Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
File: I9hEjFy5A5jkwoXOycD0dmrJMd8.mft (raw, json)
Hash identifier: fRNlT4T+giX6rQmYkAK2/jzk2PSVsbNQpXDd+bSyttQ=
Subject key identifier: 20:09:61:46:0C:8C:87:67:FB:81:5D:7D:64:46:B7:29:91:12:26:DD
Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
Certificate issuer: /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Certificate serial: 01A12D6A08D567CB69E3900F87C2C40A739B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 00:01:26 +0000
Manifest this update: Mon 12 Oct 2026 00:01:26 +0000
Manifest next update: Tue 13 Oct 2026 00:01:26 +0000
Files and hashes: 1: 8TcJH-qO38Nnc49nDFhjl3i6q20.roa (hash: HYqFnkRnK7UVCZ7277kZ3SagdWM8Y+qSNG/b1PHhvmw=)
2: I9hEjFy5A5jkwoXOycD0dmrJMd8.crl (hash: h2b9VPK/7BgTwzNK1CUfXTovYCrPv9n1Wte+RDFf+0E=)
3: XcluKI5GK94xvt-2VsfsH9YAxas.roa (hash: aMUQPT04n27GjqpL1CyIzBfeTJro8TREHvy5Fo/qxZs=)
4: ppVBATzjCDPLKHQd3o4jFf9lhxY.roa (hash: 4QaAZx/54RVk/xsTNzwOX4eDHF+9k00rM5X1Yd0pNtY=)
5: xkK7Kbvhg6ccWQLBKOWEjOj8dIs.roa (hash: hSxWOh+4pOoJgqKHeBLOsvvNqhI/bRq5ZNPWvaG7HYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:6a:08:d5:67:cb:69:e3:90:0f:87:c2:c4:0a:73:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Validity
Not Before: Oct 12 00:01:26 2026 GMT
Not After : Oct 13 00:01:26 2026 GMT
Subject: CN=200961460c8c8767fb815d7d6446b729911226dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c2:e6:83:83:ca:e7:76:14:52:38:8e:bc:6c:
2d:03:71:c5:5a:2a:29:88:f7:8f:cf:ea:ce:e7:5a:
a8:17:34:84:0e:54:ba:01:a6:3e:5f:2d:37:5e:2e:
0e:12:62:c1:c6:ed:a2:7f:b1:ce:a4:92:75:2c:ed:
e2:81:ca:60:42:ce:83:a9:5e:27:46:6f:e4:de:a8:
b0:c7:3e:30:63:c4:71:30:61:b4:99:f1:83:4f:06:
6c:d9:79:15:23:01:37:ce:98:11:c6:68:7a:e2:77:
e0:ac:8d:7d:26:0d:a4:c1:fb:98:45:aa:84:ec:39:
61:fd:6b:ed:8d:41:61:51:50:fa:ec:c7:1f:1c:0a:
24:78:c9:72:99:ea:93:cd:60:c9:db:f5:0b:2f:8c:
78:d3:31:d1:7d:b1:10:fe:55:32:86:51:38:c1:b7:
ed:4e:df:d0:10:3e:40:26:b2:3b:16:74:3c:f6:3d:
f1:ab:3d:55:75:9b:be:64:b8:b2:4d:c4:60:ca:b3:
fa:8f:07:73:2a:26:26:1c:a5:8f:d5:99:13:2c:86:
a6:52:e8:40:84:26:0d:11:b7:be:bd:0b:f0:68:5c:
c1:13:af:ec:93:94:fb:2f:07:85:57:fe:3a:fb:1b:
55:d7:d6:fa:30:81:8d:61:69:e4:63:fb:4b:7c:b2:
2a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:09:61:46:0C:8C:87:67:FB:81:5D:7D:64:46:B7:29:91:12:26:DD
X509v3 Authority Key Identifier:
keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f8:3a:d6:77:6d:35:07:82:f5:5b:2b:99:e1:c6:20:2e:df:
d7:53:72:15:91:a6:e6:e9:6c:57:bf:fc:c1:0d:b7:4f:ba:17:
5a:33:e0:e0:8a:7b:ce:5c:75:cc:26:43:02:9c:ad:82:0d:c6:
ea:06:eb:64:e1:95:06:f8:06:3c:b3:57:ad:52:4d:3e:eb:2b:
f1:0a:e2:1f:ad:27:53:e8:b6:4b:8c:36:79:c8:ec:b2:8c:55:
b1:3d:59:07:18:3d:57:1d:a8:f2:25:c2:82:58:d5:6e:f2:0d:
ef:ac:ba:49:4b:85:43:1e:21:41:87:0c:a4:a9:73:a2:63:28:
1a:f6:8a:df:2a:8c:35:50:00:81:80:76:96:e2:58:0d:e1:75:
a0:85:10:96:cd:11:f2:82:09:3c:4a:71:10:26:54:19:62:c0:
8c:70:d2:39:35:08:1a:2d:6a:2b:4f:e5:ed:24:f5:4a:14:43:
be:ca:17:cd:54:29:be:cd:6b:1c:53:9b:3f:cd:3e:3a:11:4f:
4f:88:25:af:cb:34:f0:9f:b2:e7:e0:4f:d5:10:d9:ab:54:60:
5f:09:a4:94:46:90:38:4e:a7:26:30:e8:36:0f:ef:2b:9d:c2:
83:ae:77:b8:ed:84:70:d7:7c:9f:64:0f:f8:3a:66:5c:de:9c:
ec:74:18:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:12:42 2026 by rpki-client