Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: E4J1HC7NmXlpU4xDradak8PVsvpqQaZjQvbW9bf9crw=
Subject key identifier: B8:AF:65:FE:1A:27:F6:C5:D3:1F:86:C9:6F:5E:CF:94:73:6E:84:68
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 01A17F2AFDB1B2CA09DCFB7C381DFA8219BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0F97
Signing time: Tue 27 Oct 2026 21:01:26 +0000
Manifest this update: Tue 27 Oct 2026 21:01:26 +0000
Manifest next update: Wed 28 Oct 2026 21:01:26 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: Nm9vwLiHejvR9BLol/bI3j18HxtjGE07IHgiyYzkk+c=)
2: xhDUoIsJaJCqOA6VTkyeMee_Z9s.roa (hash: bDCv1HCZJO4EbMKAw0lf46zS80bqNn1qKkmrw6hFSH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:fd:b1:b2:ca:09:dc:fb:7c:38:1d:fa:82:19:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Oct 27 21:01:26 2026 GMT
Not After : Oct 28 21:01:26 2026 GMT
Subject: CN=b8af65fe1a27f6c5d31f86c96f5ecf94736e8468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:cb:df:15:99:8f:bd:15:14:77:6c:3a:de:
23:b3:a5:a4:6f:00:6d:0e:cd:68:65:f1:35:3f:82:
20:1d:72:9e:07:62:e1:9e:92:19:59:e0:e0:b8:a2:
43:c3:46:7a:6b:ae:bd:81:b9:ba:de:38:23:33:3b:
0f:3f:d9:90:ac:4c:27:5f:44:ce:7a:1d:af:a9:70:
9b:32:19:ee:bd:c7:19:22:c2:34:24:52:88:f4:ac:
43:00:82:7c:8d:0c:04:08:13:0f:5f:58:8c:5d:14:
33:b3:3a:a7:7d:45:75:ef:de:48:6a:73:c8:ca:cf:
d9:61:1c:ef:9f:11:70:60:68:d0:93:e2:8f:85:15:
b6:14:a9:c6:c8:34:91:77:79:6b:55:d0:d8:ac:8c:
cd:6a:58:8b:3f:a9:65:7c:b1:fe:0d:51:5d:b0:0b:
3c:75:75:95:ef:5c:79:e2:1f:a9:45:1b:58:40:2e:
1a:a4:6c:a0:4c:2a:b3:1e:6a:dd:4b:83:d2:b6:65:
8c:6e:3d:06:c7:47:c6:93:da:4a:9a:f8:30:4f:1c:
cf:b1:ad:a3:84:76:fe:81:4a:16:70:ef:2d:eb:3e:
d2:35:23:f5:4b:67:ef:f2:5b:b6:ef:70:24:0a:6e:
ac:cf:97:73:08:a0:58:f0:7f:fd:3d:14:8c:4d:44:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AF:65:FE:1A:27:F6:C5:D3:1F:86:C9:6F:5E:CF:94:73:6E:84:68
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:26:e5:d8:2a:c8:61:c1:e0:66:f6:b6:67:4a:e4:4d:78:7c:
32:f4:4d:18:b3:ce:04:1f:be:53:87:b0:a5:16:b7:db:94:60:
b0:88:8c:66:f0:87:9e:4c:08:08:dd:42:3c:c0:9d:1b:25:0c:
b5:75:d4:43:2b:cf:ef:d6:86:e7:8d:3d:bd:cb:d5:1a:bb:3e:
79:62:29:78:53:27:18:dc:ba:38:c1:04:48:44:b1:03:44:f9:
97:f3:4b:23:fa:b4:09:f4:6a:da:3b:18:2e:4c:08:21:42:62:
30:37:bf:0a:41:7c:a3:c2:01:0e:3d:f9:04:24:df:81:15:01:
f9:20:65:60:5c:2f:a4:5e:66:89:6c:ea:7c:77:4d:8b:9e:a1:
3d:49:c7:da:9b:7f:24:b3:0c:47:ed:8a:1d:98:8b:71:e2:f7:
c0:4c:89:d8:4b:8c:b2:a3:d1:12:a0:30:fc:27:c4:3e:fd:ea:
9f:61:9c:e9:7a:09:b5:12:41:9d:1b:4d:2a:74:65:9e:1f:9a:
c1:1c:f8:b6:10:bb:53:8b:15:eb:77:d7:fa:fa:43:59:3d:7d:
43:2e:a2:c5:2e:a4:f1:bf:5a:8e:d6:77:ed:47:0d:7c:05:5d:
5b:9f:7b:1a:25:15:26:f2:e9:c8:b1:aa:d3:b0:40:6a:8c:23:
50:e5:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:15:42 2026 by rpki-client