Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File: 9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier: SJOz23Bj90iaVXl/gOOJypBHk4RQCTePBieXgARj/98=
Subject key identifier: F7:78:AF:C2:FA:B5:C8:61:25:5B:9A:4A:4E:27:64:E4:15:9D:3B:B9
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial: 01A14015A32A28523366F09A479EB28203AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 15:02:02 +0000
Manifest this update: Thu 15 Oct 2026 15:02:02 +0000
Manifest next update: Fri 16 Oct 2026 15:02:02 +0000
Files and hashes: 1: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: 2yI9IvyefRt435dcVlSAc7MV0z4acgVpxhKss/Uepmg=)
2: JuwdF3pXKULgX8rdBkYwVawnKUg.roa (hash: J6niK53xMmSAm4XjHsm9sqSbekhWgzfMokxnfXFEmFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:a3:2a:28:52:33:66:f0:9a:47:9e:b2:82:03:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Validity
Not Before: Oct 15 15:02:02 2026 GMT
Not After : Oct 16 15:02:02 2026 GMT
Subject: CN=f778afc2fab5c861255b9a4a4e2764e4159d3bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:db:01:dd:1c:1f:18:72:21:1a:f2:d2:4c:
12:8f:47:bf:4b:1c:19:b4:22:59:cb:74:e2:cb:8e:
64:a1:c7:ca:81:88:d7:f5:ae:dd:bd:1c:00:2d:5e:
4d:fd:c7:71:b8:4e:ab:de:31:e0:ab:fc:60:2e:e0:
f7:ed:51:8d:85:a3:1a:df:33:c4:9b:d7:7b:03:81:
3a:41:80:df:e1:a5:56:1a:44:d0:79:20:cb:a7:97:
72:c5:69:89:31:f0:8e:49:c2:bd:75:76:4c:f5:dd:
5a:84:85:30:cb:4d:9a:39:42:48:ce:fb:cb:54:07:
e6:3f:6c:29:cc:7e:a8:28:89:00:34:7d:46:9a:d6:
d6:5d:3e:c0:c4:01:3c:59:2b:85:df:44:7a:00:78:
b5:43:77:ce:0e:a2:4c:2f:9f:da:4f:fa:d8:13:22:
fb:88:ce:72:bd:ab:43:3d:f3:04:79:d9:d1:39:60:
0a:1a:6a:ed:36:6f:46:88:a6:9f:96:92:84:c6:f0:
ba:c1:b4:55:ed:ac:30:5d:b1:53:d3:79:97:86:3e:
8b:cc:e3:20:3e:2b:31:fd:89:cb:b2:dc:87:1d:1a:
bf:34:99:41:47:2a:e5:20:5b:31:ab:af:f3:29:00:
ce:32:3c:68:60:91:6b:f5:f4:5a:ce:ab:68:2d:9e:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:78:AF:C2:FA:B5:C8:61:25:5B:9A:4A:4E:27:64:E4:15:9D:3B:B9
X509v3 Authority Key Identifier:
keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c3:b6:5a:d0:b7:10:18:ad:9e:d8:1f:c5:3f:56:ea:1a:10:
c1:d1:89:ad:28:fb:ac:ea:52:fa:09:d7:83:68:37:3d:40:d8:
dd:db:ba:83:10:46:0c:41:8a:69:2e:15:ca:a8:fb:9f:9b:85:
70:32:99:ae:1b:eb:d7:d6:5e:5d:1c:63:0b:5b:d3:02:04:ea:
ad:06:b6:6d:d7:55:79:f5:56:35:62:28:29:16:74:6e:6a:0f:
bf:eb:60:3a:ed:51:96:39:dd:86:b9:c8:3c:ab:8e:84:ca:e4:
1a:29:8d:27:70:80:33:d2:82:db:ea:eb:c6:0d:29:6f:80:a1:
e6:ee:fd:e5:0e:d2:93:04:c7:a9:b5:bd:c7:8f:31:bf:37:2d:
1d:ba:06:24:ef:8c:ea:01:a6:59:88:dc:f3:db:ca:22:d5:40:
f6:35:42:11:52:e6:1b:fb:2d:74:48:58:e9:86:26:bd:42:07:
76:ad:8f:de:42:c3:47:66:80:ba:ad:66:0f:cf:28:b8:5e:2d:
e7:9f:6a:15:74:a3:e4:9c:60:ac:74:27:d8:67:5a:70:d1:60:
29:88:f2:62:c1:d9:be:fa:3e:17:a5:f7:cc:4e:20:f4:eb:e1:
d8:8f:73:56:4a:48:98:28:49:db:6f:b1:88:b6:65:03:6e:dd:
be:09:b6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:41 2026 by rpki-client