Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: MXzPfdcseRgjETG62FR/YqpMl1/UDCRxx2QSmcMAB4g=
Subject key identifier: 64:3C:02:81:90:A0:8F:16:27:97:CA:2D:8F:D3:0B:C0:BA:8F:45:A6
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 01A13E943677713F83E27961ADA47F76C8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 1A35
Signing time: Thu 15 Oct 2026 08:01:02 +0000
Manifest this update: Thu 15 Oct 2026 08:01:02 +0000
Manifest next update: Fri 16 Oct 2026 08:01:02 +0000
Files and hashes: 1: 7kGNbroThpMnN96LqRGM-Y-5t9Y.roa (hash: lxPWqX0/OpM/p7/y+8GA/oyT71oB2fzc6nqiYIWie7o=)
2: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: z1zz2MHVulj/LnpaPAOLXFZEq7Oa++Jer/aVjNOferQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:36:77:71:3f:83:e2:79:61:ad:a4:7f:76:c8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Oct 15 08:01:02 2026 GMT
Not After : Oct 16 08:01:02 2026 GMT
Subject: CN=643c028190a08f162797ca2d8fd30bc0ba8f45a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8b:50:4f:e7:be:93:53:7e:bd:ab:6a:09:5d:
28:4c:95:85:6a:3e:4f:49:59:85:83:47:6f:86:de:
c4:6a:52:e7:85:07:79:04:8f:86:c5:37:4c:e1:d2:
33:8d:6c:19:51:da:6c:c4:32:04:79:98:3b:8b:e7:
ff:7d:f5:ea:13:80:0e:92:5f:3b:ea:1f:c7:ea:df:
c6:fe:89:24:3c:72:fd:d6:9c:aa:f0:61:5e:37:b7:
b0:26:5d:bf:e9:4c:96:82:51:00:a3:1f:40:ba:12:
06:e1:73:8c:cf:97:dd:c5:c6:d7:68:e7:df:93:19:
25:43:0d:53:d7:66:af:d4:3f:5c:c1:5d:20:0a:b0:
2f:36:0f:45:91:d3:e2:f6:ce:ba:18:35:5f:0e:ae:
ec:91:2f:bb:1a:39:79:6d:23:e0:fb:3f:42:14:d9:
cf:7b:c7:0b:1c:95:30:76:64:15:b3:f8:73:01:06:
b7:4a:4e:37:c8:6e:6e:1b:5b:19:55:3b:03:df:dc:
ae:d6:6d:69:70:c5:f1:5f:93:0c:c1:b0:cb:95:68:
cb:c4:88:6c:63:b8:cd:3d:a5:26:fd:10:5d:04:ac:
36:2a:7b:63:26:92:6e:2e:fd:23:7a:20:09:3d:b0:
c1:45:83:4d:21:16:3f:ec:1c:f7:a5:6e:fe:64:36:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3C:02:81:90:A0:8F:16:27:97:CA:2D:8F:D3:0B:C0:BA:8F:45:A6
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:88:83:85:3f:99:fd:e3:54:c7:57:3b:4e:84:12:d7:84:ea:
ba:c6:49:dd:7d:b3:98:47:61:9f:60:8e:60:67:54:97:90:cc:
ad:65:18:9d:2d:3b:8e:4e:54:2b:84:68:c7:7e:5c:d5:2a:7a:
4e:23:e2:c2:c2:22:d5:35:1b:84:dd:55:a4:24:7e:97:85:00:
68:e8:37:80:65:84:7f:3b:36:6f:3f:3c:44:d7:a0:34:01:e7:
39:65:2f:31:13:76:a6:8d:16:34:65:8b:8d:12:1a:45:d7:0f:
c6:ad:7b:4a:f1:ef:4a:98:f7:50:80:16:a0:29:f2:2f:53:67:
50:70:a3:8d:34:59:e0:51:f5:a8:8c:da:0f:76:51:e2:88:71:
ae:85:70:f1:a9:17:b1:63:dd:29:b0:6f:f3:6e:3c:e7:af:a1:
1b:45:9f:43:69:1a:5c:b2:58:b0:45:f7:90:19:2b:8f:81:36:
05:db:ea:8a:16:87:df:15:10:88:cf:21:e7:8f:12:ae:62:08:
17:f0:2f:42:1e:5d:78:f3:37:6a:ae:52:29:a0:ec:b7:28:5e:
ad:18:f1:55:f6:15:82:ce:2e:30:87:2b:b4:1c:15:1e:95:02:
f2:ea:59:fc:e0:44:93:ff:93:39:14:8e:24:8c:c8:79:ec:53:
ff:24:c0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:51 2026 by rpki-client