Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: rVTiWzdiVADZSJmguZE/YiwwoRNoRyH19GMz8lK4HbA=
Subject key identifier: 47:EB:2A:6F:98:DA:A7:33:6B:BB:94:43:99:3D:48:63:4A:E3:48:AB
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 01A18B2E3FA7CFA153A3FF1FC620BEEB2AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0F47
Signing time: Fri 30 Oct 2026 05:00:26 +0000
Manifest this update: Fri 30 Oct 2026 05:00:26 +0000
Manifest next update: Sat 31 Oct 2026 05:00:26 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: MTikhhDUrqBizLoEzMyxzBz9YOZrMw5LeENbZbmd8XI=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:2e:3f:a7:cf:a1:53:a3:ff:1f:c6:20:be:eb:2a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Oct 30 05:00:26 2026 GMT
Not After : Oct 31 05:00:26 2026 GMT
Subject: CN=47eb2a6f98daa7336bbb9443993d48634ae348ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:f6:1a:03:94:b7:75:1c:75:2b:b7:cc:96:
02:f4:a3:01:67:0c:7f:b9:56:db:0c:29:20:d2:60:
8a:ab:89:d0:05:f4:5c:e7:df:87:76:f3:44:65:f4:
75:4f:ea:93:b5:4e:a7:2e:4b:94:1f:8b:2d:2e:b5:
41:9f:d9:16:7c:26:59:d6:9c:7f:39:b1:ce:9b:ce:
57:a3:19:ca:b6:f0:06:0f:40:89:5e:dc:98:54:82:
a1:17:a9:9d:c4:b0:e0:c3:b3:0a:c1:a7:0f:a1:7f:
ed:96:14:d5:c4:cb:63:29:9c:84:e2:4c:35:cd:76:
58:89:d9:40:b5:72:c8:80:e1:e5:c7:95:04:76:2d:
b3:9c:b7:3e:7c:3b:94:e3:53:ec:27:ba:ae:f3:b2:
bc:ec:12:24:71:d8:95:93:c8:39:7b:d6:48:fe:4c:
8f:31:e0:2d:fb:4b:aa:55:55:6c:19:b0:0c:d9:ee:
98:d9:e8:08:b6:b8:d6:73:3b:3c:66:77:a2:21:a7:
d6:f0:f2:2d:6f:f7:75:27:c8:38:b4:e4:cb:46:a0:
f8:7c:e6:2a:27:db:2d:fc:43:ce:a2:c5:2b:c1:71:
13:77:61:4b:c3:b9:5e:db:dd:de:bf:6a:d8:d5:18:
f0:72:92:31:ae:40:ab:ba:e8:04:74:a8:68:4d:73:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EB:2A:6F:98:DA:A7:33:6B:BB:94:43:99:3D:48:63:4A:E3:48:AB
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:56:8c:7b:50:75:fd:88:08:82:01:72:9d:d5:55:c9:af:b9:
11:51:f1:05:96:f4:35:73:1a:54:85:c8:2f:20:4f:3b:56:9f:
98:bd:9f:80:a7:b8:37:5c:31:a2:0b:ed:9c:55:7f:bd:26:06:
31:67:72:e7:a0:78:10:a9:39:13:97:36:0c:ef:0d:83:0e:4e:
65:cb:7e:61:1b:67:33:69:6d:16:9b:4f:e8:8f:e8:2a:f0:3b:
bd:79:36:38:38:ab:aa:a5:a8:3f:59:a4:2c:0e:ff:7c:ac:8c:
11:fa:7e:b8:cd:87:84:36:0a:65:68:18:b2:b1:1d:6b:ea:eb:
e5:2a:d9:29:37:c0:7c:05:8d:78:2e:c6:22:21:c1:01:34:84:
fd:61:3f:dc:b8:89:a0:5d:d9:0b:40:63:da:a0:88:42:58:57:
78:27:33:f8:9e:a0:81:59:76:90:e1:2a:42:5d:e9:ad:6f:80:
30:53:3e:29:65:eb:2d:25:46:76:d2:7b:ef:0b:c3:f7:b8:e5:
d6:d7:58:f8:a2:1e:13:03:08:fc:13:82:a0:50:16:15:1a:b2:
52:17:2e:f8:1d:3a:bd:95:e1:40:bc:0d:34:68:31:ce:5c:4d:
8e:88:26:2e:de:dc:33:24:c9:85:e6:19:eb:2d:15:cb:36:f3:
21:6d:1f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:28:53 2026 by rpki-client