Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
File: m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json)
Hash identifier: peRqx2hFG+CNl1rpRUlSWj9rr4IEXtWvFd1VMmkcIIw=
Subject key identifier: 32:C0:B2:5A:35:A4:C0:8D:C9:4A:6A:15:AD:86:B3:0B:CB:6F:10:21
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial: 01A08340E4EF0E8B1EB9D979287511F13055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
Manifest number: 1A42
Signing time: Tue 08 Sep 2026 23:01:03 +0000
Manifest this update: Tue 08 Sep 2026 23:01:03 +0000
Manifest next update: Wed 09 Sep 2026 23:01:03 +0000
Files and hashes: 1: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: CQA1YQ8NLEmx9DGDdvvvABDu0JQTEZ5FzRheoereVQY=)
2: oNy7iyROhmf7k1QXS1fyOykVhms.roa (hash: 7ICki/NejOefHux3d5CNCzujTTJwY1H52uKM23OBmV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:40:e4:ef:0e:8b:1e:b9:d9:79:28:75:11:f1:30:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Validity
Not Before: Sep 8 23:01:03 2026 GMT
Not After : Sep 9 23:01:03 2026 GMT
Subject: CN=32c0b25a35a4c08dc94a6a15ad86b30bcb6f1021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:80:e1:78:e1:53:4a:76:b0:97:32:f7:1c:
0c:ab:09:52:6e:3b:6a:55:c2:34:61:47:c0:ae:f8:
ee:10:20:67:83:a8:f8:4b:ac:84:ab:0b:b4:4a:2c:
8f:40:29:c1:48:16:af:20:e5:2f:5e:94:46:e0:aa:
58:b5:0f:a2:32:3a:bc:d4:21:51:b6:ff:f9:47:8f:
b0:b3:04:1e:23:f9:f5:65:c5:ba:e8:7d:e6:24:64:
b6:45:33:7c:cf:81:58:b9:29:45:da:57:cb:d7:c1:
f8:64:13:ea:9c:22:0b:ea:79:19:d6:c5:8d:7f:a2:
43:65:57:d3:6b:b6:0c:28:e4:65:e3:6e:e1:ff:53:
d3:26:cf:dc:27:01:ce:c3:98:d4:6f:db:c7:30:cb:
39:73:bb:34:db:f9:05:e9:22:04:c5:c8:31:4a:4c:
0f:49:46:ae:1a:c3:56:10:dc:52:53:51:f7:d7:49:
75:ed:53:67:b5:03:bc:e7:e4:07:58:f0:b1:38:09:
95:73:6d:ab:6e:23:c9:fb:5c:08:24:dc:a2:b5:ba:
7e:2e:f8:dd:9b:92:27:d2:d2:c6:cb:7b:6a:4e:27:
25:86:5f:e4:55:87:f1:0a:a1:71:0b:9d:54:8d:01:
37:a8:30:5a:db:25:ed:e6:b8:b2:97:89:17:6b:29:
6f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:B2:5A:35:A4:C0:8D:C9:4A:6A:15:AD:86:B3:0B:CB:6F:10:21
X509v3 Authority Key Identifier:
keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:69:d9:c3:b3:bd:9a:92:49:24:3f:61:2b:af:19:4e:55:8f:
bf:2d:25:3a:c2:15:10:9b:db:3f:17:dd:5c:6a:f4:cf:3c:1e:
12:a6:e2:92:da:9e:77:4c:28:81:ea:ad:02:4e:a3:4b:57:25:
47:1a:9d:2a:26:d2:29:ae:2b:10:b3:39:1d:28:18:c6:03:09:
1a:78:41:f4:d5:da:f1:62:f3:f0:d4:4c:1a:55:16:20:ae:81:
2e:46:45:a1:fb:a1:10:fe:dc:20:dc:c0:11:1a:f8:56:29:35:
6c:40:01:2a:8c:7a:af:18:5a:8f:db:0b:ab:89:58:b1:aa:52:
ed:af:00:21:f1:ba:9d:fd:aa:35:95:9c:d9:a2:c3:34:80:e6:
b9:c5:fd:f3:78:f7:2b:2a:86:5b:3a:0b:28:4f:31:7d:60:43:
a9:1f:9b:b1:d2:56:76:9f:ee:56:4c:04:7b:a1:e3:44:2e:9a:
c2:4e:41:8e:c9:54:aa:a9:53:0c:19:1c:c0:45:a0:dc:75:1b:
af:d1:98:e5:41:8e:7a:c4:f7:f8:0b:f4:b5:77:3d:de:62:c1:
31:cc:32:f8:bf:16:13:94:74:35:f2:b4:9d:9a:03:c7:28:4b:
79:55:0a:d2:35:68:45:38:cd:6e:16:6a:de:36:c7:d0:74:f3:
14:aa:e1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 08:37:14 2026 by rpki-client