Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File: p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier: tYzXQ10EXAhl/kzKk1hz7AR/Qt+d6irR1jXV2pN+wgg=
Subject key identifier: 84:DA:51:9E:4F:E4:2F:F2:4E:48:C4:99:D3:D3:4B:CD:1F:B8:D7:0F
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 01A124D4B2BE11AEA6D341CF8ABDB97636E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number: 1220
Signing time: Sat 10 Oct 2026 08:01:21 +0000
Manifest this update: Sat 10 Oct 2026 08:01:21 +0000
Manifest next update: Sun 11 Oct 2026 08:01:21 +0000
Files and hashes: 1: X44UuuaUhAM50Kozh7XZVDvdF14.roa (hash: kIvHQLjOEtZWEUfUCpYD6bbto6town5tHTLofDklsdI=)
2: dAQr9ygVW7afaoDzLId5HtYFpKw.roa (hash: gWNR3pSMI8yeOAqKnvOXgWPtPa0bDKYn5eIcfvgVCNQ=)
3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: leqYftHpxldmQTy62mcL4V9Jr20+rtb4PVgPQ6TE1n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:b2:be:11:ae:a6:d3:41:cf:8a:bd:b9:76:36:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: Oct 10 08:01:21 2026 GMT
Not After : Oct 11 08:01:21 2026 GMT
Subject: CN=84da519e4fe42ff24e48c499d3d34bcd1fb8d70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:2d:85:f2:cf:61:dc:2f:ed:2e:18:b6:02:
d0:0e:2e:1c:ec:3a:1d:be:9e:78:4b:23:b6:2c:14:
1c:7c:79:1b:d4:f7:4c:b9:00:2a:b9:c2:35:92:a9:
bf:05:1e:ae:58:2e:d6:21:62:6a:ee:69:90:6c:dd:
67:91:5a:2a:87:c9:30:47:d2:a7:95:0a:3b:ac:bf:
9b:18:b8:f1:93:23:05:ac:35:92:ae:b6:8f:2d:c5:
aa:48:54:40:63:a0:ad:2d:78:30:29:27:9d:7b:c4:
44:8e:75:e7:3a:9f:af:b4:74:cc:e7:c3:96:12:41:
13:e4:fd:a7:54:e6:3a:35:d9:49:b3:de:6d:11:58:
ca:82:3e:17:a4:c5:89:2d:fb:c8:88:d3:f2:70:39:
6b:48:3e:f5:2c:2d:bc:77:76:51:d1:b1:b7:b8:02:
33:b1:b1:ec:1b:73:5f:9f:cc:17:d9:a4:8b:05:de:
cd:c9:95:3b:12:d8:63:60:ea:de:82:3f:ca:0a:79:
bb:37:ac:14:2d:3d:93:a2:a1:62:ab:f9:cc:fb:9d:
a8:2b:15:d8:78:e7:ee:77:3f:eb:f1:77:37:9e:ad:
da:25:68:1e:bf:c3:1b:e6:d0:44:60:7e:23:69:be:
06:df:31:4b:90:ec:6c:57:e1:87:cf:2d:f3:87:c4:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DA:51:9E:4F:E4:2F:F2:4E:48:C4:99:D3:D3:4B:CD:1F:B8:D7:0F
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:86:68:e0:2f:2f:ca:e8:af:80:0f:80:12:23:98:b0:5c:be:
36:15:e9:f4:3c:9e:a1:fc:33:07:2d:4a:ac:49:e3:be:44:9a:
6d:27:81:66:62:f5:aa:6b:18:0f:91:77:b7:85:32:2e:8c:60:
68:f4:23:c8:9d:b6:32:79:19:c1:83:fb:10:37:3e:79:c1:80:
97:2e:a2:9a:43:cc:87:f2:8b:64:cc:2c:4c:4c:75:7e:c8:12:
17:e1:2a:33:21:1f:d0:20:a0:d0:f9:1f:de:f7:26:26:33:5b:
cd:0c:d7:43:e4:25:88:98:33:b9:8a:b1:35:4e:b5:01:e3:9b:
16:b8:26:0f:75:f5:e7:6f:a7:d3:99:98:aa:69:e1:1c:64:aa:
f3:61:fc:99:72:7b:6c:8b:a2:86:d2:8b:9b:4d:70:58:c7:ff:
cb:89:95:9b:80:2a:28:94:98:f3:cd:bd:ef:98:88:57:b8:74:
73:3d:94:e2:e4:64:67:1b:e7:2f:b5:33:8c:d6:86:b1:3c:87:
b5:06:c7:a1:12:ea:d4:5f:5a:66:39:24:c2:0c:f8:c1:e7:90:
2e:18:0d:73:b6:95:15:4e:dc:2d:73:20:ed:c5:2e:7a:42:51:
bb:49:89:f8:0e:97:77:aa:84:01:66:aa:c6:ad:b8:78:90:ed:
1b:1f:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:39:43 2026 by rpki-client