5: ecvQXZ3AprCLKejnaTOVVFlxHok.roa (hash: UJHUQBi7HS/efD3FVZTiVWpdVXwILbRze3oIm83qHnA=)
6: h1mEZ62DMm3uuyaJJJmPKB4-m6s.roa (hash: AOIevC2x+LRQ++ZcMrIM2D+bhkF+aQN4GCC5pvrUkG0=)
7: k_NknFuW4fn4bDMEidouhfOP4yE.roa (hash: /QvV9YqG7NdPkIkhFC2G0RzWP2PLlZH/17cSaHRPmK8=)
8: q3xB1TlmhDj055zlvy4aiXlZXlk.roa (hash: 3L2aJ4MWJ0YKmWL4+Damuuwr/sJjzRrBG+ZnvYerwp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:5a:e9:6d:00:58:d3:cd:7e:6f:0d:6e:be:4b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
Validity
Not Before: Oct 27 23:00:53 2026 GMT
Not After : Oct 28 23:00:53 2026 GMT
Subject: CN=07e90ddb745bfb96ed84079d79ab343352a08b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:77:7e:45:c7:93:34:65:1b:4a:e6:ed:30:
51:f1:cf:9c:bc:b7:03:b6:03:84:a4:a3:3e:88:b1:
1e:24:2a:bc:45:4d:4e:00:55:6d:2f:2b:72:b3:8d:
17:3d:84:b7:40:17:38:ff:b7:2f:b4:3f:87:89:65:
7a:61:68:d7:93:53:bd:62:98:ea:ef:a4:f4:10:c0:
f6:bf:60:3a:0f:4e:7d:77:5d:92:81:15:b4:26:4c:
e8:74:ec:4f:45:6d:b9:88:43:1b:dc:f8:e8:ed:77:
72:0b:30:d2:44:af:f8:43:9b:f8:8b:74:31:24:fb:
53:18:e8:77:26:f3:cc:fa:78:63:3e:c8:5e:03:da:
ab:63:a6:6e:85:0e:6a:fc:13:66:84:98:aa:f9:55:
fd:06:de:35:80:db:f4:6f:cf:0f:a0:e6:ed:e9:38:
7d:f3:f8:fd:e6:1c:6c:21:91:25:c2:ed:f5:8e:63:
bd:30:7f:b8:b5:5f:52:36:78:d8:54:aa:eb:7e:66:
bd:6f:95:06:1c:0f:3d:22:59:c8:26:05:02:6d:2c:
f8:00:8d:ef:42:f2:16:ea:4f:c1:69:f7:a3:9b:33:
ad:03:99:66:0d:c3:78:1c:01:f9:bd:94:f2:5e:11:
f4:29:d7:d4:6b:d1:23:66:50:f6:87:ad:f6:8e:9b:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E9:0D:DB:74:5B:FB:96:ED:84:07:9D:79:AB:34:33:52:A0:8B:80
X509v3 Authority Key Identifier:
keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:37:e9:db:fe:9c:06:e1:41:b8:ef:47:7d:2f:76:5b:b1:63:
f4:55:12:7a:1b:1e:4f:e9:20:aa:60:bc:88:a4:77:ac:77:e1:
92:2f:92:ca:b3:a3:bf:4d:f0:13:53:09:47:92:9b:77:94:99:
02:42:f7:09:1a:41:c2:b5:0e:39:14:2c:75:ef:16:d3:59:47:
16:78:ba:9f:05:3f:d9:45:0e:1f:53:ce:bc:79:d1:52:d6:2b:
55:44:65:05:9c:dd:92:ef:79:e7:be:cf:e7:c9:6a:16:c4:4a:
1c:06:34:ec:59:a5:ce:c5:41:47:92:6d:64:65:f1:0c:71:7a:
3a:d1:52:f6:66:8a:e6:14:72:70:31:23:27:11:f3:14:32:62:
34:fd:3f:b6:76:94:a5:c4:0f:71:28:42:4a:2e:6f:61:79:d3:
fc:7b:47:ac:75:4f:4f:75:6b:38:c8:f1:e8:f4:b9:e5:35:02:
e7:7b:41:6f:ab:f2:60:7c:31:4f:b9:79:2d:91:66:72:dc:2e:
9e:65:94:5b:af:43:78:ed:24:38:51:81:ce:a4:15:c5:f4:96:
56:8a:e8:59:f4:56:60:c2:cb:40:d2:12:86:0b:54:72:be:0b:
d1:ad:9a:d2:31:fc:ef:5d:3e:b6:6b:57:4a:18:7b:86:e9:bc:
b0:14:5c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:40:46 2026 by rpki-client