Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
File: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft (raw, json)
Hash identifier: JAblivLtl9ve/+AjB/KlRO6RdYLiJ+W/DOSQI4iTj4g=
Subject key identifier: 60:16:DE:46:97:E7:2C:31:49:94:37:8F:CD:7E:CE:9E:3E:D9:F4:8F
Authority key identifier: F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37
Certificate issuer: /CN=f4b2511fb074f5e1658535ba461e4580dbd84137
Certificate serial: 01A1A6A6C5C0ECEA58FBBF91E5819BFFE01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
Manifest number: 0317
Signing time: Wed 04 Nov 2026 13:01:49 +0000
Manifest this update: Wed 04 Nov 2026 13:01:49 +0000
Manifest next update: Thu 05 Nov 2026 13:01:49 +0000
Files and hashes: 1: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl (hash: iIo6HxHt+Dk2H0b2OY0FSeIM6EBMSrA+ISdRu47bMnM=)
2: w4OPW1w1cwaWMj4uXqpkKkiEaKk.roa (hash: jUe+lcC4F+1K+YbOo4TiwqXw96cjr2eJwGRjPOVvNjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:a6:c5:c0:ec:ea:58:fb:bf:91:e5:81:9b:ff:e0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b2511fb074f5e1658535ba461e4580dbd84137
Validity
Not Before: Nov 4 13:01:49 2026 GMT
Not After : Nov 5 13:01:49 2026 GMT
Subject: CN=6016de4697e72c314994378fcd7ece9e3ed9f48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:e9:f9:0c:5f:40:c6:15:63:bb:18:2b:e9:
4a:d2:07:da:5e:7d:ef:f7:dd:6f:bd:ba:43:e0:0e:
a3:81:26:7a:8d:f6:1e:c5:33:6c:8e:58:f5:ca:e6:
3f:ae:ad:e3:d7:6f:10:6f:65:bf:f1:16:85:73:42:
09:05:ad:18:f1:76:58:63:3a:37:a6:a8:43:7a:0b:
97:3e:8f:62:46:2f:c4:95:51:ba:05:21:6d:6e:ea:
f3:a5:ca:03:ff:20:69:2d:32:bc:81:d9:31:ff:a3:
77:8a:d5:e2:6a:d9:9f:0e:92:e6:64:84:5b:6d:8e:
14:07:5d:7e:04:e4:65:a1:29:ad:47:f6:8b:bb:e3:
52:ee:45:a3:c2:de:73:27:b6:f2:f7:4c:8d:8b:7c:
7b:a5:2b:3f:c2:2f:39:ea:8b:72:61:16:f8:68:87:
0a:0d:ae:58:39:5c:b9:1d:ca:44:bb:e1:13:23:15:
48:87:15:8b:cb:ba:d3:1d:81:cb:38:88:42:69:67:
5f:0f:3c:83:27:5a:c7:3f:d4:0c:d9:89:df:86:77:
0d:80:a8:e6:44:3b:44:b2:bd:31:8f:ed:5e:ef:96:
bf:7c:df:43:5b:15:13:6d:f9:44:cf:39:92:4c:a1:
37:4c:62:ce:72:f1:3d:d8:ef:71:f8:33:94:7a:ad:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:16:DE:46:97:E7:2C:31:49:94:37:8F:CD:7E:CE:9E:3E:D9:F4:8F
X509v3 Authority Key Identifier:
keyid:F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ce:e0:16:eb:61:54:18:be:37:28:ad:12:2e:02:ae:68:35:
86:cd:54:d3:01:ed:e4:56:96:50:cc:cc:be:02:c0:b0:70:d2:
