Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: X6gOySHKLtWEqABXGL3Nohgg+g1pzZ42/Cd6ntoe8mo=
Subject key identifier: 7E:5C:2A:86:C9:D4:52:7F:50:3C:65:F9:90:3F:6A:72:6B:08:52:3C
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 01A142A844E0A9F5F4715DDC3C6C1B0EA497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 1AA9
Signing time: Fri 16 Oct 2026 03:01:26 +0000
Manifest this update: Fri 16 Oct 2026 03:01:26 +0000
Manifest next update: Sat 17 Oct 2026 03:01:26 +0000
Files and hashes: 1: 4seyTDBe9bL2x8Z_6sMBSrOYvgM.roa (hash: Ld+vj6OA1gKqESzL9huJc2LDFrgP5kvfK/8UeR3bm/4=)
2: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: aSjf1jIX05Z4fbCS3lAbs2lhzeceE6Vwceuzv8VhFyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:a8:44:e0:a9:f5:f4:71:5d:dc:3c:6c:1b:0e:a4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Oct 16 03:01:26 2026 GMT
Not After : Oct 17 03:01:26 2026 GMT
Subject: CN=7e5c2a86c9d4527f503c65f9903f6a726b08523c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:90:f2:cb:d9:2f:88:64:01:e1:b9:6b:71:
ae:a1:f3:61:21:d3:5f:61:63:b6:d4:11:27:cd:4f:
ba:13:1b:cd:24:c0:d5:dd:f8:fe:94:e5:f2:d7:6e:
aa:49:c8:38:83:3d:14:70:99:e0:46:fe:f4:ed:8e:
30:ba:d7:18:95:75:e5:fa:cc:c1:39:23:13:29:78:
64:e9:c8:3b:18:e0:0a:da:b0:b8:c2:a0:c7:38:09:
83:80:b9:41:7d:d1:52:cf:4e:7b:57:c3:a2:42:9e:
fc:98:95:21:68:80:76:37:83:7b:e1:74:ff:ae:c8:
3d:f9:36:2b:b9:f1:4d:fe:a8:96:05:4e:75:96:95:
b3:47:03:65:a2:f3:c3:57:c3:21:98:6e:a1:52:54:
b5:8c:1b:ae:4c:38:b5:30:a4:75:ed:5e:26:34:2c:
89:d9:70:b2:1b:4c:40:86:e8:80:41:56:00:81:7d:
1b:bb:8b:fb:06:83:fa:ba:f7:5e:f5:5c:0d:3c:8a:
a2:2e:c8:e9:51:de:3a:c7:44:d5:c3:bf:6d:f9:53:
24:95:89:83:ed:c8:9b:55:55:04:ad:d6:c0:4c:c1:
fb:73:e9:71:4c:d1:d2:91:52:ab:dd:cb:da:ed:a4:
76:47:09:d0:af:f2:5e:d3:8a:f8:1d:e9:ef:63:5b:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:2A:86:C9:D4:52:7F:50:3C:65:F9:90:3F:6A:72:6B:08:52:3C
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:75:36:2f:b0:36:e9:b2:6b:ca:67:80:53:dd:77:5d:0a:96:
77:0a:6a:15:19:6f:96:d5:c1:2f:92:05:be:ea:56:ab:39:76:
e0:f7:9f:83:cd:08:40:f6:2a:b9:21:ce:3e:da:4e:05:32:80:
14:24:2d:99:4d:8e:8d:f6:44:5f:7f:7d:f9:e9:48:d4:39:91:
b2:dc:e8:79:53:40:12:2d:a4:1c:cf:01:89:c3:5a:5c:27:68:
f1:35:bc:e3:62:4a:17:5b:15:3e:9b:ad:5b:5d:49:55:cf:ac:
68:c8:ff:0f:3c:a5:ae:7d:a9:30:22:c4:e2:26:13:c3:0a:54:
60:a1:68:8e:cb:a4:68:b4:5a:83:af:20:42:f4:46:59:6a:93:
c2:2a:f3:50:17:70:41:68:0c:dc:69:ed:0a:f0:30:5a:01:47:
5d:15:cd:29:76:be:e8:2e:c9:2c:bb:a9:8e:b1:82:98:d7:ef:
21:08:e4:eb:b4:84:c9:dc:c0:e0:b9:36:f6:f6:05:94:06:05:
14:30:06:e9:22:86:36:92:ca:f2:01:c2:70:f9:dc:ae:bf:28:
b5:23:57:d3:6a:08:ed:ae:61:9d:da:a1:4d:b4:86:c6:1d:9d:
64:62:a2:8f:13:38:b2:43:10:e9:2e:b0:bf:11:7a:d5:49:4c:
1c:39:b7:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFCqETgqfX0cV3cPGwbDqSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGI2YjQyNTYwMGEyNWE2ZGMxMzJkZTUxNDc5N2UyYWE0
YjAyNDcwHhcNMjYxMDE2MDMwMTI2WhcNMjYxMDE3MDMwMTI2WjAzMTEwLwYDVQQD
Eyg3ZTVjMmE4NmM5ZDQ1MjdmNTAzYzY1Zjk5MDNmNmE3MjZiMDg1MjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmCQ8svZL4hkAeG5a3GuofNhIdNf
YWO21BEnzU+6ExvNJMDV3fj+lOXy126qScg4gz0UcJngRv707Y4wutcYlXXl+szB
OSMTKXhk6cg7GOAK2rC4wqDHOAmDgLlBfdFSz057V8OiQp78mJUhaIB2N4N74XT/
rsg9+TYrufFN/qiWBU51lpWzRwNlovPDV8MhmG6hUlS1jBuuTDi1MKR17V4mNCyJ
2XCyG0xAhuiAQVYAgX0bu4v7BoP6uvde9VwNPIqiLsjpUd46x0TVw79t+VMklYmD
7cibVVUErdbATMH7c+lxTNHSkVKr3cva7aR2RwnQr/Je04r4HenvY1sONwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5cKobJ1FJ/UDxl+ZA/anJrCFI8MB8GA1UdIwQY
MBaAFPULa0JWAKJabcEy3lFHl+KqSwJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYt
MTAwZjg0ZmU5NTBjLzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYtMTAwZjg0ZmU5NTBj
LzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3U2L7A2
6bJrymeAU913XQqWdwpqFRlvltXBL5IFvupWqzl24Pefg80IQPYquSHOPtpOBTKA
FCQtmU2OjfZEX399+elI1DmRstzoeVNAEi2kHM8BicNaXCdo8TW842JKF1sVPput
W11JVc+saMj/Dzylrn2pMCLE4iYTwwpUYKFojsukaLRag68gQvRGWWqTwirzUBdw
QWgM3GntCvAwWgFHXRXNKXa+6C7JLLupjrGCmNfvIQjk67SEydzA4Lk29vYFlAYF
FDAG6SKGNpLK8gHCcPncrr8otSNX02oI7a5hndqhTbSGxh2dZGKijxM4skMQ6S6w
vxF61UlMHDm3ew==
-----END CERTIFICATE-----
Generated at Fri Oct 16 11:35:37 2026 by rpki-client