Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
File: 9RMq2BqEohEhxQRHsgidzl5LI4o.mft (raw, json)
Hash identifier: VQgYa5x0Sx2uCSVXF0zEMV4c5ZPGq4kWbH2c8cPR+Vk=
Subject key identifier: F5:94:74:71:70:47:50:F3:8D:E8:FE:AD:E4:6C:94:51:70:C6:58:6E
Authority key identifier: F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
Certificate issuer: /CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Certificate serial: 01A02055FA31887B99F90071E83B1118FA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
Manifest number: 0157
Signing time: Thu 20 Aug 2026 18:01:40 +0000
Manifest this update: Thu 20 Aug 2026 18:01:40 +0000
Manifest next update: Fri 21 Aug 2026 18:01:40 +0000
Files and hashes: 1: 810BVakNXZc-eZCkm84wPbkx0zw.roa (hash: 4W7QJcIB5zQfI2eP/65KAZgZifjdrkX8vzWfoESNuGg=)
2: 9RMq2BqEohEhxQRHsgidzl5LI4o.crl (hash: J4FdRo22mmwQwg8PVvCaX3axVY5XjEvzIR2ImfdcwiM=)
3: T7Q4ZInr7nmTwTSXGOP2lYQS6SE.roa (hash: Y1/e/IgPvhokjR0rrttCkxlf/wWiyXtQnZX5Qj+ssXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:fa:31:88:7b:99:f9:00:71:e8:3b:11:18:fa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Validity
Not Before: Aug 20 18:01:40 2026 GMT
Not After : Aug 21 18:01:40 2026 GMT
Subject: CN=f5947471704750f38de8feade46c945170c6586e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:fb:a0:79:85:78:fe:29:23:41:7d:1c:88:
12:28:f9:df:ab:9b:37:91:07:6b:18:4b:ba:0c:8e:
55:e1:3e:9e:ac:a4:c9:9c:3f:74:ae:87:7d:39:95:
44:89:ea:a5:10:35:5e:fd:ae:1f:db:22:d0:99:5a:
81:f3:0e:ec:97:f0:f6:eb:40:db:03:3e:84:35:ce:
8f:c9:b6:f2:a4:64:58:de:fb:37:bc:63:8e:b4:64:
86:5e:4b:23:72:5a:a7:14:25:2f:09:eb:ed:89:99:
20:51:67:29:87:3e:f9:1c:4d:4d:8b:ac:7e:57:85:
92:e4:4d:d5:39:1b:2b:26:60:97:e5:7b:81:cd:47:
48:c5:1a:69:f2:df:1b:4f:cd:20:18:99:ca:2f:1e:
39:f4:5b:7e:7a:f7:4e:2f:51:2a:9b:9b:30:d2:e6:
31:e2:ba:a4:65:65:3b:9a:1c:17:f8:8d:3f:f8:2f:
42:1e:c3:51:ed:f5:38:fd:a5:52:37:28:6c:19:52:
3c:1f:a0:69:ed:0f:88:77:a6:a3:ba:62:a3:0d:b1:
e0:cb:80:a3:5e:54:47:71:8f:8a:1d:6f:41:28:df:
b5:8b:e0:f8:10:d6:96:61:82:a5:77:6c:18:86:e6:
ef:40:c1:81:c3:f7:88:f8:71:01:13:1a:74:ba:04:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:94:74:71:70:47:50:F3:8D:E8:FE:AD:E4:6C:94:51:70:C6:58:6E
X509v3 Authority Key Identifier:
keyid:F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:26:96:c6:65:96:1d:8e:9e:a1:36:da:6a:60:1d:6c:9d:00:
57:78:7d:3e:62:5c:2b:41:79:45:aa:c0:ff:31:2f:ec:03:7d:
5f:b3:37:93:09:c2:1a:3f:1e:c7:6c:41:c0:1f:1e:fd:25:e3:
3d:a6:ad:ed:8f:49:08:df:94:68:51:31:6e:ef:75:24:6d:a8:
d7:3e:e5:89:fa:77:cf:77:9a:ab:37:5c:d9:a6:8a:13:5e:06:
dc:f2:31:2b:1e:78:b2:aa:3b:4f:64:ad:18:8e:26:8d:67:5b:
7e:47:7a:70:36:57:07:cb:78:ea:57:a8:dc:4b:12:26:f1:3a:
62:8e:e5:47:72:d5:00:c7:6c:f3:27:e9:69:2e:ff:1b:38:59:
62:92:ca:88:f9:f1:14:47:59:8b:83:ba:cf:ad:a6:40:af:b3:
6b:f4:c7:e0:2a:99:16:ed:67:9d:29:20:9f:b0:66:a1:98:cb:
57:65:a3:b4:66:01:92:80:96:87:f0:e4:97:73:5d:67:e7:29:
46:0e:70:5f:03:f5:b7:3a:5d:5c:67:53:c3:1a:98:8a:7d:df:
18:71:c2:88:d5:a9:e1:7f:4b:db:e5:be:14:f2:12:42:89:22:
e2:47:61:ea:b2:c6:13:fb:40:cb:26:0f:9a:7c:a8:5d:e6:fa:
97:3f:1c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:25:38 2026 by rpki-client