Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: e3Ne3RHSaz8Of8eZI71S/gfeMUSRDKXBNjd2gEbkSYg=
Subject key identifier: 02:8F:41:D1:7A:E0:95:4F:80:A8:11:AB:14:29:8D:45:45:67:EA:F2
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 01A122E61A9204A77708B3DBD32C713C7CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 16DF
Signing time: Fri 09 Oct 2026 23:01:07 +0000
Manifest this update: Fri 09 Oct 2026 23:01:07 +0000
Manifest next update: Sat 10 Oct 2026 23:01:07 +0000
Files and hashes: 1: VVO2x6L7LFTZsVY_zaZrcjz-CLU.roa (hash: mrQRCF7HAxobAPy4OykpZkTQroOOHVdF+aZo6ajUous=)
2: XSKluvUTTgVd2egTpJ08l-exvKw.roa (hash: k4WvTC/++ULE/2LzyeolM06KPsDEfc4ZDC8+guSUNtQ=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: kattLaEVlZ1tz7mQNnORU9urryD2wmo9NUEXUqThJBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:e6:1a:92:04:a7:77:08:b3:db:d3:2c:71:3c:7c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Oct 9 23:01:07 2026 GMT
Not After : Oct 10 23:01:07 2026 GMT
Subject: CN=028f41d17ae0954f80a811ab14298d454567eaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:54:df:ac:32:f7:cb:80:1e:fc:66:18:87:
71:5d:e9:1a:13:e2:95:a3:51:63:84:5d:d6:0e:d5:
74:4d:d6:d9:9c:eb:85:eb:82:d1:0b:41:11:3e:55:
37:d2:95:cf:80:66:44:a9:5c:63:5b:02:4a:59:e7:
c4:11:f4:f4:13:60:19:22:bb:bd:93:32:f9:e0:b1:
69:63:85:17:e7:19:1f:62:7f:31:64:4f:95:94:64:
95:a0:26:51:ab:1b:83:3b:74:17:05:d4:36:4e:bd:
87:c1:ea:b5:a5:d3:c0:99:28:b0:19:ce:67:e4:44:
07:52:0b:85:b8:96:14:84:63:c6:27:c0:6a:a8:51:
52:92:f7:f1:69:dd:54:4a:0e:b7:75:a1:44:8f:65:
c9:17:d7:f8:d3:6f:75:a9:c9:23:e3:1a:2d:70:12:
48:3e:ef:d9:8b:02:71:d9:02:57:7c:86:1b:aa:cd:
69:fd:78:58:d8:f1:88:8f:a5:66:54:33:e5:cb:cc:
36:6a:c7:38:a7:49:b2:62:10:2b:cc:05:06:92:eb:
1c:11:7b:b9:30:61:59:b0:e8:65:9b:0e:7b:b3:4b:
07:a8:38:37:21:ac:89:fd:9d:4a:c0:f8:3f:f8:e1:
8f:5a:1f:d8:db:63:74:e3:1d:e2:2e:da:65:b0:90:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8F:41:D1:7A:E0:95:4F:80:A8:11:AB:14:29:8D:45:45:67:EA:F2
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:63:55:7f:d5:0e:06:36:fa:c6:86:5b:3d:b9:ce:c2:55:77:
a6:4e:2f:0b:10:20:fe:c2:73:fd:d5:90:d1:df:d2:e5:49:4e:
83:aa:07:f3:d3:f4:15:f6:cc:a1:73:10:ca:a6:af:7d:3b:a6:
99:2d:ea:ec:de:2d:8b:a3:36:0f:c6:3b:ab:1d:f4:a0:19:5c:
b0:be:ee:f7:b6:22:98:0c:7e:66:56:11:31:79:54:4f:47:74:
22:89:bb:8e:dc:7d:2d:fc:e9:68:a9:a0:30:c0:7b:7c:15:0b:
31:2e:99:ca:10:d1:e4:cb:30:56:c4:ed:e9:a9:1b:c1:77:a3:
f7:a3:41:9f:59:59:7b:27:3f:a3:84:8f:03:a0:75:63:62:f2:
03:3c:68:b8:be:dc:fd:e4:ae:6b:ba:2c:5b:4a:6b:87:6c:3a:
a1:31:ce:b0:21:ef:c7:36:11:bd:26:a4:65:f7:db:43:26:23:
bb:11:d6:65:50:ec:39:86:2e:12:78:74:a5:95:0f:3b:2b:0b:
5b:67:fd:75:b5:b2:c9:5f:13:d2:a2:ef:a2:9d:38:00:97:71:
10:4e:3c:07:df:d0:fd:36:20:46:83:2d:6a:c5:2a:ed:0f:57:
75:e5:4c:95:1e:bc:11:09:75:2c:af:34:55:40:63:71:8c:00:
3e:1f:59:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:12:51 2026 by rpki-client