Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: Xk38zdt3OGM4L/I7SzdMPORVqQ7OJRxrtsoTQW4eHyo=
Subject key identifier: E1:9D:82:14:24:9B:20:DA:18:D4:68:CB:55:2B:2C:9B:DA:F8:3A:76
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 01A13E94EE766892663CC8124252A87EC2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 11C0
Signing time: Thu 15 Oct 2026 08:01:49 +0000
Manifest this update: Thu 15 Oct 2026 08:01:49 +0000
Manifest next update: Fri 16 Oct 2026 08:01:49 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: J2L16B12K05RIvvkmgQ/e8UZE6lZ84KcxfaNNcz63tk=)
2: i1q-5ppGHZKen0mg4iu01mYnQM0.roa (hash: sIuyBrADQrDmfb4gofoZhceJ2ljMvz5t7ov19sRqXKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:ee:76:68:92:66:3c:c8:12:42:52:a8:7e:c2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Oct 15 08:01:49 2026 GMT
Not After : Oct 16 08:01:49 2026 GMT
Subject: CN=e19d8214249b20da18d468cb552b2c9bdaf83a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:b7:a6:f7:76:ed:0d:51:9c:93:f6:f7:73:
31:0e:54:a8:44:ed:02:45:d0:bf:ec:cc:51:29:04:
82:0c:f7:81:15:d9:64:1d:c1:a3:78:da:6d:51:b3:
f7:9b:e6:a9:49:0d:e6:a1:69:0a:ec:dd:41:b4:4b:
f7:f5:43:9a:09:b0:fd:09:db:c8:42:b1:ef:5f:8f:
41:73:7a:42:4e:2a:6a:56:4d:21:fd:15:83:2c:9c:
11:17:a5:26:37:49:c0:63:90:ae:96:d9:f4:9d:27:
e7:9c:56:12:ff:82:b6:68:ae:8d:16:37:66:e5:c3:
c8:a6:a3:be:86:1b:d8:bc:73:79:03:1b:99:74:ca:
ac:82:98:a1:cd:10:90:0e:6d:06:bb:c3:ea:1f:26:
b5:39:ce:a3:81:a4:21:21:5a:80:84:e4:f4:e4:ee:
03:5d:9b:3f:75:e5:77:c0:f8:d0:ce:5a:1e:b7:7f:
9f:19:f3:4b:48:92:09:7b:31:4b:b6:9e:81:74:72:
54:d3:72:f4:ce:73:52:74:0c:df:31:7a:51:1e:22:
a9:94:b6:48:19:6b:f2:c6:fc:09:f3:54:b0:d2:73:
11:88:2d:fd:0e:69:af:f2:8c:29:5c:4d:c5:fb:8c:
5f:80:ad:64:7a:b6:45:65:57:67:f3:f9:46:a4:aa:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9D:82:14:24:9B:20:DA:18:D4:68:CB:55:2B:2C:9B:DA:F8:3A:76
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:98:db:16:13:aa:92:77:21:6e:6a:ed:1f:7d:9c:dd:82:e4:
0c:6f:a7:0b:d1:60:c3:67:46:26:50:e2:8b:21:79:1b:13:df:
3a:d4:b1:9b:37:50:9f:7f:14:f7:84:56:74:00:72:65:c2:10:
14:13:a4:eb:5d:eb:38:1e:1c:85:6f:7b:0b:53:eb:c3:6e:48:
41:0d:83:09:5f:47:06:0e:b1:20:d7:dd:33:7d:4d:68:ea:dc:
96:38:bc:d3:0f:69:45:6d:1a:c1:d9:06:c3:14:33:e7:3d:3c:
19:fa:fd:d0:6e:42:cf:e7:93:11:c4:4e:8e:76:d4:20:22:5f:
51:b4:27:6e:fc:98:85:5d:f6:84:95:46:4b:47:2a:30:99:11:
31:36:46:87:3f:4e:3a:65:de:7f:13:2f:8f:52:ed:cb:32:95:
ab:89:c5:38:41:d9:d7:d2:7d:c8:4e:fe:14:06:58:c4:06:a0:
b9:ae:2c:34:41:3e:fc:6e:5d:c9:10:ff:d3:92:89:45:c7:e5:
53:29:e1:dd:dc:ed:09:79:83:fb:56:43:48:14:1d:2f:01:16:
bd:42:cd:04:9a:ce:2f:c4:16:a5:97:f0:bf:1e:56:ab:32:b8:
00:d0:24:c2:99:64:04:1c:2e:7f:78:d6:1b:b1:37:5d:a8:d3:
d8:26:f7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:39:33 2026 by rpki-client