Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
File: 9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft (raw, json)
Hash identifier: XmHjMFzRrLVZ+DTeugEA6jAakQxdGipwcQONlrZ7CSw=
Subject key identifier: 50:56:10:AF:2D:59:52:BB:90:28:43:10:3C:28:1C:AA:3D:E0:DB:C4
Authority key identifier: F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
Certificate issuer: /CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Certificate serial: 01A17FD04F0315084AD83ABA6F1BD668FDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:02:00 +0000
Manifest this update: Wed 28 Oct 2026 00:02:00 +0000
Manifest next update: Thu 29 Oct 2026 00:02:00 +0000
Files and hashes: 1: 9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl (hash: l6c1/s3JjhwKBgi69jaNYksU+VLoQopzmJIht1j1we4=)
2: aNi0svyCpgLR9qbr5slNhqZZui4.roa (hash: sxaVc5dUd3tQBZrO+xETdU+soa2Zm49R0p3UmVfLY2A=)
3: r95ZVjX56jJiWkYQMRKyYv04zAk.roa (hash: atQuuUOVhYvlzY/3e8Hwna49gvmMP2+CuoGawCgA1Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:4f:03:15:08:4a:d8:3a:ba:6f:1b:d6:68:fd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Validity
Not Before: Oct 28 00:02:00 2026 GMT
Not After : Oct 29 00:02:00 2026 GMT
Subject: CN=505610af2d5952bb902843103c281caa3de0dbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:28:b0:9d:d8:c4:5f:29:1f:7d:7a:3d:b6:e5:
b0:a2:c9:a2:c1:83:2c:88:69:ad:fa:81:8a:3f:df:
45:e2:96:27:d5:f7:ce:9b:9b:cb:21:69:e5:03:89:
f3:38:ac:fd:09:67:99:2e:d5:98:55:5e:ca:e3:81:
2a:7c:dd:cc:cd:82:8e:dc:51:9f:cb:20:aa:00:05:
8a:89:e2:03:e2:b0:55:8b:d8:3e:da:03:01:0b:39:
15:15:d0:8e:8f:dc:34:c3:32:ad:05:5b:38:5c:16:
fc:a5:b6:e1:6e:ee:b1:84:3a:3d:04:32:e3:99:61:
ea:80:37:f0:ff:ec:db:90:d3:fc:7b:55:79:82:8e:
b8:49:d9:9a:1c:b9:17:41:d6:ca:af:f5:1a:64:2e:
b8:cf:07:38:34:a6:97:83:4d:5b:8f:b4:15:9a:c2:
58:79:b6:6b:f1:ad:c5:18:63:da:de:4c:01:0a:2f:
3f:ae:c6:6b:9c:53:c3:a9:3b:29:da:d3:3e:49:89:
d7:d2:ba:a0:c0:82:09:ae:98:f7:3f:6e:fd:08:0d:
c4:ca:e4:75:87:27:7c:6c:56:a5:4f:21:6c:6e:93:
92:86:e6:7a:32:36:bb:04:fa:af:a2:9c:76:9e:b7:
ab:a3:58:09:11:5b:f1:b0:74:3e:f1:46:49:65:95:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:56:10:AF:2D:59:52:BB:90:28:43:10:3C:28:1C:AA:3D:E0:DB:C4
X509v3 Authority Key Identifier:
keyid:F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a1:f5:5c:dd:3e:3b:d1:26:9e:fd:4a:65:2a:36:72:46:bc:
5a:9b:2a:cb:ca:86:08:8b:ab:df:bb:3d:fa:bf:fd:a0:a9:49:
39:e8:b4:a9:a7:28:65:f6:aa:c9:fc:40:d9:93:e4:8b:e4:75:
fc:de:0d:4b:08:e2:ac:10:04:7a:f4:df:21:a9:38:e5:a0:9a:
51:4d:2c:2f:ea:18:b1:2e:ae:0c:30:a7:fa:22:7b:32:59:f3:
85:1b:6c:99:32:1d:57:85:80:97:f0:0f:45:ab:d8:7c:1c:2e:
5d:3e:cb:23:40:78:5e:72:32:ba:34:ae:73:19:ce:4a:ec:14:
9b:31:4d:02:05:af:33:96:a8:43:98:d2:fd:5f:e7:4b:d9:a3:
7d:1e:1e:ed:c7:49:2c:8d:de:f2:38:d0:ac:ae:56:33:6d:f3:
77:5f:06:84:9f:96:6d:0c:21:ac:82:57:3e:3d:21:a5:68:7b:
c1:02:7f:62:20:e8:34:ec:ca:cc:83:80:2f:84:60:3d:d8:2c:
bc:7f:cf:e3:17:4f:cc:7a:09:16:49:b4:d9:0e:77:a1:98:ed:
4d:50:bb:7a:83:51:87:25:1c:ed:93:cc:d1:3b:17:36:3f:a6:
a3:2c:23:b4:f6:b4:a5:23:f4:b5:e4:4a:f9:94:76:f6:8b:2b:
64:a7:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:25:25 2026 by rpki-client