Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: KDLmEMYWikdcyULVQ3sY/kBcZXvNQXkAqr86oG8LD4w=
Subject key identifier: DB:BA:B7:0D:38:48:FC:0D:66:72:23:67:A6:F7:C2:D6:47:9D:07:66
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 01A17A3A9DA95A9A6F2149CA483A0B67657A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1AC4
Signing time: Mon 26 Oct 2026 22:00:24 +0000
Manifest this update: Mon 26 Oct 2026 22:00:24 +0000
Manifest next update: Tue 27 Oct 2026 22:00:24 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: o7FWQI/kE+Hw2p+j6xF+mj2nDmSEjrSNQgLtB21kcz4=)
2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:9d:a9:5a:9a:6f:21:49:ca:48:3a:0b:67:65:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Oct 26 22:00:24 2026 GMT
Not After : Oct 27 22:00:24 2026 GMT
Subject: CN=dbbab70d3848fc0d66722367a6f7c2d6479d0766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a2:71:6d:8c:6f:eb:de:10:58:58:1b:40:1a:
bd:7a:62:56:ff:b1:7f:9d:92:75:1f:18:e7:69:db:
9f:b7:02:a8:d6:b5:57:73:e3:0e:08:44:06:b1:70:
33:b5:f6:b8:0f:08:96:dc:63:d7:e2:fe:af:07:ff:
67:b4:b2:0d:6c:cb:da:ed:dd:90:9c:d9:40:e4:cb:
ce:78:96:40:66:c9:d9:ad:12:75:31:33:c0:40:3d:
73:03:bd:ab:e0:3d:f5:f4:8e:b4:c6:33:c9:a7:77:
48:67:3b:b0:bd:71:af:b3:3a:e8:b0:ec:28:51:dd:
8d:70:5a:16:f8:3c:bb:4a:5b:55:cb:03:d9:f0:66:
1b:67:c3:d7:d9:f9:26:2a:4e:ea:92:af:18:e7:30:
15:74:28:9f:ae:e6:62:51:e1:f5:36:5e:eb:ed:78:
f6:ea:25:86:c3:f0:a3:15:8e:f1:8f:c3:bf:2c:41:
cd:3c:a4:9c:27:67:a4:42:63:95:7d:09:64:1a:13:
37:ae:88:f3:23:b4:d2:7b:a1:91:82:3b:9d:02:3a:
69:b1:b6:70:15:00:62:7b:84:e6:e2:3b:f3:37:c4:
36:ac:41:12:a5:8d:c7:2e:40:63:ef:70:53:24:63:
95:c9:c2:b6:0d:6e:d7:69:7e:36:8a:25:64:4f:4a:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BA:B7:0D:38:48:FC:0D:66:72:23:67:A6:F7:C2:D6:47:9D:07:66
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2c:1b:1e:42:b9:0c:2f:c1:95:b0:65:1c:24:d6:3a:28:e9:
68:c5:58:92:7e:4d:78:b4:ba:e5:b7:a7:fd:67:73:09:35:64:
25:3d:66:0d:e7:36:f8:18:64:d5:2f:93:86:5d:98:ac:d9:0f:
9a:74:d9:36:f3:ed:70:5d:f5:d6:51:ac:18:1a:ab:2a:03:7b:
77:72:80:77:f5:93:d2:0e:1a:81:3a:09:97:fc:d6:1c:dd:0d:
15:34:4a:9b:2a:47:09:68:4e:20:ce:8f:5a:b3:d8:ee:7b:f7:
b6:70:c3:0b:38:19:26:1e:15:64:1d:3b:68:41:9c:28:95:05:
fd:0f:25:f9:f9:9c:df:24:4d:e2:90:7b:9d:86:15:3a:f2:67:
79:c6:24:c5:56:53:a4:a9:83:f6:6a:24:28:cb:05:6e:4c:f2:
0e:0b:04:60:b3:aa:98:65:28:9d:7b:82:b0:35:10:b8:47:a2:
3f:6d:78:aa:a0:26:4a:7b:36:51:2d:e4:67:f3:66:17:bb:42:
3f:9f:87:f0:b9:0e:5d:02:65:de:79:49:e2:29:b2:f8:b0:b4:
d9:19:2f:90:ea:c6:5f:85:36:b5:ef:c7:bf:d6:73:0c:49:f9:
70:ae:14:b2:03:26:cf:9d:e8:1d:2a:63:24:51:d8:20:31:18:
dd:85:b5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:52:07 2026 by rpki-client