Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier: iWYLP07lXkJ0de9NyhjtOK7MCeL4NAOZ8OOwLPcmZsY=
Subject key identifier: 4C:E1:70:07:86:07:8F:47:4F:91:E4:6D:CB:F1:30:8C:D7:AD:7E:20
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 01A17F2B02CE06DE221F591EAD71C1FF5B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number: 1AF5
Signing time: Tue 27 Oct 2026 21:01:27 +0000
Manifest this update: Tue 27 Oct 2026 21:01:27 +0000
Manifest next update: Wed 28 Oct 2026 21:01:27 +0000
Files and hashes: 1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: R2b9sJc+DpNabiB6TKlsPaKpTmLYrirk0B5Uss4/IFY=)
2: C3Hj7ROPeIpwRmBzpRFfxI_qvb0.roa (hash: vveg8RifsnaImkmfopb5PhQkcmujHs/iYhIU7WeY+b0=)
3: DQYQuqb5lo3rENoxL1OM36btAFY.roa (hash: GJffNh03uAAbZAp2M7lKSq3tULSYELpe18P3FMf+yB0=)
4: P-rRYVXCTixpE8G0uFs42zL11uM.roa (hash: gGvo9uFElsBmxmc2f57ugvUF8fRFbGjjhlaZ3XTHPxM=)
5: TZb0pwqKAULgiO7MxUXFvu2eCDY.roa (hash: xx3QLAhALsGor/waOfuSlLQuXwnX4zFtt11tExzIAAg=)
6: pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa (hash: fiAhIReHkKJDspHClaY6l1S5vNnjpZ4eQPqh1G/RGnQ=)
7: qhW018nLYKkbveq_JNyETo7B_Ow.roa (hash: 03M+6gjp2KbZhQBCv2SYcsFpAN+DiQPSPmjd2q66jUU=)
8: rxWTpB1cBDAasdpeCd_eBF1w0wk.roa (hash: aF9Mb+BB8Tjqy6FAH1rJtXHNbhARNFUNI1crgBVxf6Y=)
9: ys3yCdHJ9a3MjZY25yxTfQSZph0.roa (hash: KFDraXJKQVMV1BXHcMi/qwrvrU0UgboWj1cSJoeNNfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2b:02:ce:06:de:22:1f:59:1e:ad:71:c1:ff:5b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Oct 27 21:01:27 2026 GMT
Not After : Oct 28 21:01:27 2026 GMT
Subject: CN=4ce1700786078f474f91e46dcbf1308cd7ad7e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:ac:8f:a9:34:7c:fb:13:c7:1d:3d:16:cd:
bf:2c:da:8b:44:aa:d3:ca:1b:23:0c:8f:bf:84:ed:
f0:5c:e8:2e:b8:b6:4c:81:a1:72:6f:91:cb:17:8a:
f1:86:bb:94:16:09:9b:22:03:5c:b5:08:ce:47:0f:
3d:24:25:cf:16:0a:67:7d:46:5e:54:fb:ca:ac:77:
c5:4f:fa:4a:cb:12:44:6b:1d:d0:4c:ff:ff:67:ab:
93:a5:6f:92:ab:73:bb:40:69:b9:6b:08:2c:09:9e:
60:99:c0:33:59:8f:74:06:bb:bc:c6:21:f9:b3:30:
7d:ad:a2:ac:f3:56:05:41:02:ce:43:21:83:e8:e9:
1f:20:0f:c8:e6:bd:f2:f7:ac:02:14:21:75:29:4f:
ed:c6:c2:bd:32:fb:c8:83:fa:68:07:87:48:80:c7:
34:3b:9f:1a:96:cd:6e:66:66:d9:9e:41:22:a2:9f:
a3:21:aa:82:8c:f6:a2:54:5f:8a:52:c9:88:d9:4d:
49:8e:d5:5b:2e:fe:e6:5d:af:2d:9c:9b:c4:04:3c:
5d:a2:0c:43:a8:0b:0d:18:b7:7e:ba:39:d6:7a:1a:
1c:93:9b:87:10:3b:11:32:1a:cb:e9:c7:85:08:a4:
f5:7a:6f:da:0e:06:13:be:3e:9e:77:f2:dc:8d:41:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E1:70:07:86:07:8F:47:4F:91:E4:6D:CB:F1:30:8C:D7:AD:7E:20
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fd:9f:9c:f8:66:67:6d:bc:ba:79:eb:d9:92:b2:cf:ab:00:
ec:fe:b5:cf:60:38:68:93:5b:cb:ba:51:2c:82:ee:80:87:2c:
57:f7:ef:4a:aa:45:6c:08:a6:47:5f:30:95:ff:78:72:d9:ec:
6b:fb:f6:c5:95:94:55:45:06:e5:e2:c4:8b:2c:1a:60:92:06:
b6:da:f1:ae:34:60:31:73:8b:87:80:c3:26:ee:a0:28:3c:a0:
9e:af:41:7c:58:93:a0:9b:ef:35:b1:e0:1e:cd:8e:e0:f6:d7:
9a:1d:a7:6e:20:03:c9:9e:a9:e3:c2:96:db:d3:e3:22:f0:41:
49:db:bc:cc:29:a0:75:52:59:7b:31:be:5b:ec:24:60:1b:58:
90:6c:c6:0e:b3:4f:b5:b4:f0:d9:50:8b:45:c5:62:5a:39:01:
2a:7b:89:e4:ab:13:de:c1:25:f3:67:eb:50:f2:c4:8f:9d:4c:
6f:6f:a2:7e:dc:d5:67:2c:da:72:b8:72:14:91:b8:ab:fa:1c:
1e:81:a7:4e:18:e0:e2:59:68:e2:4e:5e:76:69:79:12:50:f9:
ef:40:de:19:75:6d:30:33:d1:e1:f9:9a:ad:b4:da:2a:48:8e:
41:04:64:8d:4a:e0:a6:58:18:4f:76:3e:42:e6:61:b6:21:74:
41:4d:79:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:46:09 2026 by rpki-client