5c:7a:f5:32:63:70:74:09:f9:76:44:ff:20:e7:cb:33:ce:03:
a3:f7:09:29:fb:c9:72:8a:5a:4e:0c:49:6d:84:c6:56:2f:81:
75:9c:07:54:f8:70:83:1f:3c:9d:20:f1:9b:b9:b9:77:08:ac:
0f:c0:9f:b6:24:57:cd:c1:18:47:ec:59:17:ae:b5:f0:57:58:
de:8a:3d:70:26:8a:8d:8b:6d:aa:89:75:11:da:8b:4d:ec:79:
13:7e:65:97:8f:81:b2:b7:a0:f1:d2:1e:74:33:4e:52:d2:89:
97:6a:53:04:1e:37:e2:0f:30:fc:e5:a2:8f:ae:d8:8d:ab:7c:
0a:39:5a:76:c9:d8:fe:26:7d:02:a6:42:cb:87:19:2c:00:b3:
d4:ae:32:33:1d:9c:70:c4:0e:0a:40:1d:b5:72:21:84:45:b1:
17:59:72:b1:02:e4:46:6e:5f:0e:43:ac:0f:3b:3c:9e:8a:e8:
53:ca:07:78:76:43:09:23:bc:98:fd:44:82:3a:fd:2f:27:26:
00:55:8d:f9:e9:8c:ba:2b:38:92:c4:bf:a5:19:84:40:3a:a7:
15:5a:12:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGmpsXA7OpY+7+R5YGb/+AeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjI1MTFmYjA3NGY1ZTE2NTg1MzViYTQ2MWU0NTgwZGJk
ODQxMzcwHhcNMjYxMTA0MTMwMTQ5WhcNMjYxMTA1MTMwMTQ5WjAzMTEwLwYDVQQD
Eyg2MDE2ZGU0Njk3ZTcyYzMxNDk5NDM3OGZjZDdlY2U5ZTNlZDlmNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrTp+QxfQMYVY7sYK+lK0gfaXn3v
991vvbpD4A6jgSZ6jfYexTNsjlj1yuY/rq3j128Qb2W/8RaFc0IJBa0Y8XZYYzo3
pqhDeguXPo9iRi/ElVG6BSFtburzpcoD/yBpLTK8gdkx/6N3itXiatmfDpLmZIRb
bY4UB11+BORloSmtR/aLu+NS7kWjwt5zJ7by90yNi3x7pSs/wi856otyYRb4aIcK
Da5YOVy5HcpEu+ETIxVIhxWLy7rTHYHLOIhCaWdfDzyDJ1rHP9QM2YnfhncNgKjm
RDtEsr0xj+1e75a/fN9DWxUTbflEzzmSTKE3TGLOcvE92O9x+DOUeq03cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAW3kaX5ywxSZQ3j81+zp4+2fSPMB8GA1UdIwQY
MBaAFPSyUR+wdPXhZYU1ukYeRYDb2EE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxKUkg3QjA5ZUZsaFRXNlJoNUZnTnZZUVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wYmFmNTEtODdlMy00NDM3LWE0NDYt
MDE5Mjk0Mzc5NmMxLzEvOUxKUkg3QjA5ZUZsaFRXNlJoNUZnTnZZUVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wYmFmNTEtODdlMy00NDM3LWE0NDYtMDE5Mjk0Mzc5NmMx
LzEvOUxKUkg3QjA5ZUZsaFRXNlJoNUZnTnZZUVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUc7gFuth
VBi+NyitEi4Crmg1hs1U0wHt5FaWUMzMvgLAsHDSXHr1MmNwdAn5dkT/IOfLM84D
o/cJKfvJcopaTgxJbYTGVi+BdZwHVPhwgx88nSDxm7m5dwisD8CftiRXzcEYR+xZ
F6618FdY3oo9cCaKjYttqol1EdqLTex5E35ll4+Bsreg8dIedDNOUtKJl2pTBB43
4g8w/OWij67Yjat8CjladsnY/iZ9AqZCy4cZLACz1K4yMx2ccMQOCkAdtXIhhEWx
F1lysQLkRm5fDkOsDzs8noroU8oHeHZDCSO8mP1Egjr9LycmAFWN+emMuis4ksS/
pRmEQDqnFVoSZg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 01:04:12 2026 by rpki-client