Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: AqrGnGngMEVYTsSC5SWfbNRBvMWyoiZaeavqQ77TUr0=
Subject key identifier: B3:D1:B3:72:C6:58:E9:85:F5:C5:DD:91:FA:FF:66:FF:15:B5:6F:90
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 01A08B68B8AADC701B24CCC15EB019C7B2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 13:01:31 +0000
Manifest this update: Thu 10 Sep 2026 13:01:31 +0000
Manifest next update: Fri 11 Sep 2026 13:01:31 +0000
Files and hashes: 1: BKEbuwMgtraLYD7tz_bOlWvPTyU.roa (hash: 4+VeGIyK69ig1zU9o8l43jPylF7T3GhRdlEeEiB531Q=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: 7IgiKUG08PpI6hok7wCNFYF27cRrdbK5oXDTgIGEGP8=)
3: zr9U94ldVmEqABzp28N8U7oLDs8.roa (hash: uuO8FGDaDTUpNR5s2Koo87GcscBCUOkl1Mw1TeypQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:b8:aa:dc:70:1b:24:cc:c1:5e:b0:19:c7:b2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Sep 10 13:01:31 2026 GMT
Not After : Sep 11 13:01:31 2026 GMT
Subject: CN=b3d1b372c658e985f5c5dd91faff66ff15b56f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:6e:0c:25:e7:12:41:05:9e:8b:f0:fe:5f:
48:7f:fc:a3:80:eb:ac:a2:27:2a:fe:0d:8b:d4:c7:
44:eb:48:6c:34:f7:08:3a:63:24:1c:04:8a:d1:29:
ec:6d:ae:9d:fd:dc:c0:ef:14:75:15:ad:14:92:9a:
88:e4:9c:bc:a8:9e:02:80:04:b5:fb:64:56:3b:d7:
9e:65:d1:d4:67:f2:bc:09:6f:39:ee:20:e3:ff:42:
11:bf:2f:2a:c8:e1:02:b8:5b:af:e7:b4:da:5a:3b:
7c:62:ea:92:2e:84:fe:06:51:0f:11:4c:6d:c4:52:
89:0e:e9:fd:b0:6b:f4:e1:2a:f5:74:2c:f6:69:08:
86:29:e8:bc:8a:50:2b:40:b4:36:5c:d7:d2:17:a0:
eb:fe:b2:ae:0d:86:d9:e2:47:cf:b0:4e:44:9c:ec:
60:65:a8:b5:be:9d:a7:b0:14:98:6b:ab:6c:9a:dc:
73:32:97:4e:c2:65:a3:b8:4c:02:d9:b3:b1:c4:8b:
b7:db:b6:de:98:e7:25:1d:48:91:71:00:f6:8c:31:
5e:80:24:f9:83:bb:b8:63:9f:83:20:d5:cc:24:5b:
82:2f:57:81:2a:7a:14:56:d6:a2:a8:4f:0b:74:07:
4f:73:55:58:31:23:14:4c:3e:82:51:ff:74:f2:39:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D1:B3:72:C6:58:E9:85:F5:C5:DD:91:FA:FF:66:FF:15:B5:6F:90
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:35:25:cc:a9:0f:a0:82:ca:e4:50:3c:c9:62:d6:f7:39:73:
fd:ed:c4:36:e5:6e:27:41:f2:cf:9c:79:39:2e:a3:cd:53:3a:
c4:71:ce:34:4f:86:12:f7:d8:8b:eb:47:0b:8e:bb:87:a3:26:
18:4f:70:19:b5:3e:ee:cc:b2:e9:48:b4:37:80:d7:dc:a2:3f:
cb:98:60:22:72:45:21:8f:cf:5a:96:09:3b:67:61:90:6d:bd:
d8:29:78:73:e4:53:b9:06:60:7c:96:cf:f5:35:57:3e:91:1c:
13:d5:d5:a2:b0:54:09:f7:f5:88:a5:24:6f:12:63:f0:f6:74:
1c:aa:10:62:c1:ba:67:63:47:b5:7d:75:7f:51:63:35:8a:c9:
f6:9e:f8:4b:1a:a4:aa:47:f7:56:f6:28:20:7a:b0:0d:15:2a:
2e:10:4e:2b:9a:e8:9e:24:0f:10:31:30:5c:29:7d:e9:92:48:
0a:dc:81:2e:70:6e:6c:e9:e4:70:f4:39:96:43:63:4a:0b:24:
dd:90:60:5a:7b:f6:a3:95:5f:a4:e5:09:97:f3:e3:73:ed:cf:
d5:10:93:d3:f2:f5:24:71:85:51:92:3b:ad:bd:10:05:83:d9:
0a:20:c7:ef:da:55:a4:7c:23:d1:8e:c5:a1:e6:50:b6:40:2e:
cc:ee:42:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:14:37 2026 by rpki-client