Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: 0e/zKTTepEg5eAGgGRAonhnRldh4y8J+JmWWIg2L2WQ=
Subject key identifier: 22:9E:43:D3:6F:6B:59:42:1B:48:4A:8E:17:E8:57:D7:79:63:F3:63
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 01A119750C6523B98B8DAE9C775ABDE8CB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 1A90
Signing time: Thu 08 Oct 2026 03:01:03 +0000
Manifest this update: Thu 08 Oct 2026 03:01:03 +0000
Manifest next update: Fri 09 Oct 2026 03:01:03 +0000
Files and hashes: 1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=)
2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: EwCc7BAKIOsFRMtPyNYcViTOoWbcgMrLOlwC4Tf18oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:75:0c:65:23:b9:8b:8d:ae:9c:77:5a:bd:e8:cb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Oct 8 03:01:03 2026 GMT
Not After : Oct 9 03:01:03 2026 GMT
Subject: CN=229e43d36f6b59421b484a8e17e857d77963f363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:68:5f:71:51:64:f3:12:7d:8b:87:9c:1f:
c8:60:dc:e5:9e:75:36:d0:7b:63:89:2f:0d:a3:06:
52:77:c5:43:aa:b2:27:e7:78:b1:a1:d6:84:1a:9f:
39:3b:83:4c:e8:2c:f6:14:40:1a:91:cd:a1:c3:39:
4c:68:99:55:11:76:49:e1:62:fa:f2:b1:cb:7d:ea:
a4:78:a2:44:46:96:df:a1:33:97:34:55:5c:c9:58:
0d:6c:70:7a:e0:38:72:f4:46:8c:c7:77:47:fa:15:
d6:8c:c1:72:a3:b0:ce:a0:35:9d:25:c6:0d:30:6c:
f9:e8:0b:1b:ad:0a:4f:30:39:34:cc:77:2b:98:9d:
ca:5f:ce:72:d0:ac:75:1a:f3:6a:ae:cb:99:a3:30:
36:f0:a2:9b:f7:0e:0e:f7:fc:24:d7:5c:cd:66:9d:
9a:33:fb:b8:ea:7c:28:d3:85:d0:2c:05:ea:d5:08:
78:a5:d3:09:72:55:94:47:85:85:23:f0:5a:d5:89:
86:e6:ba:8e:cf:69:25:89:9e:64:fb:cc:5c:a1:4f:
bf:e4:07:30:a7:20:30:25:6a:03:78:e4:91:2e:2b:
d4:1b:29:9c:1b:9a:71:01:a4:60:39:b7:bc:a8:fe:
32:e6:18:ac:23:52:12:66:83:a6:cb:e5:6f:11:c4:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9E:43:D3:6F:6B:59:42:1B:48:4A:8E:17:E8:57:D7:79:63:F3:63
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c4:0d:56:8a:e1:d0:ff:b2:b4:5d:06:06:bb:ac:26:55:5c:
99:58:93:53:95:e4:66:c9:07:6c:dc:20:1a:22:6a:ba:e9:ef:
56:48:e9:c1:56:e9:d1:16:94:44:0c:44:52:28:77:fd:1b:7d:
1c:2c:41:53:18:f0:c2:24:c4:b5:58:d8:37:93:1e:ea:7c:32:
9b:cc:2e:59:6a:4f:ac:dd:a5:05:73:7c:0e:cc:4b:fc:72:dc:
c4:d3:ef:d3:43:17:33:e1:63:c6:ee:d1:f4:c8:a5:c3:8b:3b:
6a:b5:e8:e2:db:e1:0e:c4:cf:3e:44:2c:57:ae:b6:bc:0f:57:
67:27:c2:6b:c0:17:25:bd:a6:d9:bd:83:12:0a:54:80:b9:ef:
8e:7c:98:c5:ce:56:ec:e5:55:e3:7f:4a:6c:aa:bc:52:9b:ea:
59:20:f8:2d:7c:5d:12:97:9f:12:a1:c4:be:18:da:c8:d6:8a:
28:af:0f:39:47:e6:d3:e7:81:a1:e2:24:17:ae:77:6e:7f:a0:
9d:42:cb:e5:b5:f6:6f:65:8b:95:cf:2d:8a:ac:44:47:fe:2f:
f4:c3:47:b1:db:ab:61:75:26:a6:8e:44:66:f1:ba:ba:1a:9c:
8e:ec:2b:ce:af:8f:fd:f7:52:b0:bc:01:97:a3:78:98:99:9f:
64:5d:82:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:02:06 2026 by rpki-client