Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
File: m1iV5_am1KupyWH3E7LnlxXwIfA.mft (raw, json)
Hash identifier: wFjM/A16UZyY5vmqKDFTMtO+KhB46Ccb1WECykcltuE=
Subject key identifier: FF:76:0D:BC:00:3E:70:EC:0E:1C:1C:26:89:DF:B4:21:30:85:16:58
Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Certificate issuer: /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Certificate serial: 01A08B316D75120259509D6E44D6C2C25B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 12:01:07 +0000
Manifest this update: Thu 10 Sep 2026 12:01:07 +0000
Manifest next update: Fri 11 Sep 2026 12:01:07 +0000
Files and hashes: 1: m1iV5_am1KupyWH3E7LnlxXwIfA.crl (hash: iIwEI/hZdNAbwQ9t6LkLji9HkleQeWisXFES3a9w+Jo=)
2: qQ5wyVk3Z3xJb9VITeIiyOE6Sbc.roa (hash: h2aANiX2nKKZxUEkCXX/gXAdtKRfHxmcGefK8NxJSXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:6d:75:12:02:59:50:9d:6e:44:d6:c2:c2:5b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Validity
Not Before: Sep 10 12:01:07 2026 GMT
Not After : Sep 11 12:01:07 2026 GMT
Subject: CN=ff760dbc003e70ec0e1c1c2689dfb42130851658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:5b:cc:6d:2f:ce:32:02:67:6d:d2:87:30:
0a:db:1d:dd:58:df:6c:d6:20:e6:a4:f2:36:fb:5d:
66:a6:da:56:53:1c:5f:87:38:27:75:34:83:05:ac:
83:22:2c:99:65:c3:7e:dc:78:93:be:23:00:ea:89:
c3:84:8a:4f:c1:8a:06:c8:30:2a:60:5c:0c:2f:7e:
82:ed:ea:98:05:0c:19:31:a4:b2:c0:0a:d2:f8:34:
6b:3a:0d:e9:dc:54:8f:f3:33:0c:c5:8b:ab:dd:7c:
26:39:e3:52:5f:fd:15:d9:0a:0a:88:71:b5:23:e8:
42:36:12:c5:a8:04:5e:39:5e:8c:58:0f:d7:1e:7b:
7a:06:f7:c2:cd:35:07:4b:74:e9:49:aa:ff:fc:ca:
03:64:06:b1:0d:e1:06:36:e8:58:25:8d:9b:6f:ec:
5d:28:41:33:26:15:24:a4:34:eb:7e:b3:96:a9:31:
0f:91:f3:05:b5:ee:36:51:50:09:e9:cf:f8:36:95:
3d:04:35:96:4e:f6:01:9c:67:78:9b:ce:48:a2:42:
f5:d1:ee:73:79:09:6b:7f:2a:1a:50:2f:f5:9e:3c:
4d:e6:9b:4d:36:22:d0:00:b1:8e:55:be:be:85:78:
66:9b:54:49:f3:50:0d:42:c8:a3:78:6d:35:a2:8f:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:76:0D:BC:00:3E:70:EC:0E:1C:1C:26:89:DF:B4:21:30:85:16:58
X509v3 Authority Key Identifier:
keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:55:9a:64:53:e4:27:62:90:70:25:23:79:d8:de:68:84:24:
aa:9c:27:9e:6f:de:cd:c7:de:59:26:08:e3:f7:ee:23:bb:49:
ce:cd:3d:82:da:94:3a:8a:cb:ae:de:17:01:4b:d0:b3:de:67:
f5:5b:c8:a6:1a:1d:af:fe:50:eb:48:6f:aa:27:36:b5:66:94:
83:0b:8e:64:77:9d:fb:48:a5:9e:06:23:46:55:8c:15:da:7d:
ed:7f:e2:ec:92:9f:0b:cd:84:96:5f:79:c2:78:79:4b:1a:8c:
96:05:60:0a:e9:a6:b8:81:86:be:6f:48:50:1b:10:67:65:b4:
58:81:8d:53:6a:6e:7c:d4:6b:74:98:c6:c0:03:23:13:cc:9f:
1e:81:25:27:b4:3e:db:86:96:cb:ff:96:15:20:91:ed:5a:a5:
c4:14:81:09:34:a1:f4:08:aa:09:ca:2a:8e:35:ee:ac:f6:b3:
7b:a4:47:5e:d3:1c:05:59:cc:c6:b4:89:28:92:58:11:2f:7e:
78:63:83:03:c2:bb:1d:f6:b3:9e:fc:60:9e:d6:29:25:91:ff:
cc:26:a7:4b:0b:ca:e3:56:7b:02:2a:24:92:de:3a:ba:f0:48:
3f:6f:31:16:fd:be:b8:a0:57:5c:b8:05:da:ad:76:8d:55:1c:
82:e9:f4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:53:09 2026 by rpki-client