Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.mft
File: 1JoJgE9Klx2oYCD-wxt3ts54WlA.mft (raw, json)
Hash identifier: va+3tXUNKVqjI9/KNpPQk5aU+tCFByV1aF61VJ2yTFk=
Subject key identifier: 67:FE:F1:63:AC:79:19:51:51:37:A9:1F:FD:97:A6:D9:14:5E:28:3A
Authority key identifier: D4:9A:09:80:4F:4A:97:1D:A8:60:20:FE:C3:1B:77:B6:CE:78:5A:50
Certificate issuer: /CN=d49a09804f4a971da86020fec31b77b6ce785a50
Certificate serial: 01A03F3BEC0919C52CFE45107535B50737F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1JoJgE9Klx2oYCD-wxt3ts54WlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:01:26 +0000
Manifest this update: Wed 26 Aug 2026 18:01:26 +0000
Manifest next update: Thu 27 Aug 2026 18:01:26 +0000
Files and hashes: 1: 1JoJgE9Klx2oYCD-wxt3ts54WlA.crl (hash: nuC8e11OTbKImgeo0HsQVvttLBAVeBvNBqhtQ37MY3Y=)
2: NwwaWXozHy71mbpAU3P6llyB78Q.roa (hash: NiQ4zMwsxxv5Pd5CC5l/iVQxZM/r14qUwT9CwKCLn7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1JoJgE9Klx2oYCD-wxt3ts54WlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:ec:09:19:c5:2c:fe:45:10:75:35:b5:07:37:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49a09804f4a971da86020fec31b77b6ce785a50
Validity
Not Before: Aug 26 18:01:26 2026 GMT
Not After : Aug 27 18:01:26 2026 GMT
Subject: CN=67fef163ac7919515137a91ffd97a6d9145e283a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:4f:a9:13:b2:fe:64:ef:6c:e0:a5:00:df:
ab:3d:46:32:01:4d:cf:7c:37:b4:05:46:45:fd:b6:
0a:c4:d5:fa:03:d7:4e:31:00:9e:67:90:02:0a:37:
1e:2e:78:26:78:cf:5c:f1:92:bc:6b:f9:7f:56:45:
6a:72:4c:ea:c1:12:01:9e:77:79:11:4c:e4:04:17:
aa:86:d7:3d:e0:ca:1e:4d:64:f6:b8:0a:a7:c4:1f:
55:cc:68:91:71:3f:39:c5:c9:68:27:94:56:2d:af:
c9:99:7a:3f:95:64:05:fb:59:d0:0c:cc:60:01:d0:
d3:e1:de:97:ef:7d:56:ca:8c:bd:fc:83:08:88:1b:
01:97:cd:6e:c3:cf:26:64:f6:ca:79:4a:2a:8c:c6:
96:1a:7d:bd:34:2a:ba:6d:d5:e5:8a:7d:13:69:18:
34:7c:b6:eb:8e:8a:d5:6c:12:7b:ce:d6:84:cd:40:
8e:19:38:9d:1c:6b:57:7d:74:d9:e8:aa:bf:83:43:
ac:e2:05:80:f2:ff:ab:1f:ed:f4:86:cf:1d:ed:e5:
76:b0:e1:74:0e:2d:cb:1d:7c:15:cb:0d:81:91:df:
1f:bb:2c:1f:1b:4a:73:fa:f5:63:6b:c7:1f:c4:10:
d2:04:7c:ae:be:4c:02:5d:a0:2d:d1:e0:dd:08:fc:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FE:F1:63:AC:79:19:51:51:37:A9:1F:FD:97:A6:D9:14:5E:28:3A
X509v3 Authority Key Identifier:
keyid:D4:9A:09:80:4F:4A:97:1D:A8:60:20:FE:C3:1B:77:B6:CE:78:5A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1JoJgE9Klx2oYCD-wxt3ts54WlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:72:cd:45:da:a5:31:b4:ac:4c:b2:4e:cc:68:67:62:b5:11:
08:d2:26:bf:d6:78:76:1b:1c:32:f7:6e:a1:e6:e5:e7:d0:17:
68:ed:7b:0e:c5:09:7b:f5:91:4c:3b:d7:04:51:ba:af:39:e3:
f5:49:e3:5a:9b:47:a7:35:df:43:2f:80:04:ce:90:8d:02:3b:
73:3f:9c:22:59:00:8d:2f:64:02:46:bf:f3:cb:1b:98:63:4c:
17:44:ec:8f:6f:ce:b2:8d:3a:29:5e:f9:05:6d:7f:b0:5a:3b:
96:03:ba:2f:89:ed:8b:7a:24:40:5c:3a:94:11:99:8b:87:22:
76:d2:bd:dc:c3:6b:82:8a:38:f5:8c:99:84:d3:5e:b0:00:06:
bf:f6:e4:3b:39:6c:55:c4:f2:b5:b9:de:f2:06:eb:19:01:a0:
11:12:15:09:c4:90:8c:7e:98:4b:59:0e:5f:0a:bc:fd:d7:4a:
0a:62:18:6b:de:0a:fd:a8:b0:48:09:0a:b2:8f:55:2d:a2:d0:
b6:34:70:49:8d:41:ee:bd:f7:83:c3:66:44:bf:02:d8:b4:61:
91:eb:2d:13:80:c7:71:55:b2:8c:eb:49:47:f4:df:a4:85:31:
a1:bd:b5:bd:d5:1d:a0:09:72:d1:3f:af:45:32:7a:7d:a6:c7:
90:c7:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:22 2026 by rpki-client