Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: pEUm88FnAg3qdTpMC5hSLatkcuvm87Hz3CvhyXAfrfM=
Subject key identifier: 4A:7B:F5:24:9C:E9:9B:8B:13:96:AD:6E:54:3E:FC:FC:47:95:6C:DF
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 01A13D4A186E32EFB2B516F58FB61272334A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 02:00:28 +0000
Manifest this update: Thu 15 Oct 2026 02:00:28 +0000
Manifest next update: Fri 16 Oct 2026 02:00:28 +0000
Files and hashes: 1: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: J7E+5z2XMESXA4XSADtPlppaJQqYlObUlXv5UfveYW4=)
2: ZEzLOpu5XtR6NBna_6IDb8EqXXs.roa (hash: 3osUcSjQKH0ELMcPBLnQ81viVvl9FJ67k0/UaKaDqp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:18:6e:32:ef:b2:b5:16:f5:8f:b6:12:72:33:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Oct 15 02:00:28 2026 GMT
Not After : Oct 16 02:00:28 2026 GMT
Subject: CN=4a7bf5249ce99b8b1396ad6e543efcfc47956cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:b1:9f:ba:b4:44:c7:b7:6c:c1:8f:be:7d:
a9:ba:f3:33:37:e8:db:bb:7b:7d:e8:ce:e3:fd:45:
0d:17:5b:80:b4:57:61:7d:fa:6d:02:30:4b:94:28:
03:3f:5c:78:bf:33:d4:21:b0:1b:5d:4c:93:44:0f:
cf:aa:8a:ce:13:e5:46:1a:65:58:ed:8a:b1:05:41:
7d:5b:42:6e:40:c0:e1:d0:9d:1c:ac:0f:e6:cf:81:
36:2e:bc:5b:f0:29:5d:75:b7:9a:1c:e8:62:03:40:
5d:08:a2:67:96:ef:6c:c9:a1:77:6b:81:9d:88:a4:
f6:7f:f9:9c:fd:68:52:95:26:0f:7a:c3:97:0b:c0:
8b:01:0c:06:cc:63:61:29:a9:b7:14:e5:bd:1f:83:
67:36:2c:7c:70:51:73:37:07:6e:ec:62:06:02:a8:
e3:0f:34:57:4c:75:f8:01:6b:ea:d2:a0:56:92:81:
65:e4:e4:b2:d0:d5:49:a4:57:80:c5:b5:e0:e0:67:
a2:28:ac:23:51:e5:07:41:ea:00:d0:e8:a6:84:7a:
50:23:d1:02:8d:b4:48:da:ea:2a:79:7b:60:81:10:
0d:9b:d8:38:59:80:22:56:2b:c9:b2:e8:fb:56:d9:
9c:bd:1c:33:a5:4f:64:cf:7b:fa:1d:b1:e5:78:d4:
bd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7B:F5:24:9C:E9:9B:8B:13:96:AD:6E:54:3E:FC:FC:47:95:6C:DF
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:99:eb:4a:3f:ed:af:ad:42:3f:b9:09:7c:0a:d8:ab:a1:b0:
a7:b0:a4:53:60:61:51:95:b7:48:4f:c8:b5:3a:0a:49:0e:27:
48:e3:86:de:16:5b:d4:b0:98:45:5b:f5:de:0d:08:ae:54:ca:
4f:05:50:29:87:5f:37:cc:c4:07:2d:03:e5:2f:1b:64:fd:37:
4a:a9:bc:09:24:7a:72:6d:aa:46:c8:f0:a3:e3:b0:5e:3a:95:
6d:cd:20:0f:f9:b9:52:e4:6d:47:d0:bb:24:c1:e4:cf:b8:a9:
c1:30:46:6a:5c:7e:22:27:65:ae:6b:ea:69:6f:4a:57:71:a1:
1f:c3:ae:6c:d5:c0:62:10:24:2a:0d:f2:e1:a3:66:58:98:41:
88:57:54:5d:fb:83:db:ea:ac:9d:7a:20:6e:74:e4:67:95:c7:
12:52:7a:ec:99:a3:68:05:d0:14:f6:fa:1e:7b:c9:67:0c:de:
c0:f8:f8:de:8f:d2:27:ae:3b:6b:f4:00:87:e6:12:68:74:48:
8e:0c:78:a6:df:50:58:a8:70:4e:6d:30:d0:c9:a4:9c:4a:8f:
33:54:75:b2:59:4a:e1:43:9f:5d:01:38:e2:84:3e:d7:27:59:
b2:31:bf:86:80:72:7e:90:77:ac:f1:1f:8c:f8:03:97:99:78:
4b:85:ed:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:03 2026 by rpki-client