Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
File: 9RMq2BqEohEhxQRHsgidzl5LI4o.mft (raw, json)
Hash identifier: pK6+EmVWbBZu4wUseSiDg1GhH8/8muiKp1WY5Ge6ra0=
Subject key identifier: 42:59:5F:AE:71:E8:69:55:77:6B:23:D8:A0:A6:1B:EF:CB:D5:47:9D
Authority key identifier: F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
Certificate issuer: /CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Certificate serial: 01A130A17D6B66CFCA72F7E7CEEC1F818665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
Manifest number: 01E4
Signing time: Mon 12 Oct 2026 15:00:52 +0000
Manifest this update: Mon 12 Oct 2026 15:00:52 +0000
Manifest next update: Tue 13 Oct 2026 15:00:52 +0000
Files and hashes: 1: 810BVakNXZc-eZCkm84wPbkx0zw.roa (hash: 4W7QJcIB5zQfI2eP/65KAZgZifjdrkX8vzWfoESNuGg=)
2: 9RMq2BqEohEhxQRHsgidzl5LI4o.crl (hash: lA5fJHvdM/vMfm3Uob+ETnS9h3LLES937dqKT1Ntj5w=)
3: T7Q4ZInr7nmTwTSXGOP2lYQS6SE.roa (hash: Y1/e/IgPvhokjR0rrttCkxlf/wWiyXtQnZX5Qj+ssXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:7d:6b:66:cf:ca:72:f7:e7:ce:ec:1f:81:86:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Validity
Not Before: Oct 12 15:00:52 2026 GMT
Not After : Oct 13 15:00:52 2026 GMT
Subject: CN=42595fae71e86955776b23d8a0a61befcbd5479d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:93:20:e2:42:1a:22:3e:53:62:5d:f7:79:
41:ec:95:0a:15:76:ee:d1:99:b6:40:b0:b8:ed:93:
5a:49:6b:2a:5a:35:2e:b1:be:41:3f:c9:81:d9:c0:
21:94:e5:07:cf:5c:65:53:05:e9:7e:7e:0d:a7:8b:
93:2f:11:36:56:9f:ef:64:12:d2:0c:e9:bf:ab:f3:
3f:30:5c:fc:24:d0:3b:66:5b:01:65:63:b5:55:b5:
76:7b:57:df:67:ac:6e:04:fc:be:cf:d2:e2:ab:08:
76:d7:68:5e:41:28:2e:fc:10:b3:8c:73:1a:1a:58:
de:9b:6e:d3:59:db:a1:63:b5:17:43:17:a9:18:37:
a1:3b:c2:c2:b7:d1:34:e5:4d:91:39:3b:da:7f:f0:
4a:07:28:86:1c:88:9a:9d:8f:5b:10:9a:5f:cb:4b:
4f:3e:d3:87:f3:27:25:e7:94:e2:18:41:bb:45:fb:
d5:14:31:55:67:7d:45:23:e1:24:ac:70:16:b9:85:
08:78:9e:5a:15:06:1b:be:58:86:55:98:6b:12:38:
05:24:9b:12:10:5a:97:42:81:a3:e0:15:ae:0d:b2:
e4:4d:e8:0e:37:0a:81:fb:ea:40:a0:98:cc:47:6c:
48:e5:23:aa:c9:95:11:33:75:28:aa:c1:28:5b:67:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:59:5F:AE:71:E8:69:55:77:6B:23:D8:A0:A6:1B:EF:CB:D5:47:9D
X509v3 Authority Key Identifier:
keyid:F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8b:62:90:1f:e8:b8:84:b7:d5:b9:ef:46:db:38:8b:88:c8:
05:dd:6b:3d:d0:94:87:7a:fe:b2:db:41:83:ce:62:56:d6:83:
2e:c9:4d:42:1d:d8:b0:09:99:07:05:68:9a:11:b1:c9:c1:e6:
d8:39:32:c0:58:68:ad:97:0c:f6:0b:3f:33:d0:de:03:4c:3a:
db:60:3c:a9:c6:4c:bd:ec:bb:d7:44:2c:19:be:c6:dc:f3:1d:
8f:78:ea:ad:7f:97:17:25:e2:e7:4a:4c:8a:d4:f9:b9:4f:b3:
40:e9:61:a0:e4:d6:a9:f5:87:ea:e7:0d:e8:83:fb:cc:05:88:
ca:46:1e:8d:8d:7f:64:e8:ab:cb:83:39:91:e3:dc:33:ef:47:
53:2b:a7:1b:ca:28:32:70:77:6a:33:90:0a:0f:8e:b9:4f:0d:
1f:8b:ba:51:fb:75:59:1b:36:f2:35:eb:2b:d2:0d:5c:85:1f:
7d:0e:e0:56:6c:1d:df:c3:78:12:a0:55:b9:f6:64:bf:b8:20:
68:4f:0a:55:ce:8d:09:c3:85:c9:2c:33:8b:79:a0:92:e1:d1:
ad:26:61:55:c3:18:cf:96:ee:a4:e7:3c:47:8e:6e:d3:db:ed:
d5:15:2c:4c:42:f8:62:20:ec:1a:58:96:34:6b:da:70:6c:b2:
5c:45:91:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:34:23 2026 by rpki-client