Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File: 9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier: BE4zgDgBhKXdKlU63yarHtW/5sQ4SNg19mTkVkjuZ30=
Subject key identifier: D8:E3:C6:45:A0:BA:38:40:C5:44:19:92:F9:82:A8:6A:9B:8F:1D:30
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 01A0F37A720F349707DF935F44170C49A64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number: 1AA3
Signing time: Wed 30 Sep 2026 18:01:23 +0000
Manifest this update: Wed 30 Sep 2026 18:01:23 +0000
Manifest next update: Thu 01 Oct 2026 18:01:23 +0000
Files and hashes: 1: 8fe7vh9jlC7sRb2AcledmmwLoTI.roa (hash: XpslvQuy8ogh+8d35d9QaAhjHcrSzIzGG1EtFja7tAo=)
2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: ZPnEtqfLZIJBd9m8dIDiGNyktPQ34aG6cnfnFvS7o78=)
3: MNQFqrdvbEoxedHfrXynKifNGnY.roa (hash: O31r8g9C5kBDn8OSezJHwFB/Y59lZjW3Z0fIfncmogI=)
4: VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa (hash: VhBI1T/5AecSPfuyckIzymKWt28IdtuZyGt1Fke7X9o=)
5: caVc06HNLW27H40D2ZS_Rm7EWak.roa (hash: fii3aeyQKBbFgN7LjEGw9LVQBRaholnm8HqVAqTYdaM=)
6: uKVnkxpc55UHCp4G3gmfBYK9lgA.roa (hash: Yl+4aX3AL4iwnArD6mGCgp0IBTVDchipN4aGOMzOCE4=)
7: xqtPQpmSw8BM5RyqcwITHIfXLSc.roa (hash: hGp4Jg8lf+rbg8QFIZWOCXC5lP9F5Y5cQtGXi8sQzqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 16:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:7a:72:0f:34:97:07:df:93:5f:44:17:0c:49:a6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Sep 30 18:01:23 2026 GMT
Not After : Oct 1 18:01:23 2026 GMT
Subject: CN=d8e3c645a0ba3840c5441992f982a86a9b8f1d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:cb:18:fc:3f:1e:b0:26:d0:ff:89:e9:a0:
51:ff:f6:b1:5c:d5:60:98:e6:ab:76:06:6f:2a:61:
2d:8f:ef:7c:ce:66:d3:42:0b:e6:f1:05:b9:c8:c1:
2a:9f:2e:9b:6c:f1:f9:87:d1:98:0a:f1:27:06:00:
11:30:91:90:0d:d9:a9:46:0d:7e:67:0e:15:69:5d:
e6:47:f1:c4:95:cd:62:f6:5e:4f:a7:c4:2b:38:17:
50:40:71:9f:b5:8e:b9:39:b2:f1:22:e3:9c:58:27:
75:32:16:63:a2:23:b5:49:96:1c:29:b3:55:55:e3:
65:b2:f4:a1:54:dc:60:b5:3e:bf:1d:05:8d:44:15:
1b:45:93:62:9e:1e:4c:0a:84:ee:64:7b:c6:f0:d1:
1d:cb:74:10:a5:96:a2:d5:05:a5:1f:2e:eb:c9:59:
a9:1e:c3:cd:5e:e4:0d:75:2c:c7:73:c6:45:34:d5:
89:55:c0:1c:bb:a1:d5:59:97:fd:a7:15:fd:94:cb:
38:23:ef:ae:c6:b0:18:83:63:66:bf:8e:13:d1:27:
1f:df:62:7e:42:12:91:cb:ec:75:8e:24:60:eb:91:
01:f9:d2:d9:50:72:98:a3:07:53:46:13:ae:b0:8e:
a8:ca:38:50:51:d3:f7:30:3e:5d:a8:53:0a:b1:f4:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E3:C6:45:A0:BA:38:40:C5:44:19:92:F9:82:A8:6A:9B:8F:1D:30
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d1:60:46:32:36:73:9b:f1:e6:9e:2a:73:62:f4:db:86:24:
ac:df:0d:9b:b7:4d:f9:4f:9b:01:60:25:9e:3a:ad:10:3c:31:
4e:0b:a1:41:0e:98:ab:7c:45:85:89:2d:0f:a3:7a:38:3b:58:
08:d6:66:b6:1d:c2:eb:84:a2:0e:aa:93:e3:d1:18:41:e0:bc:
92:58:83:6d:9e:7e:87:53:e8:99:90:e2:d2:57:a8:7f:1d:3e:
98:a1:fd:3b:e1:15:a5:1f:15:30:b0:48:b4:47:50:60:69:1b:
77:85:24:bf:2e:98:24:4b:75:eb:55:e0:c8:69:df:c1:42:22:
0c:10:5c:03:ec:2a:af:65:d0:e4:52:73:f8:f4:79:70:95:27:
79:73:6b:95:88:16:d6:89:aa:c7:bd:75:3f:a3:99:88:20:7f:
5c:dd:76:eb:ee:21:9c:8a:b6:cc:1f:e2:5d:d3:54:84:28:af:
27:be:5c:e1:19:49:cc:43:b8:77:da:41:41:5a:b2:58:60:37:
22:f3:a9:4b:79:85:0d:f3:6a:ab:3e:95:d1:10:ca:5f:c6:9b:
3f:68:1a:29:bd:d1:62:9b:2a:f0:af:dd:7b:73:9a:9d:b1:a9:
3e:19:3e:b4:65:63:ff:c8:4b:bc:d7:32:02:d7:0f:84:ef:47:
6d:fa:64:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:37:39 2026 by rpki-client