Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: j+733nTPBMw0OM7lVnr/GnAfwEIbtEdDn+0JyMv/IeM=
Subject key identifier: 53:68:36:63:39:73:67:D8:38:71:92:6E:25:66:98:29:B2:47:AE:67
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 01A177A78C82FF773B43A68E9B79FC947760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0A67
Signing time: Mon 26 Oct 2026 10:00:31 +0000
Manifest this update: Mon 26 Oct 2026 10:00:31 +0000
Manifest next update: Tue 27 Oct 2026 10:00:31 +0000
Files and hashes: 1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
2: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
3: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
4: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
5: 8tSEwUH0JKaj9-b78A6P1HNWucA.roa (hash: /2i4x0ciVTUv5ry6RgoyWYRvzmYenJ7v0fQyaaOhTzk=)
6: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: Y/x7ZjE37DDw2chtTiBVLng3UtcHkHQjzu8WHAcSr18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:8c:82:ff:77:3b:43:a6:8e:9b:79:fc:94:77:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Oct 26 10:00:31 2026 GMT
Not After : Oct 27 10:00:31 2026 GMT
Subject: CN=53683663397367d83871926e25669829b247ae67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:b5:d1:cf:43:4e:97:23:7f:03:98:62:1c:
fc:3f:5f:68:1f:a3:63:06:f2:74:a4:c8:f5:b6:2a:
1a:b4:95:b1:54:0d:c9:80:fe:bd:2b:31:8b:8f:35:
1e:dd:c9:91:21:d6:2b:af:58:96:46:11:68:e4:ab:
8a:42:27:1a:9d:7a:c7:fe:8d:fe:4c:cf:a1:a6:79:
95:4e:55:f3:7c:32:47:06:a8:52:3c:80:c7:00:59:
12:f1:7e:d5:b2:ab:7b:c1:09:42:02:cc:6a:34:e4:
be:6c:e0:27:4e:36:74:84:e1:fa:f3:1f:68:64:b0:
28:cd:07:a4:80:1f:f3:2a:f8:70:a2:d9:16:0d:35:
66:29:26:54:c8:7f:ba:73:cd:e0:59:7f:3c:6c:8e:
39:a0:1d:d8:4b:84:c2:ef:73:8d:8f:79:7f:1d:62:
b7:87:f5:a1:f8:61:0b:25:f1:8d:2c:20:91:06:f4:
14:64:0e:7c:95:c8:1e:b8:ea:de:53:c7:9d:2d:4b:
df:6e:61:95:8d:89:55:84:1c:00:67:9b:4c:a3:c4:
a0:83:4e:56:68:70:da:41:7b:ec:75:e3:76:57:a9:
94:31:f6:5d:ee:40:46:53:65:6f:dc:a6:b3:db:ef:
9e:63:15:83:66:60:9d:b3:bd:be:37:d2:cb:ae:06:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:68:36:63:39:73:67:D8:38:71:92:6E:25:66:98:29:B2:47:AE:67
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e2:24:c7:97:ba:ed:80:00:11:5a:28:e9:3d:2c:01:3d:27:
b4:c0:ff:44:79:e9:30:50:4f:8c:5e:53:ca:c0:66:f3:0e:aa:
f5:5c:01:ca:cc:af:0e:17:cd:3d:63:04:a4:b9:6c:72:34:4e:
33:98:d5:71:5d:84:f8:1d:0c:5d:1e:4e:fc:9c:6f:45:65:c4:
5e:09:63:a5:ab:8c:b4:80:a2:e3:74:fb:e2:36:83:8b:9c:c8:
c6:ef:b8:ee:0d:32:c2:c2:64:30:e9:20:c3:f6:f5:06:3a:98:
65:f8:2c:ed:4b:08:05:28:96:93:78:00:5e:41:2b:37:c2:59:
03:43:80:cc:85:7c:fd:3e:7e:b6:e9:d6:f8:36:56:f0:f2:40:
fa:cf:37:14:ab:b3:fe:f2:c1:83:80:79:b3:58:4f:4f:b5:aa:
8a:0f:3c:bd:39:e8:45:2b:c0:8a:4b:34:84:6b:bf:1f:5d:a5:
a1:87:83:79:08:4d:21:af:ea:87:da:98:48:f1:31:02:33:69:
25:0e:3a:42:5e:6e:c7:5a:b5:2c:a0:e7:89:ad:9f:d0:30:13:
3d:96:e2:38:cf:83:b8:9f:ec:32:15:3d:89:40:4a:d5:8f:fd:
11:b3:c0:ab:3a:c7:7a:83:32:4d:05:32:b6:49:05:c5:93:88:
4d:95:04:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:54:39 2026 by rpki-client