Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
File: 9ffGz7jHWxG31BX3mS0AZKRV6FA.mft (raw, json)
Hash identifier: npdUFDe/SJ22aEnB6UF52bA8Wuc1ZsY5rY5MtxY9NQ4=
Subject key identifier: E0:33:8B:9C:CF:A0:F4:3F:A3:9D:5C:B8:42:76:7A:7A:BA:DE:8B:69
Authority key identifier: F5:F7:C6:CF:B8:C7:5B:11:B7:D4:15:F7:99:2D:00:64:A4:55:E8:50
Certificate issuer: /CN=f5f7c6cfb8c75b11b7d415f7992d0064a455e850
Certificate serial: 01A0EF9D666BDA0DBAC111C18BC2D9AE5B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ffGz7jHWxG31BX3mS0AZKRV6FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
Manifest number: 21
Signing time: Wed 30 Sep 2026 00:01:04 +0000
Manifest this update: Wed 30 Sep 2026 00:01:04 +0000
Manifest next update: Thu 01 Oct 2026 00:01:04 +0000
Files and hashes: 1: 9ffGz7jHWxG31BX3mS0AZKRV6FA.crl (hash: Mq1DIDJAza0q8AYg3ji8/I0p05pS6KKnCLzvrIpH1zE=)
2: apS4HDv_OJ_CGV6gCbN9cY-dceM.asa (hash: dFb3bz8xURN3Dp6ICXR2SfE63pU3+IOgDtF/Br/pUhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ffGz7jHWxG31BX3mS0AZKRV6FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:9d:66:6b:da:0d:ba:c1:11:c1:8b:c2:d9:ae:5b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f7c6cfb8c75b11b7d415f7992d0064a455e850
Validity
Not Before: Sep 30 00:01:04 2026 GMT
Not After : Oct 1 00:01:04 2026 GMT
Subject: CN=e0338b9ccfa0f43fa39d5cb842767a7abade8b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:51:6a:84:c8:3d:7a:96:1f:09:0e:bd:8a:
94:02:e5:72:f3:01:eb:b6:bc:96:11:19:8d:cd:05:
1c:76:bb:dd:c4:d2:9c:73:c1:3f:99:b5:4a:3e:63:
fd:e6:1b:54:20:ee:4a:c3:98:2e:88:84:8a:6c:2b:
9d:07:36:b7:d1:b8:0a:9e:ab:26:91:e2:a5:7d:d7:
9a:e1:c0:15:44:5e:e3:ef:51:c2:32:14:6d:52:be:
b0:8f:95:45:1a:d6:d1:20:5b:7e:c9:29:e0:d8:57:
89:cd:44:f9:af:fe:93:c5:3e:d3:29:89:fd:fb:3a:
2a:ab:54:d2:59:31:ca:ba:53:2a:82:fe:c2:ae:ab:
fd:9c:93:d2:5f:a0:c7:65:35:b0:47:12:14:a2:e9:
0f:1c:60:50:3e:46:2d:86:87:a2:21:e7:6e:32:79:
05:aa:da:7e:08:b4:a0:1f:9e:3e:48:c4:45:54:61:
b0:88:55:f8:51:13:2e:e8:0b:2b:58:06:8a:c2:29:
97:cf:7d:58:64:9a:34:f5:7c:9e:71:36:76:08:09:
5e:ed:b3:b6:4f:37:dd:e6:aa:98:25:c1:04:8e:38:
a9:98:88:21:b3:f8:cd:db:63:b5:23:e7:8c:06:a6:
e3:7d:44:c5:6b:8f:9e:5d:33:fd:fc:25:dc:f3:28:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:33:8B:9C:CF:A0:F4:3F:A3:9D:5C:B8:42:76:7A:7A:BA:DE:8B:69
X509v3 Authority Key Identifier:
keyid:F5:F7:C6:CF:B8:C7:5B:11:B7:D4:15:F7:99:2D:00:64:A4:55:E8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ffGz7jHWxG31BX3mS0AZKRV6FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6d:4c:76:66:d2:8e:70:88:69:23:6e:df:1f:eb:ba:c3:9a:
e0:e9:7f:b1:88:01:e7:4f:85:df:2c:d3:17:90:59:5d:74:04:
a5:f4:65:3e:8f:ad:e3:69:2a:30:9c:05:43:c9:d4:68:47:df:
00:b8:e0:57:e2:3b:7e:76:11:64:88:35:54:71:b9:9c:e8:33:
37:16:c7:64:c9:85:96:0d:c1:ee:7a:01:4a:1a:0b:3f:1d:36:
84:25:cf:c7:7f:be:29:04:5c:eb:0e:c0:96:18:06:e2:0a:5a:
38:cc:ee:a7:ba:bd:15:44:62:ad:99:60:43:d1:c7:47:23:f8:
6d:db:8b:eb:de:02:48:6a:b3:c2:82:ff:9c:0c:7c:fd:e4:bf:
78:1e:38:ac:e1:1c:52:99:11:97:6f:64:00:9c:38:59:54:e2:
b5:4a:65:22:19:b1:16:ba:00:06:6c:9f:6f:fb:f9:51:0f:5c:
b8:97:fb:7c:c9:ba:4b:3a:65:b5:51:eb:48:21:4b:d6:ba:4d:
48:1f:ba:53:a0:5b:34:61:37:f3:5c:d9:e8:dc:04:2c:c3:7c:
e3:00:af:06:3b:f8:3f:7d:e4:8e:61:29:77:fc:d3:04:d8:88:
03:c5:1f:d6:e4:e3:f3:29:9e:5a:6c:3b:bd:5a:ba:8e:88:b1:
22:5a:68:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 10:08:33 2026 by rpki-client