Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: SiX83nVnLhwbhLGyuBFbdnLeJEIohpeJMesUW1dzRbc=
Subject key identifier: CE:BF:C7:3C:86:F1:D4:9A:7D:8A:AD:25:46:EE:2B:22:A9:9A:54:89
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 01A17EBD4A27E57AC4A0C57DA73E5824D5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 19:01:36 +0000
Manifest this update: Tue 27 Oct 2026 19:01:36 +0000
Manifest next update: Wed 28 Oct 2026 19:01:36 +0000
Files and hashes: 1: BKEbuwMgtraLYD7tz_bOlWvPTyU.roa (hash: 4+VeGIyK69ig1zU9o8l43jPylF7T3GhRdlEeEiB531Q=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: HiWguJw4hbcLMVpqs/p6R5sD/OX3i7NREZqz6R29mUg=)
3: zr9U94ldVmEqABzp28N8U7oLDs8.roa (hash: uuO8FGDaDTUpNR5s2Koo87GcscBCUOkl1Mw1TeypQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:4a:27:e5:7a:c4:a0:c5:7d:a7:3e:58:24:d5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Oct 27 19:01:36 2026 GMT
Not After : Oct 28 19:01:36 2026 GMT
Subject: CN=cebfc73c86f1d49a7d8aad2546ee2b22a99a5489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:a1:15:82:09:0f:41:e7:78:07:f9:85:3f:
88:27:24:7c:e4:26:f2:e5:85:80:52:ab:f8:91:dc:
79:43:a1:f0:6e:dd:25:6b:28:24:1c:7e:c0:20:d8:
f3:ea:77:a5:39:ba:1c:41:5f:7a:b6:fa:aa:d1:41:
3d:1d:11:42:8e:d7:61:6d:20:86:30:aa:c8:71:d6:
03:cd:bb:1a:ea:bc:c6:23:f1:af:de:bb:b3:74:70:
42:ab:1e:d4:7f:f7:c6:c3:78:b1:6c:f9:d6:e9:1b:
73:01:7e:5d:c0:7f:e7:9d:19:45:e8:1e:b3:c8:15:
aa:ca:73:19:ab:b9:ef:e2:2e:e8:b1:e0:a7:2c:cf:
a1:01:9d:b1:b0:34:7a:de:78:d2:bf:84:23:42:44:
99:49:5b:dd:67:c3:61:49:8b:45:99:15:06:ff:de:
fa:16:fe:b3:2b:42:69:9b:7f:23:3c:e9:57:58:d1:
c4:77:76:ef:93:7b:a0:74:32:fb:0f:35:c8:1e:6d:
7e:15:82:1a:ad:d9:8f:36:a9:0d:9d:46:db:69:fe:
02:af:69:90:4c:d7:f7:10:7d:92:6f:ab:59:3e:a3:
73:94:20:be:e0:0d:47:e4:9b:8a:b9:3e:ea:94:b3:
ea:b9:72:0b:4b:90:1a:0c:88:6b:6e:1c:0a:3c:90:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BF:C7:3C:86:F1:D4:9A:7D:8A:AD:25:46:EE:2B:22:A9:9A:54:89
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8e:e0:56:15:9b:e6:06:0e:5b:3d:53:dd:a6:c6:7e:bf:86:
05:ef:75:d0:42:85:94:78:d3:f9:07:c1:29:c1:52:33:14:ee:
c9:01:7f:f5:93:2c:0a:3c:e8:4c:9a:bd:2a:2b:a8:03:f7:30:
bc:cb:c9:61:cc:df:7c:3e:4b:84:89:3d:df:ee:c9:d2:ef:a9:
3f:2e:53:5e:70:a0:e4:22:bd:a6:e5:54:12:e1:46:f8:8c:41:
d0:12:e8:30:c9:ed:39:f5:22:63:5e:e7:ab:90:ab:92:6d:89:
e1:a2:44:21:d4:ed:b2:63:ca:88:03:8a:d2:88:d3:0b:ef:04:
90:10:06:55:89:21:aa:00:d5:a8:c8:2e:74:fe:70:a6:65:15:
26:b8:20:22:49:f2:b0:3d:16:ae:81:27:27:9d:8e:61:7f:d7:
a5:32:15:53:f6:47:ec:0d:74:94:58:78:1e:70:e3:53:c4:c9:
cc:e3:26:67:13:1d:bf:a3:97:fa:49:58:55:cd:41:c0:7a:db:
9b:52:88:93:88:79:31:87:0c:09:6c:45:8b:b7:50:8d:43:c8:
ad:f2:89:5e:34:ac:a2:9c:97:a9:6e:96:8c:2c:cd:57:36:7b:
b4:5b:2d:21:80:d7:90:8d:ed:c4:61:64:da:a4:d2:57:fc:69:
e4:29:bb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:49:54 2026 by rpki-client