Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: L9g4zx9B3obW2npsU5yxvuu3MMBX13jTnyCWhYrTcs4=
Subject key identifier: FE:69:B3:51:62:EF:E6:DC:BC:0F:1A:A0:1E:85:1F:57:87:42:B4:92
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 01A08AFA66E49DD997BA01302076EC153D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 0959
Signing time: Thu 10 Sep 2026 11:01:01 +0000
Manifest this update: Thu 10 Sep 2026 11:01:01 +0000
Manifest next update: Fri 11 Sep 2026 11:01:01 +0000
Files and hashes: 1: S_Jp9m9blIUps0OicsJ0YR9eOvE.roa (hash: Be16CYxyexdW5EkOG7OmNRTbUwOGD3q//e7OhhleAMQ=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: uQVWWDddZobRILDOqxZnNpBtM7qcB8491/8H/Gex17s=)
3: yIOWYvs8zmXxlBajX3odsYxOM8Y.roa (hash: d8ux5xGWiDuWJb9M/rhcfhWw34lH4Et949GrjMpaIAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:66:e4:9d:d9:97:ba:01:30:20:76:ec:15:3d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Sep 10 11:01:01 2026 GMT
Not After : Sep 11 11:01:01 2026 GMT
Subject: CN=fe69b35162efe6dcbc0f1aa01e851f578742b492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:16:bc:24:40:2b:8e:7f:57:ee:88:fe:30:
58:7d:60:ac:1f:1a:33:fe:70:3b:03:62:52:77:95:
3f:71:ca:c4:5f:52:71:c4:06:51:b7:3f:47:1d:cb:
c6:3f:6c:1d:7e:1b:7a:24:77:46:ab:45:c8:5b:1b:
6a:2c:0c:0d:ef:04:b4:3d:be:9c:ac:74:34:db:fb:
7d:22:4c:69:45:68:76:ff:96:c2:1a:77:13:dc:39:
ca:eb:44:2a:d5:c5:a6:6d:38:6d:74:ad:e5:2a:91:
1f:d2:ec:a3:b4:73:e2:65:e8:2d:18:88:80:35:4a:
08:7c:7b:ed:16:7f:18:fd:40:22:96:3b:87:b3:73:
e7:a8:33:92:8c:af:3c:07:a2:48:1d:a5:1a:b2:06:
1d:49:92:44:87:8f:df:7e:35:df:d7:36:dc:c3:bf:
15:62:f6:d6:73:19:ee:cb:44:40:8d:c2:aa:80:c8:
78:0c:88:44:d8:3e:65:c6:cd:5d:ae:c4:e2:20:d9:
b5:8c:6a:ed:2e:d0:16:b3:0e:76:b2:aa:4e:6b:a9:
5d:f6:8d:96:27:a8:a7:63:c4:d7:53:95:e4:f0:0e:
5c:88:0c:b6:71:dc:ed:f4:91:64:de:e5:97:de:9e:
0d:44:49:36:02:8d:9e:e5:9d:5d:e5:f2:eb:e8:38:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:69:B3:51:62:EF:E6:DC:BC:0F:1A:A0:1E:85:1F:57:87:42:B4:92
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:df:5e:d2:fc:c3:34:ee:6c:a1:81:df:5e:f8:a5:b3:9a:97:
57:a5:15:a2:f9:5b:99:8d:49:e9:fe:e6:07:76:7d:98:70:e3:
d2:ca:58:3a:ae:59:be:04:73:38:b0:9d:3a:81:50:b9:e7:fe:
2c:86:6e:2e:58:ef:64:a0:85:7b:a4:8d:f9:64:3d:52:60:95:
2f:52:d1:d1:b7:b5:25:75:20:5a:3c:f7:3d:51:89:5e:5d:28:
9c:79:1a:fd:66:c1:12:a4:af:12:9f:3d:08:d3:28:c2:b1:05:
14:50:62:b9:83:f4:3a:76:5c:04:81:17:72:97:73:3b:26:80:
62:4c:41:0c:f3:a2:10:f4:0e:5b:18:e8:1c:f4:92:2f:79:7f:
98:5c:25:6d:11:d4:0e:1c:38:3a:c7:d3:02:ef:22:8e:2e:6f:
c9:b4:5a:4c:ac:a8:58:87:0f:0f:a5:14:fe:f0:97:ac:25:3b:
67:19:c5:f2:14:12:11:20:c6:a5:72:86:f5:2f:80:4f:87:18:
af:a0:65:40:43:44:0c:b9:b9:3f:4e:e4:7a:da:b9:48:e6:0a:
85:df:73:f4:90:13:2c:87:76:63:32:6e:e1:9f:25:7f:d5:62:
e0:9f:22:c4:81:b4:ac:79:3f:8e:43:e2:f1:ae:26:d5:1d:5b:
ff:47:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:26 2026 by rpki-client