Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
File: 9vSDrNiLUfXUf1d_EBtUV3heDts.mft (raw, json)
Hash identifier: ApwyzyIO26uZqqKHB8Km5PJL682gKp5/ISMPevvuQss=
Subject key identifier: B7:D3:67:C1:16:47:5C:B1:72:F3:26:5F:16:15:F4:D9:21:EB:88:C0
Authority key identifier: F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB
Certificate issuer: /CN=f6f483acd88b51f5d47f577f101b5457785e0edb
Certificate serial: 01A174DDA62E05118F9C8FC0C2EBD931CF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
Manifest number: 0303
Signing time: Sun 25 Oct 2026 21:00:45 +0000
Manifest this update: Sun 25 Oct 2026 21:00:45 +0000
Manifest next update: Mon 26 Oct 2026 21:00:45 +0000
Files and hashes: 1: 9vSDrNiLUfXUf1d_EBtUV3heDts.crl (hash: oZtaWT8sO/2zlGpFI7kQ+2zKaQYaUsAGKZm3HiTZGtg=)
2: OkuL0jFH9Wxr8ze3v5vO1jQoo0c.roa (hash: iUfKzVmd555jisXL+xnaTzJDpDNsG+ROIoI7/2+6dXE=)
3: h9dclcnj73gGMmqKRNemWaDpAK4.roa (hash: mJuahx80L+X55SPmqYQeNyVRCkJnTbE2MlO0Pta3IEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:a6:2e:05:11:8f:9c:8f:c0:c2:eb:d9:31:cf:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f483acd88b51f5d47f577f101b5457785e0edb
Validity
Not Before: Oct 25 21:00:45 2026 GMT
Not After : Oct 26 21:00:45 2026 GMT
Subject: CN=b7d367c116475cb172f3265f1615f4d921eb88c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:db:e2:34:74:dc:29:9f:5e:46:38:aa:33:
fb:c5:ab:42:82:ac:78:45:58:7d:1a:b8:e5:d8:ec:
74:fe:7a:3a:e9:47:da:71:86:3b:02:de:c3:0c:01:
fc:22:e7:13:38:b6:92:f3:3b:c3:5b:6e:f0:eb:1c:
39:78:00:de:89:a2:e1:db:84:9b:5c:05:ec:c0:59:
47:f6:76:a2:23:02:1a:3c:e3:6d:7d:2c:3d:50:0f:
94:3f:40:4d:17:5d:14:d7:a1:2a:45:bc:ca:ad:9f:
8d:78:4a:22:1b:e1:df:12:da:c4:7d:fd:dd:9d:06:
07:df:ac:b4:e0:4c:d1:34:55:44:ac:70:97:25:7b:
67:87:7b:ca:19:89:21:c7:9d:20:d3:e9:0e:ef:03:
1b:10:5c:c4:1f:67:ad:4c:c8:e1:35:56:5b:df:e4:
0e:67:82:5f:c1:46:77:07:43:8e:44:d2:bd:77:98:
28:a8:1a:0c:de:7a:62:41:9a:99:43:10:cc:e0:05:
bc:ae:e7:ab:90:32:59:97:b1:03:4d:69:93:a9:2f:
fb:5c:41:31:b5:4d:b5:e1:b0:4f:26:95:03:91:ff:
bc:31:18:c3:1b:c3:7b:ea:71:f3:c8:c2:22:a6:87:
80:2c:f6:4e:30:78:86:da:05:a6:45:2f:91:fb:b1:
62:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D3:67:C1:16:47:5C:B1:72:F3:26:5F:16:15:F4:D9:21:EB:88:C0
X509v3 Authority Key Identifier:
keyid:F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:25:b4:64:1e:f1:b1:8b:3e:a0:1c:af:61:c3:96:e8:ce:08:
b0:c7:dd:7b:c8:f5:2a:ae:d5:06:ad:15:c3:8d:cb:55:9f:4b:
aa:1c:8e:c0:44:93:2f:3f:e0:df:4f:9c:56:4c:cb:08:1e:4d:
6c:55:bc:58:d7:49:e6:66:53:11:03:24:0c:c7:6f:8c:94:78:
2e:9e:ea:07:ab:43:a6:f4:81:72:da:de:64:a1:49:f7:ea:49:
4f:dc:c7:83:90:4c:af:a1:8a:6f:f9:02:ac:70:81:e0:15:70:
25:d3:b8:68:f2:44:78:6d:c6:1f:cd:09:87:a2:00:6a:76:d6:
07:e9:21:33:08:41:a8:5f:3d:6a:54:e1:af:18:de:cc:d0:35:
f7:ce:42:d8:56:0c:e1:ce:a6:74:2d:27:a5:b2:98:bd:45:14:
a7:9d:99:44:66:9d:9d:90:22:2a:d1:a6:ef:fe:2f:30:69:ba:
78:ea:e3:ec:a1:f0:22:ea:cb:07:68:a1:cd:d2:13:30:c4:93:
00:0b:71:82:77:cf:8b:19:e9:23:f3:9f:30:ef:d7:f4:be:be:
d3:f2:d9:ef:c5:13:fa:f2:c0:f6:f0:d3:77:0c:e6:54:7a:6c:
e5:8f:98:92:2b:5e:50:09:7a:75:4b:57:74:c8:da:44:59:3b:
8b:c0:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:22:22 2026 by rpki-client