Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
File: ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft (raw, json)
Hash identifier: 8v6yEASibNZGUSVcBTPMc+d1qL56khwVhcjuQgHVv9M=
Subject key identifier: 8A:97:4D:5B:6B:EC:72:0A:CC:08:2A:87:7D:DB:A9:0B:D6:FE:12:CF
Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Certificate serial: 01A0EFD530CE27178DB68FD1A9F6625211B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
Manifest number: 0302
Signing time: Wed 30 Sep 2026 01:02:01 +0000
Manifest this update: Wed 30 Sep 2026 01:02:01 +0000
Manifest next update: Thu 01 Oct 2026 01:02:01 +0000
Files and hashes: 1: ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl (hash: 8jMQYzcuvPLgGv/X5WjnL/q2cXoRmLARm/VGL3QkPU8=)
2: lziFHs2A2VUAzP4OBhEcFvF0OKo.asa (hash: UdHnnZIMARPO778i7Gu0UeetalCkGAD0yUjUjL33whg=)
3: oZk022Uzrddlew7HUihOqnvD09c.roa (hash: dwxrsadoT/LqWkbIyIuXpQYj7jm07uhTLFbkxlkUhvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:d5:30:ce:27:17:8d:b6:8f:d1:a9:f6:62:52:11:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Validity
Not Before: Sep 30 01:02:01 2026 GMT
Not After : Oct 1 01:02:01 2026 GMT
Subject: CN=8a974d5b6bec720acc082a877ddba90bd6fe12cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:20:08:cf:cf:2d:2f:0f:cd:99:84:cd:81:ce:
8d:f1:b3:c0:f9:8d:60:b7:bd:54:a8:35:62:9a:f3:
af:fe:eb:44:3b:a9:39:d9:c7:81:b7:1d:34:c5:25:
b0:57:f3:a8:f6:21:b9:50:f0:3c:d2:1c:18:fe:50:
a9:3c:7a:66:cc:f0:0f:3e:43:56:f1:81:39:07:c9:
eb:f8:84:aa:b6:f7:84:cd:e0:da:5f:d4:a6:32:cf:
a4:d6:26:00:f2:18:f1:a6:35:fe:0a:80:6b:17:b0:
f9:06:b2:06:1f:ca:30:ad:12:e2:1f:4b:95:1a:1d:
41:fa:b7:90:81:1c:cb:1e:fb:d3:d1:4c:27:c5:54:
36:54:db:63:cb:62:4b:44:b7:6c:5a:90:f4:c3:39:
2a:db:c4:d3:25:47:71:c8:3d:eb:a6:7b:24:e1:47:
58:5a:a0:23:c1:f0:bd:45:47:af:22:20:9b:17:7b:
57:0c:4a:e9:6a:70:f0:c2:28:00:b8:94:be:e4:2e:
23:c2:b2:b1:da:8c:0e:66:b0:18:73:06:8b:1b:83:
34:d4:e4:27:9c:db:3b:9e:6c:c1:bf:93:eb:6d:a6:
37:99:83:ac:9f:24:15:87:21:39:1d:b3:a4:05:51:
5c:1b:7b:2b:95:0c:70:2d:8f:30:52:2b:9f:48:f2:
7f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:97:4D:5B:6B:EC:72:0A:CC:08:2A:87:7D:DB:A9:0B:D6:FE:12:CF
X509v3 Authority Key Identifier:
keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ed:72:af:df:ec:26:3c:3c:92:eb:a1:13:02:d4:13:c0:84:
fe:94:4f:81:62:c2:d2:d0:50:73:4c:67:81:b7:6a:13:a7:c9:
c9:20:07:71:4f:30:5d:34:7f:5b:b9:82:e4:8f:f0:45:33:16:
ce:e7:56:1d:9d:33:b4:a2:07:8a:8d:30:53:07:58:dc:45:9c:
69:fb:fe:72:36:f5:35:ae:8f:e5:78:df:ad:45:e9:4b:89:6c:
60:00:a6:8f:ba:d0:ab:7c:76:63:a5:e5:09:ca:4c:2b:3e:72:
39:5d:07:9c:cd:1b:4e:e3:d5:b0:a2:df:59:80:ac:28:bb:c6:
60:11:35:b3:64:1d:f8:55:f7:c0:a5:91:41:3a:91:1d:b8:78:
35:a5:83:de:15:fa:b7:3a:66:3d:55:79:e2:18:2e:2d:5c:04:
74:38:5d:b5:a4:f2:6a:13:cc:da:63:8d:22:16:37:72:ba:29:
43:d6:d6:b0:ce:62:1e:f0:36:50:45:61:71:3c:5a:35:8a:47:
1b:1f:f2:94:42:99:f0:50:d8:b5:e1:d2:20:13:99:77:0c:5b:
33:b9:27:51:d7:d6:1d:f6:18:0f:f7:f3:bd:59:a0:cd:26:3c:
60:0d:4d:ea:08:e8:9d:6e:35:b9:ff:89:15:91:6a:b0:5c:e5:
95:38:fb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 06:56:41 2026 by rpki-client