
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
File: 9NavTeibuoEYlTzO6_s59FqO0bw.mft (raw, json)
Hash identifier: 5ESC57RODW1Obi7XKAZZQT1i/HXK7N4QzwEBv5cEC+k=
Subject key identifier: B5:24:24:17:72:EA:EF:D2:2A:EB:20:66:D5:8A:AF:6F:59:F5:3D:12
Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
Certificate issuer: /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Certificate serial: 01A13F39461BED440A8D2AD65D8014B5F98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 11:01:20 +0000
Manifest this update: Thu 15 Oct 2026 11:01:20 +0000
Manifest next update: Fri 16 Oct 2026 11:01:20 +0000
Files and hashes: 1: 9NavTeibuoEYlTzO6_s59FqO0bw.crl (hash: tGOs4dEeRbpb+JNcujOtwVfLDLqR05nV0VowJNyFZpU=)
2: PTGVKq0rtp-W0LQXrCMcfxye3TY.roa (hash: CHD9DCCggVJLAY5cygmu9cgDCvnD2GXCe9SYsLHbrlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:46:1b:ed:44:0a:8d:2a:d6:5d:80:14:b5:f9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Validity
Not Before: Oct 15 11:01:20 2026 GMT
Not After : Oct 16 11:01:20 2026 GMT
Subject: CN=b524241772eaefd22aeb2066d58aaf6f59f53d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:78:1b:82:1b:9f:46:4d:ae:4b:de:bf:dd:
0a:05:db:1b:f4:f4:c7:16:a9:ba:19:75:a4:4d:92:
8a:bb:37:cb:5c:d0:27:59:d3:39:0d:6e:b1:31:3c:
9d:06:ae:d2:ad:8f:19:7b:73:dc:d7:c3:d0:c9:bb:
e8:37:59:82:8d:b9:49:db:20:e6:f5:3c:50:24:18:
6b:00:4e:7b:b3:8e:46:a3:3d:4e:12:aa:b9:d7:47:
c3:28:f0:c9:6b:34:6b:68:03:19:94:2d:7d:65:f2:
80:c5:66:04:2a:16:ca:ba:0d:27:e9:a7:21:3f:bb:
ab:a2:d9:da:0b:f5:b2:1d:12:77:1f:0e:b4:16:02:
77:4d:13:95:da:00:78:b1:cd:7c:52:27:b6:2a:fe:
97:3a:88:c9:12:a4:b2:d4:de:f2:80:a6:6e:2f:c5:
d4:84:08:4e:38:b7:23:ac:2c:aa:8a:91:a5:6f:64:
ce:3c:8f:3e:3f:f4:27:98:d1:ed:bb:e6:e0:47:b9:
61:9f:ec:06:81:ed:a9:bf:7f:58:2f:f4:b6:99:93:
01:7e:41:58:90:60:0c:12:1e:34:eb:bf:42:68:b1:
c2:59:a2:ac:3b:7c:62:89:14:68:03:9e:40:89:b3:
0c:f8:70:9f:55:5c:7b:26:a5:4d:fb:8e:81:41:8a:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:24:24:17:72:EA:EF:D2:2A:EB:20:66:D5:8A:AF:6F:59:F5:3D:12
X509v3 Authority Key Identifier:
keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f3:52:f5:74:bb:48:c6:69:d9:93:77:6f:cc:70:25:c2:04:
55:ca:bd:80:37:17:9a:15:1f:db:58:aa:1c:96:ef:44:31:30:
d4:85:10:5f:15:04:a3:88:5c:b2:d7:8f:a4:c4:df:7c:23:b4:
d6:ff:30:f3:b2:6f:41:34:61:a7:c3:65:87:3f:e9:6d:6b:b3:
09:69:2e:ef:3c:88:b1:df:fb:b3:5b:6e:a0:2d:e9:da:0e:5b:
22:95:73:95:27:ee:49:f1:fd:ca:11:1e:7a:de:e5:4d:d6:0d:
bc:5b:1a:4f:4f:5f:59:a9:70:50:93:6b:ce:1c:45:af:24:d2:
64:7b:7f:1f:68:eb:a6:ce:6b:27:76:18:2f:d9:87:1b:83:8c:
39:74:43:2e:02:e2:e5:b4:9e:76:59:7a:b3:0e:2a:5f:83:8b:
01:1a:42:48:9c:2d:e9:a7:29:15:93:94:15:52:8d:1f:59:2f:
f8:ed:b6:36:fd:57:12:80:8e:f8:b2:15:6d:34:57:11:ed:42:
d3:ce:98:1a:1e:a7:fc:e4:90:d0:89:02:df:e8:6b:c2:bf:bc:
c9:22:cf:f6:89:d2:9f:9e:ab:6f:72:66:03:50:14:73:cb:f0:
17:6a:5b:b1:6d:65:69:b1:0c:42:b0:68:03:bd:7f:27:05:77:
c6:98:de:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:28 2026 by rpki-client