Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier: VRgbHl8AZwJaBXuoVj4z5pfLkcZ2wxil2OVQ00ONFok=
Subject key identifier: 26:D2:EA:33:35:8A:D1:0A:C3:AB:68:20:0C:99:B4:61:68:5B:77:4D
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 01A0C5FBEE109A5756481BF63B1170AD6059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 22:00:17 +0000
Manifest this update: Mon 21 Sep 2026 22:00:17 +0000
Manifest next update: Tue 22 Sep 2026 22:00:17 +0000
Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: weoBlpuLmQ1zQ1NduwAxT8Ko4MD3ds1370hu2rgS9R8=)
2: _WoEsqjGda06FNvYzNcE2_IEZYM.roa (hash: goW3pvaXPQUMEleV0Ier3m35JeMofiuKmtRcD80IT5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fb:ee:10:9a:57:56:48:1b:f6:3b:11:70:ad:60:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Sep 21 22:00:17 2026 GMT
Not After : Sep 22 22:00:17 2026 GMT
Subject: CN=26d2ea33358ad10ac3ab68200c99b461685b774d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5d:b1:16:39:5f:d4:36:9a:de:76:66:aa:bc:
48:4a:95:7f:55:a7:8f:3a:74:01:9c:68:ef:54:ad:
b2:55:e5:c9:08:d4:c7:1a:55:a1:7a:2c:6e:6c:7c:
4d:01:4a:72:aa:d0:79:8f:89:c6:7a:a0:3e:fd:a1:
c5:fc:c9:b5:7c:1a:2d:9d:1a:4e:a0:16:c4:23:4e:
d0:9d:1b:05:f2:57:6a:34:9f:05:48:18:08:f5:ee:
b9:b9:74:8f:95:98:dc:20:86:de:26:a2:84:ae:72:
fe:55:ae:cd:2b:f9:28:77:96:f9:a9:47:c7:d8:0c:
28:bb:c1:e1:2b:e9:a3:92:d5:cb:3f:4c:de:f6:16:
18:37:10:00:a5:9c:79:f3:97:27:99:d1:8a:33:25:
26:15:aa:f1:39:fa:01:84:36:32:8d:98:fe:3a:e4:
d3:c4:ad:33:5a:92:ec:e6:55:dc:67:6b:70:87:44:
6d:39:5c:b6:10:85:73:b4:35:37:e9:16:e8:09:0c:
db:2b:e7:e8:e5:b9:9b:b8:54:82:5f:04:3a:1a:a6:
1d:83:cf:02:51:ae:19:db:4f:0b:76:e5:86:35:fe:
a1:de:b0:1a:a5:fa:d8:b4:33:28:26:3b:02:1f:3e:
13:19:3c:0c:25:71:05:4c:c8:51:37:77:66:66:ea:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D2:EA:33:35:8A:D1:0A:C3:AB:68:20:0C:99:B4:61:68:5B:77:4D
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f3:2f:da:95:6b:eb:33:40:4a:b2:03:49:e8:71:c2:26:4f:
b3:47:a9:1e:34:a9:2b:a7:2a:ac:30:2d:89:ee:1d:89:bd:86:
16:8e:b0:90:a7:c7:5f:9c:1a:7e:a2:59:13:dc:de:bb:3c:2b:
db:55:5d:fa:99:57:fd:b0:00:19:10:3e:f1:88:76:f7:6f:40:
d4:de:6c:7d:e6:aa:99:22:0d:2c:69:68:72:61:4b:63:db:55:
d9:e4:3f:39:27:41:a3:37:c3:23:e3:c3:ab:d4:5c:5e:9d:85:
ff:7e:0a:bf:09:8f:86:eb:6e:42:c6:03:6c:80:d3:df:a2:a5:
53:99:a2:bb:61:3c:92:f0:fb:73:16:54:78:ac:ad:c6:b4:81:
48:d2:80:ef:18:5d:7a:59:d9:3a:92:52:30:67:b1:50:ba:b2:
9f:fe:5f:7e:e1:2e:77:2d:f7:44:12:d8:94:c4:49:e9:f7:f1:
e8:0e:f5:0d:43:71:7d:a2:92:c3:cf:6f:a4:bc:85:9f:04:3d:
7f:c1:79:64:b2:35:5b:57:44:93:7c:e0:57:97:ee:f5:e7:19:
b1:bf:ef:c2:ac:b3:82:df:7f:1e:46:4f:6f:18:8d:8e:7f:a9:
61:0c:90:e5:31:aa:dc:ea:a8:b2:e6:9e:f3:d3:51:0d:6b:97:
99:77:1b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:13:57 2026 by rpki-client