Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
File: 9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft (raw, json)
Hash identifier: sEr3hjdwwKJDGBGzJ5I/fMr3mdOiJLgaFaVVwYdcv5M=
Subject key identifier: E9:E7:78:7E:B8:4D:5D:BB:B7:FE:D5:57:64:BA:F9:29:BD:FD:2D:16
Authority key identifier: F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
Certificate issuer: /CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Certificate serial: 01A08C7A9A1B23F55D1F0202F660B0EEAF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:40 +0000
Manifest this update: Thu 10 Sep 2026 18:00:40 +0000
Manifest next update: Fri 11 Sep 2026 18:00:40 +0000
Files and hashes: 1: 9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl (hash: 5uYwNwb3/rbcICMUZJxIUhyLzFbqxeR40gc2AdW6los=)
2: aNi0svyCpgLR9qbr5slNhqZZui4.roa (hash: sxaVc5dUd3tQBZrO+xETdU+soa2Zm49R0p3UmVfLY2A=)
3: r95ZVjX56jJiWkYQMRKyYv04zAk.roa (hash: atQuuUOVhYvlzY/3e8Hwna49gvmMP2+CuoGawCgA1Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:9a:1b:23:f5:5d:1f:02:02:f6:60:b0:ee:af:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Validity
Not Before: Sep 10 18:00:40 2026 GMT
Not After : Sep 11 18:00:40 2026 GMT
Subject: CN=e9e7787eb84d5dbbb7fed55764baf929bdfd2d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:00:55:67:9a:c0:e7:b2:86:2c:e5:5b:94:5e:
73:80:d2:e1:de:e9:74:4a:13:6b:9d:46:87:5c:1c:
cb:17:98:70:d0:93:57:1f:cd:f9:0f:38:80:fc:d9:
a1:32:2f:a8:82:78:f0:44:82:c1:0b:32:a0:59:0a:
91:07:9c:6a:f8:37:bc:3c:0d:cd:7a:9f:b9:63:1f:
6e:6e:ab:b1:bb:59:60:d7:f8:9e:bf:63:39:0f:3e:
83:7d:fe:51:92:10:6b:27:24:80:38:26:ee:ab:40:
f2:73:75:a2:4f:d3:ff:f7:91:ce:68:5f:42:3d:ad:
35:7d:3f:ae:39:4f:24:01:10:af:c4:de:79:7d:1a:
3f:53:c5:f3:dc:4d:b6:d3:a5:dd:be:14:02:2a:77:
d6:4c:e2:46:48:3d:c0:81:e2:00:45:2f:c2:4e:8b:
4a:55:4a:a8:57:cf:8e:d7:db:f3:61:8b:18:0d:98:
c2:9f:e6:84:65:62:f4:29:be:be:c8:ed:58:47:15:
c9:a6:38:ca:f3:d4:19:77:5a:66:f5:22:45:03:f8:
32:57:a4:b1:b3:2f:76:b2:31:f9:24:61:4c:6f:3b:
cd:d2:d2:bd:43:98:02:bb:53:02:ae:ee:34:1e:b0:
31:31:d3:f5:27:5d:8d:57:d9:93:11:1e:e8:c4:23:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E7:78:7E:B8:4D:5D:BB:B7:FE:D5:57:64:BA:F9:29:BD:FD:2D:16
X509v3 Authority Key Identifier:
keyid:F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8b:b9:e6:d3:2c:f8:47:7c:aa:82:4a:bf:10:18:00:88:65:
19:2e:06:58:b9:05:6b:86:7f:07:a4:d8:27:f8:0c:26:ee:1b:
a7:16:5a:0b:f1:c7:cf:1b:16:e3:80:f9:44:3b:7e:46:d1:e7:
fc:1e:ff:de:ad:dc:4e:ad:5b:ee:96:03:9c:46:aa:2e:50:08:
41:69:c2:1e:bf:ac:4f:cb:54:dc:a4:0a:64:36:78:79:fc:9d:
35:d8:88:9a:73:9a:41:0d:b9:a9:ac:9b:ed:35:65:11:e7:ed:
0b:97:e0:68:df:4a:9c:cd:54:c7:a7:99:2c:64:24:8d:d0:3d:
0a:99:4b:77:51:40:27:3b:52:5b:b0:05:a3:ee:03:69:17:99:
ea:4c:5d:45:ca:a1:4f:11:0b:b7:1c:cb:1a:b7:14:06:79:92:
25:f9:de:70:94:76:58:6d:d9:64:b3:ed:7e:f2:09:90:81:47:
8a:67:56:bf:7b:81:a4:f9:7a:ad:4c:e9:c8:2a:bf:0c:bc:7d:
99:a2:47:07:0b:29:1f:39:18:93:a0:47:0f:92:28:37:0e:65:
90:30:d0:29:10:5d:73:99:4d:0f:09:31:a7:80:c5:54:84:b0:
d4:a1:5f:0b:24:f3:88:2e:86:6f:7c:10:cd:7d:f8:04:91:0b:
19:23:1f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:48 2026 by rpki-client