Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: IJeW06ctMkKl5fYYRsz0oDJHGPJWtt4yLwmHzLs58uc=
Subject key identifier: F4:85:3C:1D:79:7A:F3:97:B2:E8:3A:77:B0:65:D4:32:8B:10:BA:BA
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 01A10A708428D155E9F7DB3020CAF7CE7229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 17BF
Signing time: Mon 05 Oct 2026 05:01:48 +0000
Manifest this update: Mon 05 Oct 2026 05:01:48 +0000
Manifest next update: Tue 06 Oct 2026 05:01:48 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: 2ZAeC8BLD53moB+cLGalx6DP7AYtTnB84ht7aXgrgR8=)
2: 1vQkcMHCkliQRKl9aZ_MI-G0oZg.roa (hash: jJ0Z9gvnHkxzvx7TbvN1q4EtCEWPz3vfe0uvFzwej1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 05:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:70:84:28:d1:55:e9:f7:db:30:20:ca:f7:ce:72:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: Oct 5 05:01:48 2026 GMT
Not After : Oct 6 05:01:48 2026 GMT
Subject: CN=f4853c1d797af397b2e83a77b065d4328b10baba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f5:91:fe:43:75:93:00:1f:78:5c:16:33:2f:
8c:3d:a7:26:49:b6:a3:c3:5b:3e:66:cc:84:ae:e5:
9a:aa:c8:66:b2:b8:be:a8:ca:57:7c:56:ea:ed:18:
5f:f8:ca:4f:e3:f1:56:58:93:04:aa:88:90:fb:94:
57:db:e3:7b:39:00:44:2a:42:cd:74:a1:26:d7:7c:
14:68:2a:55:a8:5b:f9:66:7d:b0:4b:f9:ae:2a:98:
c1:aa:a3:a5:20:96:19:d5:f0:23:a0:2b:4e:89:53:
28:53:09:e3:26:c4:94:6d:56:88:6c:f7:ab:dc:e9:
8a:9e:af:3b:f9:a1:06:c4:28:cc:6f:db:c8:6a:a9:
f2:43:96:7c:47:5e:1a:b7:d3:3e:71:26:ae:de:0a:
d9:d0:d7:ea:e3:72:ad:f2:b9:ed:40:1f:db:0f:31:
3f:87:3a:3f:e4:07:ae:8e:1e:5c:39:2f:96:20:1a:
76:73:59:8d:b5:0c:ee:a2:4f:6e:7c:7a:74:30:5e:
58:9e:72:18:e7:35:7c:38:22:23:76:f0:72:56:7b:
8b:40:ca:3c:9b:41:44:62:9a:26:ed:ae:aa:6a:22:
02:7e:89:82:4a:5f:59:b6:e9:3e:69:cf:8a:36:e8:
f7:93:b8:63:a5:9c:02:ad:2d:fd:6f:f3:91:0b:34:
72:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:85:3C:1D:79:7A:F3:97:B2:E8:3A:77:B0:65:D4:32:8B:10:BA:BA
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2e:d5:14:74:2d:e2:26:8e:d7:eb:32:c8:f1:9d:af:0a:40:
49:a6:df:6b:8e:f5:02:6d:97:75:3b:93:12:c1:34:45:f2:25:
55:25:72:b2:db:26:21:d6:e1:ee:b8:a7:d4:0c:ed:60:d2:ed:
c3:07:d4:00:33:cc:91:fc:99:8d:b4:f0:84:b5:aa:a1:87:ae:
02:e9:57:a2:a2:53:03:03:5f:8f:63:33:dc:93:86:0f:b3:45:
d7:89:6c:41:69:cc:76:a7:56:fd:d9:04:bd:ad:b7:48:0d:c8:
6d:bf:1f:72:a6:60:41:22:c8:21:6b:1d:df:5d:82:20:82:1f:
ff:f7:5c:69:a8:f3:9d:e7:1d:b1:e1:3e:48:69:26:2d:d9:b4:
a5:d4:aa:f5:27:e5:1d:c0:cb:e9:97:38:4d:2b:62:fc:52:c6:
23:50:37:84:6c:eb:cf:3c:b7:ac:22:38:75:05:4f:e7:b5:82:
6e:8b:c0:f1:a9:0b:8d:db:03:15:b4:ba:e2:8d:4b:76:1c:58:
0f:5d:8c:fa:be:3f:e3:b8:97:3a:92:8b:0b:64:d1:cd:76:8a:
04:07:c6:d5:f7:95:72:96:46:3b:f1:f8:3d:bf:a6:69:e4:58:
86:54:e1:d4:58:0d:25:90:90:96:73:48:6d:b3:33:64:4f:b4:
f2:88:6a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:08:58 2026 by rpki-client