Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: JHAwJqpEYOoTZt5PYxR+L+8VRUid3kY4R3QL5SFnHv0=
Subject key identifier: 20:2C:11:A0:AA:27:B7:A0:30:80:76:83:9E:1F:8C:9E:52:9F:4E:07
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 01A13D812CD2CEB721ACA79A7037A95D3C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 1395
Signing time: Thu 15 Oct 2026 03:00:38 +0000
Manifest this update: Thu 15 Oct 2026 03:00:38 +0000
Manifest next update: Fri 16 Oct 2026 03:00:38 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: UXFYwQ7a3jCLOOC+bIebquzVdSc2855fae30q2koKGI=)
2: lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa (hash: GeIEq9ieMXhGCkHBVtks0M5q4Jm8CcNNhR3YdczhVxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:2c:d2:ce:b7:21:ac:a7:9a:70:37:a9:5d:3c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Oct 15 03:00:38 2026 GMT
Not After : Oct 16 03:00:38 2026 GMT
Subject: CN=202c11a0aa27b7a0308076839e1f8c9e529f4e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:a6:7a:74:dc:75:41:5f:5a:ba:14:f1:5e:
dd:7e:8d:53:ce:40:56:91:84:2f:93:23:aa:e3:93:
a1:8e:5c:5e:7c:1d:82:c7:f6:a1:ef:50:da:41:76:
2f:4b:2e:dd:c5:37:80:eb:cb:1f:c4:8d:f4:d6:d6:
55:b2:0e:19:3a:0e:87:d3:02:4a:4f:90:57:a7:4f:
5b:f9:5c:90:9b:49:f1:d1:90:21:7e:78:20:9d:9b:
46:de:42:8d:32:d0:38:da:72:07:d5:e8:a8:dd:e1:
77:f8:3d:b6:07:ee:b4:a6:51:52:fc:16:ae:05:3e:
b2:0a:0b:04:87:3a:46:45:9a:b5:8e:ab:b7:33:2f:
a3:6e:15:8d:da:7e:7b:c8:75:a8:46:14:64:06:f8:
be:dd:f1:f6:c2:39:e1:1c:62:a2:74:46:2a:77:8a:
e6:a2:ac:c0:13:83:7d:0e:4f:93:0f:01:08:f8:ba:
23:dd:24:19:cf:53:c5:2d:bf:d9:8d:8a:0e:4e:a4:
2f:bc:f8:e7:e6:01:a6:f8:ab:ba:11:ad:0b:bc:3f:
86:48:6b:93:17:dc:27:94:ee:c4:9d:34:0c:a2:25:
0a:2a:64:ff:8f:4a:b1:eb:6b:b9:16:84:aa:e5:37:
06:3e:c2:0f:6e:3b:d9:0f:94:a2:a1:f8:dd:6f:5a:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:11:A0:AA:27:B7:A0:30:80:76:83:9E:1F:8C:9E:52:9F:4E:07
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e3:2c:78:87:71:c4:b1:e8:d0:73:f5:2a:29:a6:be:7c:96:
c4:0f:48:74:8e:7e:08:51:1f:c5:7d:b7:97:59:de:40:d5:82:
8c:b1:e2:4f:98:8a:e5:e2:d5:05:24:8a:03:06:19:56:03:51:
7c:d2:7a:fb:e1:3e:96:c8:07:0c:92:14:de:db:65:3a:f1:e8:
0a:6b:11:f4:3d:0e:1a:af:32:44:bd:1f:42:fd:44:6c:98:ca:
44:31:c8:fa:42:d9:0c:84:6d:cc:0f:96:46:e4:43:3c:de:a6:
14:fc:c8:ed:ce:97:41:e8:a1:38:10:7b:35:7e:1e:1c:22:c1:
7b:3f:dd:54:74:7e:70:4b:54:8d:01:ec:c6:2b:f6:8b:fc:8d:
dc:9b:ef:a1:ed:cd:bb:8e:f6:53:a6:3d:db:2d:e4:de:a3:0a:
f1:c4:20:5b:23:e8:b4:7d:24:74:c0:8c:87:ed:6d:26:83:88:
02:45:ac:d2:1a:59:8c:1e:6e:d0:c9:7d:77:38:a2:db:8f:ed:
0b:df:ce:cd:5c:4c:3c:9f:c7:3e:08:b6:44:45:1a:5b:e7:14:
f8:a6:25:00:0a:aa:66:c9:08:bc:22:31:7c:94:a5:15:b6:92:
21:06:b1:73:e7:b8:b4:90:ed:a5:44:30:df:4c:69:04:aa:bd:
4e:a0:9c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:37:06 2026 by rpki-client