Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
File: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json)
Hash identifier: CvrMWGxoSeTv2qE5FNanjMXNmTwocBNrcGEz8P0Sh1g=
Subject key identifier: 15:8D:F9:A4:E9:1D:D0:34:63:AB:30:60:BB:BF:3B:28:5C:B5:B9:B0
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01A0024A874EE8A3EEC208C63A7F9B5AC930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
Manifest number: 1A3A
Signing time: Fri 14 Aug 2026 22:00:33 +0000
Manifest this update: Fri 14 Aug 2026 22:00:33 +0000
Manifest next update: Sat 15 Aug 2026 22:00:33 +0000
Files and hashes: 1: 2DdvN_iUNqmYcEBq-ZCFq6-CizQ.roa (hash: LqeaKg62lpX0ChDrc0EwkogKrlU38oKoyGWR5W51V/g=)
2: 2gp85iNI9hOHVMoD-AVmhaVIeZQ.roa (hash: axs71u0qY3GNU78vZgfYXYLH532ZZvavOcB1PlEaAyE=)
3: 5V_xONqzwKma1n0RRaZThBrg5gE.roa (hash: z1TwNh3QakcyBUbCZgGTjXYrrx8YDgv/xgtP0R9TjOI=)
4: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: Bvr8aMyDCHWPWPrRAc7ZVQoLbnkEruNQD4zOJWBzTMQ=)
5: Sr8taJwNmM6IUIh68pFCremKsP0.roa (hash: 8hNtlSLs+hgRIJnDDfJh2MIcy6zUGifsMLAL3xiKJ1I=)
6: cJSB3QS13j7tmP3z_rxKXgO4j60.roa (hash: 9yWuPk6TuuusjVGKVizh7DPc+s1P+89Z5o314zB49FI=)
7: fX9Ntx01MeYfchEoD86Q07pznOM.roa (hash: eS+MajeTkn8ySJPzagAdaZWH+HXRs8kG8NnJME6PFfU=)
8: xLSZNUcYipnlzFKrMFLEht9TUSg.roa (hash: twmH1yWPUe/Hi79YMdDB7x2ltkNrwCgcnb+wVA498JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:87:4e:e8:a3:ee:c2:08:c6:3a:7f:9b:5a:c9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Aug 14 22:00:33 2026 GMT
Not After : Aug 15 22:00:33 2026 GMT
Subject: CN=158df9a4e91dd03463ab3060bbbf3b285cb5b9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:ad:91:56:db:be:7e:a6:c4:69:96:ef:9f:
a0:ec:2e:cf:dc:f1:be:1d:d6:74:2d:3e:0c:7e:f1:
b0:4d:4d:ac:ca:e0:d5:a1:c2:4f:9b:66:f7:b6:7f:
26:c9:68:c7:f8:15:53:12:ac:c4:7a:96:df:37:c5:
f7:8d:b5:cd:4c:37:41:48:dd:08:5a:1a:18:b5:2b:
55:d0:5c:0a:b9:ee:ca:dc:e1:23:61:57:24:7d:9f:
89:b9:41:9d:65:7f:4e:91:d0:08:37:37:89:b4:b3:
60:3c:8f:63:79:e6:85:f4:d7:d0:4d:cb:7d:35:a7:
06:4b:7c:c3:c0:74:e9:04:ca:43:1e:5f:3b:3e:e8:
dd:8f:9f:c3:9f:62:ee:1e:10:6b:d5:bb:30:a5:53:
75:d5:65:e7:95:df:24:22:49:89:d9:5c:04:2f:15:
d6:96:10:23:ea:b2:37:77:33:3f:ff:0c:60:f8:bd:
78:36:99:6d:ff:32:af:e0:df:c4:d4:6f:a3:db:08:
d3:a0:3b:b6:5a:dd:bf:5d:02:d7:31:c7:23:bc:8e:
4d:30:c7:26:24:77:2b:16:d4:35:eb:6b:ac:34:45:
de:5a:c5:45:e4:bc:92:35:15:12:4a:10:0c:43:e5:
15:8b:53:5f:5d:47:02:4b:a8:65:3f:ec:de:4a:fd:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8D:F9:A4:E9:1D:D0:34:63:AB:30:60:BB:BF:3B:28:5C:B5:B9:B0
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:94:d3:e5:c9:03:be:0e:27:2a:ba:c7:17:d2:54:ad:f0:b7:
89:fa:41:86:31:4f:1f:86:4a:dc:2e:ca:28:ec:27:93:f2:73:
37:ce:8a:43:9c:cb:81:88:38:54:8c:44:3b:41:cd:79:48:e3:
3e:03:d0:49:ff:3b:a5:bb:13:42:14:ea:d4:22:db:56:dc:31:
29:a8:76:f9:81:76:e6:38:07:13:f3:f6:29:c5:da:52:43:8c:
53:52:89:2e:4d:57:d5:2f:bf:ce:6c:23:0c:8a:1c:6a:f4:9d:
3c:86:b5:9c:ea:b5:0a:47:5a:37:7b:44:89:b1:b1:d6:0b:a3:
52:5c:42:bb:92:e8:f1:e7:86:8b:27:c4:28:9e:93:84:13:9d:
a8:b6:79:41:aa:d2:1a:01:c6:38:d9:aa:32:03:1f:2c:06:d9:
80:49:64:b2:a7:09:9e:85:53:17:d0:f9:e3:b7:23:7e:79:98:
ca:d6:1b:1b:b1:67:86:d1:e7:34:60:07:21:d7:08:2f:77:c8:
66:3e:f3:ce:e4:ae:73:17:80:b0:91:d8:2d:79:57:fe:11:5e:
0f:0f:8c:4e:98:e9:94:82:5d:0d:a2:ea:21:7f:f3:34:7e:13:
21:b7:2a:e9:99:77:12:cd:9e:ac:b0:46:97:65:ff:f0:4b:23:
7a:59:ab:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:08 2026 by rpki-client