Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: jC842GHWVSHZqiPOlgCp+sr0Q5dNytPigWU8nEgMOYE=
Subject key identifier: 48:A7:F6:C9:FD:6E:C5:85:C5:8D:E1:63:41:38:64:D0:5B:EC:7F:87
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 01A06EDEAD5BC54F79DB6A68D05D9BE9A863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0F0A
Signing time: Sat 05 Sep 2026 00:01:22 +0000
Manifest this update: Sat 05 Sep 2026 00:01:22 +0000
Manifest next update: Sun 06 Sep 2026 00:01:22 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: TjZTDLKRLu7KhN7MzEnmNklqYsEUgZ2GIF3mGL+Fz3Q=)
2: xhDUoIsJaJCqOA6VTkyeMee_Z9s.roa (hash: bDCv1HCZJO4EbMKAw0lf46zS80bqNn1qKkmrw6hFSH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:ad:5b:c5:4f:79:db:6a:68:d0:5d:9b:e9:a8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Sep 5 00:01:22 2026 GMT
Not After : Sep 6 00:01:22 2026 GMT
Subject: CN=48a7f6c9fd6ec585c58de163413864d05bec7f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:a1:b6:8d:bd:c6:af:60:63:28:56:ef:95:
6e:2e:cc:93:49:b5:c1:bd:c3:e8:df:59:63:d6:18:
cc:04:65:9f:37:6f:f9:46:62:ae:b2:9c:d0:68:5b:
82:57:ee:46:1a:23:4c:60:02:7a:ff:7a:5f:08:e4:
70:e5:7e:8c:3b:0e:c0:ea:ec:e0:54:45:95:1c:f1:
fb:d0:36:3a:c8:6c:66:fe:a2:cd:29:12:3a:68:67:
1a:3b:21:29:f9:af:12:e9:9e:a9:3f:97:89:03:50:
fa:2e:ff:22:87:48:16:ab:6b:bc:e8:ba:10:40:46:
51:3a:c0:66:96:ee:16:0d:c5:57:51:9b:e2:20:c5:
38:cf:41:d4:d2:2c:79:84:27:54:c0:d1:d5:45:fb:
0c:7a:59:7a:95:ca:ac:2e:ae:42:9a:4d:e4:d1:c2:
74:d2:2e:27:07:04:7f:d4:ee:01:76:64:a8:22:dd:
73:e0:7a:93:4d:da:8a:f0:66:1f:77:4f:81:ac:0e:
fe:41:49:13:fa:fd:79:f9:9f:9d:67:ee:da:59:8a:
43:19:1a:d1:79:9a:40:a5:14:1e:97:95:a8:d0:3c:
40:04:7a:31:5d:f8:d3:1b:3d:e0:c2:12:0b:0f:b1:
e8:c5:64:0f:ad:7e:97:2f:9e:97:9d:2f:20:0e:2a:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A7:F6:C9:FD:6E:C5:85:C5:8D:E1:63:41:38:64:D0:5B:EC:7F:87
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7f:7e:61:dc:14:9f:bd:d1:5f:05:0c:4c:f3:58:ec:a3:29:
98:54:15:3d:af:ff:ee:da:45:21:cc:0e:48:7f:24:11:3b:46:
8d:d1:f9:f6:83:43:a5:52:cd:62:50:0b:ba:d7:e2:43:38:ee:
cd:9d:7e:92:c3:17:fb:a4:0c:94:cb:d1:1b:0d:00:dc:f6:ca:
fd:78:8d:b6:32:2d:c3:1f:69:39:8f:0a:f3:3c:5d:71:74:57:
db:6b:36:7b:ff:44:bc:59:a4:f5:5c:b4:06:d3:6b:78:28:e3:
8c:d8:e4:9d:7e:02:1d:b9:46:ba:f6:d1:cf:19:51:6b:5b:db:
81:e7:70:d3:92:14:69:77:44:bc:52:1d:65:ef:8c:a5:0e:34:
d4:74:c7:30:8a:e7:1b:77:e4:2d:ca:d4:13:05:a7:ba:70:84:
19:7c:fb:ad:2c:04:0b:25:96:85:c5:f8:a6:ca:b5:e3:d7:0f:
78:6f:0a:7e:dc:a3:60:ee:0c:d9:8f:3d:9c:62:85:40:87:b1:
bd:90:81:76:db:88:cc:de:1f:7a:51:eb:e5:03:d3:08:bf:77:
4c:49:0e:9b:fb:cf:61:32:72:2b:65:f8:93:33:12:04:1d:9e:
a7:54:b0:62:66:33:3a:49:26:0d:ce:16:b6:eb:ae:e3:99:bd:
1e:39:c5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:36:34 2026 by rpki-client