Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: Q7BFkV3z7ar/3wN+e6Gkk9A3l5CminR34ikSXoZaTMk=
Subject key identifier: 52:46:98:89:7A:9E:5D:66:F6:CB:EA:76:DE:B4:48:D4:FD:AB:97:FA
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 01A13E26EF339B265358FE3226D1552FF6A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 11B2
Signing time: Thu 15 Oct 2026 06:01:41 +0000
Manifest this update: Thu 15 Oct 2026 06:01:41 +0000
Manifest next update: Fri 16 Oct 2026 06:01:41 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: QXqsvP9msdXRrw20r7Z69QRcjiY2ltBoeWHOPNBjJ8o=)
2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:ef:33:9b:26:53:58:fe:32:26:d1:55:2f:f6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Oct 15 06:01:41 2026 GMT
Not After : Oct 16 06:01:41 2026 GMT
Subject: CN=524698897a9e5d66f6cbea76deb448d4fdab97fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:8a:04:da:29:c3:29:d0:db:c0:e7:b0:44:
6c:c3:44:d6:dd:e4:a8:ca:53:5e:57:25:e4:89:6b:
31:1c:40:1b:93:6f:41:7f:f7:e6:e0:94:8e:f8:ee:
cc:3e:cd:9e:0b:f4:12:be:34:ef:f2:d1:2e:31:1d:
c0:a6:7b:f1:6a:e0:8f:29:4d:34:fa:67:1d:2b:ee:
d8:dd:6f:39:6c:0d:bf:76:29:eb:5a:61:56:ed:c0:
4b:aa:7b:d2:50:72:42:b1:2f:31:04:c1:c1:f2:82:
d5:e4:8c:65:29:98:ad:7c:2f:7f:aa:09:56:56:df:
65:2a:39:7c:fd:e1:4f:04:01:bc:e6:68:2b:5f:df:
43:b5:4d:04:5e:ee:a7:69:93:be:b1:e1:dd:b5:95:
47:44:d1:a2:f4:39:ec:c5:ce:1a:1d:8f:78:1e:20:
a5:f3:5c:8c:e4:ee:23:48:d5:b7:5c:7a:cd:43:7e:
d2:d8:b4:af:3f:09:7a:e8:f4:7d:42:95:c7:6b:a0:
f7:af:50:80:16:a0:6c:5e:b5:81:bc:26:79:57:39:
7a:e6:d0:7d:ff:81:d7:a8:87:83:07:be:18:f5:b0:
bc:2c:db:76:93:78:13:5b:8e:a4:6d:40:bf:c8:bc:
ef:af:6f:dd:ab:f6:8e:e2:02:61:9d:2d:0e:2f:ad:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:46:98:89:7A:9E:5D:66:F6:CB:EA:76:DE:B4:48:D4:FD:AB:97:FA
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:76:2c:41:51:84:53:1b:06:9c:9a:06:aa:e9:56:31:57:8c:
aa:a5:e8:2b:12:72:86:17:41:46:1c:86:f1:7e:8d:43:44:fc:
41:77:70:ea:32:49:64:68:05:d7:01:d7:42:46:13:44:2f:8b:
c3:17:a7:52:5c:63:0c:c3:de:51:9b:cf:65:6d:5e:02:11:d4:
e9:f6:2d:96:a5:8b:80:7f:50:b0:55:2f:40:a8:28:fb:98:f8:
15:04:68:34:96:de:64:57:9e:d4:5d:43:0f:f9:59:fc:58:bb:
9b:26:5b:7c:7d:cc:10:f3:22:d6:c9:d2:48:21:2b:ba:65:8c:
65:43:1b:0a:fb:bd:2b:70:50:a4:03:ca:34:18:16:7c:1e:db:
e9:18:ca:67:56:b3:c6:04:51:d4:8e:dc:59:f8:eb:9f:9e:d3:
ac:ca:67:fd:00:95:d7:fa:f3:37:21:da:24:fb:d8:04:f6:e4:
3b:c9:8e:56:ae:64:49:98:5c:d6:9b:a3:87:7e:a0:fe:ca:25:
b6:01:2e:dc:5f:22:d5:d3:4a:f1:f9:53:5c:39:75:33:5a:e3:
fe:85:de:6f:e0:8e:a5:0c:84:d7:ec:55:3b:7d:56:b8:c1:25:
9e:34:14:dc:c5:ce:28:28:32:73:8e:c7:94:8c:3d:13:82:4f:
f8:3f:2f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:24 2026 by rpki-client