Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier: 2wPo12McYjjlcBQZCK3kw6otwsPIFYApvDBafintqoo=
Subject key identifier: 96:1B:70:50:E4:17:3F:4B:91:02:C7:AD:DC:B0:A2:15:E5:FB:82:11
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial: 01A001DD99BF229C93B945B4B97AB436A739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 20:01:35 +0000
Manifest this update: Fri 14 Aug 2026 20:01:35 +0000
Manifest next update: Sat 15 Aug 2026 20:01:35 +0000
Files and hashes: 1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: lDjbZ9X4bcL2LlOAP8I3j+lFpyRMxR7fEKKIBhMWQ/8=)
2: mqnfQZBp8h7WvOAdc-8gqdHYqtw.roa (hash: ewJdIlVBdFix7giIGBtZRJXpQjmTUTAe4SWLnLx8JZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:99:bf:22:9c:93:b9:45:b4:b9:7a:b4:36:a7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Validity
Not Before: Aug 14 20:01:35 2026 GMT
Not After : Aug 15 20:01:35 2026 GMT
Subject: CN=961b7050e4173f4b9102c7addcb0a215e5fb8211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:4e:2b:5a:c9:77:c5:dd:0b:2f:06:c5:15:
bb:29:b6:20:85:49:9a:63:88:03:da:46:57:9b:cf:
df:af:74:bf:c4:62:df:7b:3e:6a:f2:94:13:d0:9c:
78:71:9a:46:8f:8f:c9:80:b7:e5:c1:b0:37:56:2c:
c1:10:b2:9f:1b:41:41:fa:02:c8:4e:93:c6:02:11:
cd:cb:99:e6:f0:e8:95:3e:4e:2f:6b:c7:11:e1:8a:
91:b5:0f:13:40:a7:4c:69:8d:4f:85:e5:bd:fc:ba:
c7:ce:7f:7a:68:2f:05:11:12:51:ab:9c:b3:7c:46:
30:d7:5d:5d:c3:d7:42:04:81:3e:df:17:74:99:c7:
9c:cd:92:8e:08:d2:01:51:65:51:bd:34:c2:d1:ad:
40:f4:80:cc:8c:bb:39:72:9d:91:56:37:56:59:ff:
c2:9f:3f:c9:93:a3:9f:ce:ac:52:56:d9:d2:be:95:
5d:eb:2e:0a:e8:de:ec:07:05:67:8d:a9:4d:6a:60:
f9:a9:51:6c:d9:e4:ca:db:9c:94:52:72:5d:7a:d2:
99:98:a0:7e:18:da:2f:c3:68:44:db:6d:1a:86:5f:
7c:61:86:97:8b:03:88:41:9c:ab:02:21:4f:b7:d5:
d1:c4:f6:4e:f8:be:c2:17:21:23:f2:51:33:5c:1e:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1B:70:50:E4:17:3F:4B:91:02:C7:AD:DC:B0:A2:15:E5:FB:82:11
X509v3 Authority Key Identifier:
keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:34:d4:38:b6:07:ed:9c:52:ae:10:92:5c:2a:65:4c:5a:d3:
25:e7:fa:46:a8:f2:5b:96:e3:e6:c3:d6:e3:dc:7f:96:ed:9f:
03:6e:e2:c3:4a:19:54:51:2b:32:7a:67:02:ef:bd:f0:01:74:
52:b8:e6:19:75:f0:9d:9d:ac:8f:9e:80:d3:49:91:61:ff:18:
db:0e:ae:aa:37:f2:a5:53:af:89:76:f7:fd:26:d8:24:b8:c1:
bc:e1:80:17:fa:a6:7c:b1:ce:90:4e:d3:7f:f0:93:b5:92:e3:
0c:a0:37:72:15:b0:1c:f3:82:28:77:26:78:b7:72:bb:12:e5:
ac:2d:8d:b8:6d:c2:69:21:b1:d8:60:4c:95:ba:2e:8b:34:5f:
df:46:ef:36:fc:67:c4:05:8f:dd:aa:11:06:3e:bd:fb:d6:41:
72:6c:7e:b1:d9:35:49:1f:58:a8:90:03:c4:53:51:06:be:22:
67:db:48:38:d4:b1:4f:f0:d8:78:e1:f7:f8:4b:a0:2e:47:d4:
d3:35:39:ba:49:ae:99:6b:1c:32:24:27:88:b1:3b:8a:3e:ca:
6c:37:ff:d3:d9:22:65:e9:62:41:7f:82:34:ea:6b:93:db:37:
e6:df:a3:79:5a:fc:bb:76:41:14:fd:10:d0:55:a0:50:ba:10:
8e:5a:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:32 2026 by rpki-client