Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier: iD/GKt4t0aCS+iMkyHrDMSxVtYJqWq/6hGmRGSQuxlo=
Subject key identifier: 64:0A:66:BD:71:44:8F:63:25:57:9F:6A:3F:6C:E1:2A:A4:96:5A:B0
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer: /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial: 01A0957E20A7E1FEE100F7F1BC4083638D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number: 1A4A
Signing time: Sat 12 Sep 2026 12:01:06 +0000
Manifest this update: Sat 12 Sep 2026 12:01:06 +0000
Manifest next update: Sun 13 Sep 2026 12:01:06 +0000
Files and hashes: 1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: gQ1skI4Qzq1PCjTAvQC+ZLsLQXsAsgoRRTRw2A/HxTo=)
2: RnRCh1Xrb9yuwaris6_5MCtF1KE.roa (hash: 80wSt9zZDVoZeJMwPuaJTAz1yifqf1crCsttUVlJAD4=)
3: VRJ4Vc94OyT64lapMXpmOD1B3Wc.roa (hash: Ky32PchK8c9vLn0orEiQizK102tpl+arDsTOuP7+gVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:95:7e:20:a7:e1:fe:e1:00:f7:f1:bc:40:83:63:8d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Validity
Not Before: Sep 12 12:01:06 2026 GMT
Not After : Sep 13 12:01:06 2026 GMT
Subject: CN=640a66bd71448f6325579f6a3f6ce12aa4965ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:06:d3:2a:fc:ae:52:cf:ae:4f:62:aa:98:
ec:54:a7:14:e2:9a:79:1e:88:fc:b8:b4:3c:16:b4:
8e:c9:8e:b7:6e:18:65:c3:6c:9b:cf:27:10:49:2e:
5c:0a:90:ca:2f:a0:4c:d1:d5:76:f8:c4:88:61:25:
ab:53:2c:f6:a4:8a:2a:6c:11:d4:8b:33:ea:a4:d5:
9a:e9:bc:29:db:20:b8:fe:70:10:80:39:d5:08:7e:
a2:c8:11:75:44:43:86:6b:66:5b:a2:c2:35:74:c4:
c8:56:9c:e8:8e:a0:98:62:25:fa:fd:cb:34:e1:67:
ee:7a:75:58:54:34:de:a6:18:39:26:f3:79:db:35:
f2:e6:4b:2f:d7:3a:9b:6c:8a:40:d2:21:ee:e5:33:
43:9f:3d:1c:43:2d:72:fc:3f:dc:10:b0:7c:04:a7:
5d:2b:ab:1c:bd:fb:56:99:7d:68:ca:e6:dc:c3:8c:
5c:aa:ae:eb:7e:d3:5e:98:86:04:dd:08:b1:eb:e9:
0a:94:56:0e:ac:b5:7d:4b:16:0c:00:ea:97:97:97:
59:ff:4d:c4:e6:9d:a7:de:8f:77:f8:bd:b4:62:d7:
f7:d0:da:87:d1:74:56:4e:20:39:98:5e:71:f9:d6:
43:ae:ca:d3:02:d4:58:0e:cd:d3:ba:67:51:ab:c9:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0A:66:BD:71:44:8F:63:25:57:9F:6A:3F:6C:E1:2A:A4:96:5A:B0
X509v3 Authority Key Identifier:
keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:20:50:da:c1:63:00:d6:79:2d:06:12:75:bb:a7:6d:8f:57:
c4:e6:ee:a3:d5:ba:3e:60:a8:3f:c2:6d:0a:da:55:d7:e9:c2:
67:65:68:94:13:ec:0d:f3:14:37:a6:77:b5:05:50:f2:60:3e:
7d:46:14:e1:c1:47:e7:36:f5:ff:bc:c7:95:83:68:05:6d:d3:
e2:6d:46:36:34:7c:00:c1:e6:f6:e9:92:26:c9:b8:91:b1:32:
7c:a1:04:dc:e7:b1:4e:df:4a:fa:fd:d4:9b:f6:60:0c:bf:60:
aa:1f:f7:a4:dd:a1:6b:27:18:b8:85:2c:57:9e:b1:ec:60:f6:
fc:ed:10:50:7d:55:f6:02:8e:98:ee:74:d3:65:27:4d:d7:d6:
65:e2:18:71:20:08:91:f1:83:f8:54:eb:58:7c:5c:3c:1b:43:
4f:e9:e5:19:5d:99:98:8e:e7:5c:ca:2e:b5:33:d0:9f:8b:8c:
d6:b6:b7:f0:cc:66:42:87:1e:90:f6:98:67:aa:88:08:80:3c:
a8:79:b4:e8:ac:25:3c:a0:21:b1:3e:63:36:e5:19:c5:8e:bf:
f4:21:df:81:ae:24:5c:7b:43:7c:1d:42:bd:7d:86:35:e7:b3:
73:af:f2:04:da:e7:b5:25:46:aa:34:88:05:23:87:52:3f:ec:
1f:e1:a9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 16:38:21 2026 by rpki-client