Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json)
Hash identifier: IZaUleZ+CZB58eAaK1y5sPpmvN2Qog1EmrPGDzjHEIc=
Subject key identifier: 35:A5:3B:2D:60:46:40:48:81:0D:9F:83:57:B3:BC:D5:93:05:CC:85
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial: 01A1024891951C513A14B4A5BE7E9E550BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
Manifest number: 0424
Signing time: Sat 03 Oct 2026 15:01:12 +0000
Manifest this update: Sat 03 Oct 2026 15:01:12 +0000
Manifest next update: Sun 04 Oct 2026 15:01:12 +0000
Files and hashes: 1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: hCHJWYgJwl5IIeQB7USUhUW+PK/jTWxc/9450o5+seU=)
2: W3uokoIan0bL_6hGsLT2Lc4cFQY.roa (hash: lnmDhnBJ1en6JgsP5wQ9r3eh318nNpbuOqRdtOpx05A=)
3: c7-vm7ayWM43onBxMirp6xh4ses.asa (hash: Yn9xC9hv7PLljqa8pOnthNeGkVr/8TT8ccV2WmSMABI=)
4: mqyazNOfM1ZVPm3cOVRYyNHDwpA.roa (hash: C7VZbHKV6HPYsBlX1X4bgcS+0xR52AiRYn6dtHpeMwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:91:95:1c:51:3a:14:b4:a5:be:7e:9e:55:0b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Validity
Not Before: Oct 3 15:01:12 2026 GMT
Not After : Oct 4 15:01:12 2026 GMT
Subject: CN=35a53b2d60464048810d9f8357b3bcd59305cc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:c3:ac:71:66:83:7e:e7:2a:2d:cb:ca:90:
70:e2:67:92:81:97:fd:99:20:72:58:9f:28:42:fc:
66:07:9e:8d:d1:f9:61:cc:d7:a0:24:71:b0:16:e6:
76:a7:7b:7f:42:67:e0:da:b5:a5:ee:f0:df:2e:5b:
db:67:8f:a5:4e:f6:51:87:71:5a:34:ea:0d:47:f3:
6f:3a:21:81:20:bf:d1:04:be:77:3e:f3:31:21:8c:
2e:27:31:d7:42:a2:9b:02:61:8d:76:57:b3:06:da:
8a:87:f1:f5:8b:3a:aa:73:ca:ee:ca:65:1a:b9:d2:
f0:50:11:9a:49:a5:45:94:2d:6b:48:d3:9c:3c:7a:
b4:5f:60:48:b9:b8:8c:7c:5e:e3:95:9a:11:c1:8c:
c5:06:93:a5:12:b5:ba:54:94:64:8c:53:2b:9e:cb:
84:73:71:41:4f:5b:79:94:e5:0b:91:ab:7b:62:ec:
9a:be:d2:02:a1:ab:43:97:87:ed:a0:58:e9:cf:bf:
2c:ac:7f:6c:75:bf:14:06:54:8f:64:59:22:19:4d:
1b:76:72:ec:43:b9:d9:18:b0:51:bf:58:83:06:c0:
89:03:f4:b9:f6:e0:49:00:c4:26:55:c2:9d:bd:f5:
80:4b:27:a0:2c:5e:ba:0c:02:2a:a0:8c:57:73:ef:
99:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:3B:2D:60:46:40:48:81:0D:9F:83:57:B3:BC:D5:93:05:CC:85
X509v3 Authority Key Identifier:
keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:86:d6:bd:b9:dd:ea:ce:1e:9f:eb:94:9d:3d:01:a8:c9:b5:
3f:0c:7c:fb:2e:2f:ba:b2:16:5a:89:e9:5c:ae:c0:e2:e1:8f:
e2:dd:e6:bb:06:87:ae:c8:49:fa:68:fb:e8:47:b1:6a:10:4b:
e9:b5:55:f2:57:6c:e3:b9:08:75:d6:61:fb:6c:34:9f:fd:2c:
85:9d:a0:7e:ce:35:bc:c8:66:32:29:43:38:f0:3d:45:a4:49:
cc:2f:a1:9c:33:b7:a7:02:23:de:d6:50:7f:3c:5a:bb:9f:ee:
fd:cc:49:c3:a0:1a:42:b1:87:c8:97:14:fd:5e:b0:34:e1:28:
49:79:03:1f:8e:bb:33:33:87:38:90:5c:84:23:24:a2:cd:58:
91:02:0f:7a:e5:00:9b:94:14:52:78:03:df:71:88:3c:e5:d6:
c9:ee:2c:4c:2b:f4:e9:6b:e5:81:fb:d1:4d:b6:c5:38:e2:7b:
83:53:ac:3c:3d:d5:18:19:d6:ac:db:9d:1f:b5:9b:33:81:fe:
84:fd:fd:0f:dc:99:6e:a0:ba:0e:c6:bc:71:32:ff:1e:af:a6:
ae:dd:52:30:f8:b3:2e:81:1e:6d:5e:91:df:b2:89:9b:97:fd:
46:93:60:a6:c7:fc:7f:1b:1e:67:65:7f:4a:c1:b2:aa:8d:d0:
cd:cc:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:40:47 2026 by rpki-client