Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
File: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft (raw, json)
Hash identifier: 49A9aHHl+bB+iK0GKo8e4ZfY1X1aWVqlqi0WNGnd1ww=
Subject key identifier: 16:8A:8B:7F:30:19:1C:68:44:33:21:7D:8A:04:65:C8:78:EF:7B:40
Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
Certificate issuer: /CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Certificate serial: 01A1347F339D45DBFD850A0B5BA9043F0E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
Manifest number: 1A9D
Signing time: Tue 13 Oct 2026 09:01:53 +0000
Manifest this update: Tue 13 Oct 2026 09:01:53 +0000
Manifest next update: Wed 14 Oct 2026 09:01:53 +0000
Files and hashes: 1: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl (hash: bl9/CkTEe6ERDTppsdVwZini1V6eBil3Hi8RCkLtpj4=)
2: LDyfR2ZtnYNbloHwNFDlP56jAsw.roa (hash: inTNdVNnUzE3++ozBBAiNTKzryuD+atj6L3dBuSWD7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7f:33:9d:45:db:fd:85:0a:0b:5b:a9:04:3f:0e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Validity
Not Before: Oct 13 09:01:53 2026 GMT
Not After : Oct 14 09:01:53 2026 GMT
Subject: CN=168a8b7f30191c684433217d8a0465c878ef7b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:97:58:a4:74:51:e4:bb:d8:b5:44:75:9a:
3b:82:d5:39:c9:cc:7b:b1:b2:9b:6a:a6:d6:da:00:
43:30:59:d4:da:ab:72:1c:91:78:94:10:42:fb:9e:
19:a7:c0:38:98:5e:53:27:53:77:66:65:0d:25:1e:
86:e0:28:b5:3d:fe:66:97:e7:84:d4:2e:41:06:fb:
d7:9b:48:7f:47:bd:75:a6:bd:9e:55:8b:94:3a:5c:
e0:ad:ae:2d:de:eb:52:ae:03:ed:88:f2:f2:68:b5:
46:96:8a:2c:a6:c3:6f:18:20:d7:83:a9:de:43:9a:
13:c6:56:5b:e9:0f:f6:c8:78:d9:63:53:0b:a3:4a:
df:0b:87:f3:02:a8:11:fe:54:64:25:4a:1f:a7:33:
80:21:b2:8d:21:8f:eb:ad:25:c4:08:26:0d:37:4f:
07:7b:73:84:ad:56:9a:d6:5c:bd:5b:c0:90:cf:53:
1f:c8:b9:15:9d:bc:5a:98:29:16:7d:18:02:d9:90:
e6:ad:33:ec:58:94:df:8b:60:68:09:14:d9:36:37:
2f:61:8e:fd:75:44:5d:03:3e:cb:bf:eb:9a:2b:24:
ae:c6:82:40:03:24:2e:2a:93:dd:7d:31:28:05:b6:
7f:b7:d0:d4:21:ed:be:9a:ec:f3:e5:34:b5:17:53:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8A:8B:7F:30:19:1C:68:44:33:21:7D:8A:04:65:C8:78:EF:7B:40
X509v3 Authority Key Identifier:
keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:26:95:f0:e7:8c:56:84:e4:66:bc:dd:d5:a8:66:8b:1d:17:
15:7b:c2:b9:35:2d:f5:29:00:48:62:37:99:34:62:e3:39:83:
a2:3f:da:e7:3e:01:09:e0:8e:22:c9:d2:b7:68:ed:5e:62:82:
37:2c:83:f1:61:41:56:dc:dc:62:f9:0f:18:9d:df:13:9b:1c:
7d:13:59:47:4c:48:15:d8:0d:db:b9:9c:04:6d:95:79:01:33:
0c:50:e9:af:3a:8f:f4:c8:3f:e7:33:97:71:6e:7c:e3:0c:6e:
63:2d:67:3d:dd:3d:ba:1c:51:95:8e:8d:4d:14:a9:8c:40:83:
52:e0:3d:c6:f7:6f:94:d9:be:1c:9a:6e:a6:97:ed:0f:5a:87:
30:d7:5a:a6:63:4d:72:a7:4d:e2:dc:25:44:89:04:2d:48:eb:
65:8b:55:e3:5b:0a:62:83:33:60:a3:9e:b9:83:73:cc:dd:a6:
22:0b:46:34:67:d0:be:32:5b:13:48:db:50:81:bc:b7:6f:a1:
a7:4e:9d:bc:2f:0b:5b:aa:6f:3e:e2:d7:91:1e:68:74:03:fb:
6d:00:ee:c0:52:af:8a:f0:50:2c:f7:7c:81:43:2b:34:a7:67:
a4:f7:24:31:ea:36:b5:9b:f4:03:93:ee:d3:ac:fd:db:a8:72:
74:b6:de:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:31:54 2026 by rpki-client