Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
File: 9uGk5drZ5MwU4BaRDsS2adXjq5w.mft (raw, json)
Hash identifier: 5eI3GJ1iuswqm2Wyqje/NJI8HahFd14Jo6sRd4A13cU=
Subject key identifier: 53:71:DE:CE:09:F9:4F:B3:FE:43:57:BD:DE:F9:B4:8F:31:53:D2:EB
Authority key identifier: F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
Certificate issuer: /CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Certificate serial: 01A0BD2FF315FD38369BA07405AC1999EA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
Manifest number: 027F
Signing time: Sun 20 Sep 2026 05:00:31 +0000
Manifest this update: Sun 20 Sep 2026 05:00:31 +0000
Manifest next update: Mon 21 Sep 2026 05:00:31 +0000
Files and hashes: 1: 9uGk5drZ5MwU4BaRDsS2adXjq5w.crl (hash: voHWpx92KcWoroxrbHkJl+6pHZ6i4UrMK1FW0IKaPHw=)
2: H_uYynhuG6l8wZqNzHCCCngrv6I.asa (hash: cNBW9xKMdJGhXlb3YQvmEsKCGDZEJR6jaSu58wTwgns=)
3: SRCK7Ufu64KsijFRcRFiAbmnlfM.roa (hash: r3tIqkepOEqyJpInWtiArXc2WfvA20Y21WU/4jD8OPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:2f:f3:15:fd:38:36:9b:a0:74:05:ac:19:99:ea:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Validity
Not Before: Sep 20 05:00:31 2026 GMT
Not After : Sep 21 05:00:31 2026 GMT
Subject: CN=5371dece09f94fb3fe4357bddef9b48f3153d2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:4e:0e:ef:c6:96:0f:c9:66:74:bb:6b:5f:
2e:f9:c4:7d:fe:9c:f8:10:7c:6a:00:03:db:72:35:
7b:95:12:f3:35:d3:09:1b:b9:fb:e6:fb:f3:f6:8e:
77:d6:cb:8b:ba:ed:76:5e:c0:96:2f:9c:94:9d:ff:
0e:91:5a:88:8a:07:cb:91:ce:fc:7a:1f:4e:bf:46:
01:cb:03:76:91:22:b9:49:52:dc:95:f9:6c:e5:49:
4a:80:3d:6a:ce:3d:ea:af:d4:fe:eb:22:d3:dc:6e:
bc:6d:69:f6:65:6f:76:84:93:a8:44:aa:eb:c1:83:
ff:83:4a:4f:d6:c1:d9:9b:20:d8:e8:dd:f1:54:df:
74:ee:7c:03:db:0d:65:92:e5:74:f4:20:89:d2:11:
7f:b6:45:c5:90:92:b5:36:43:98:f2:dd:20:1b:ee:
ab:71:17:bf:e9:b6:2f:ca:5f:18:94:ac:da:7d:a4:
8f:fa:68:a4:c1:88:95:41:68:a9:8f:af:06:2b:71:
9b:a4:b7:44:22:19:88:0f:9c:44:a1:b8:93:ac:d2:
b8:b1:32:0a:21:d9:bd:d4:ec:09:40:b9:74:d9:cc:
66:60:06:63:3b:b5:84:11:82:fe:48:ba:10:c8:2a:
d9:66:9d:51:12:62:ab:97:99:cb:a9:e3:68:88:42:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:DE:CE:09:F9:4F:B3:FE:43:57:BD:DE:F9:B4:8F:31:53:D2:EB
X509v3 Authority Key Identifier:
keyid:F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bb:0c:13:52:87:64:18:31:20:62:7a:3a:65:5f:8c:6a:f9:
2d:4e:7f:88:55:a4:c0:a6:28:21:9d:c7:8d:06:96:c5:7e:13:
24:4a:fb:5d:37:0d:2e:3a:bc:c3:0f:d4:e1:fd:e0:af:1a:79:
6c:54:38:5c:98:79:a7:74:61:d7:ca:6d:d2:3a:0f:5a:52:32:
25:31:87:47:9d:5d:2b:fb:ed:2f:ee:c5:3a:4d:9e:f8:f2:20:
cd:92:69:dc:31:e0:69:da:8d:3e:ca:62:e3:ed:45:5b:67:3f:
56:c9:60:29:69:10:38:06:38:d3:00:bf:30:81:27:be:2a:d8:
ac:b4:38:12:ed:9d:4a:6b:59:61:8d:56:0a:32:08:df:4c:7b:
a3:3b:11:6d:6d:f4:72:ed:c6:94:f9:f1:00:ae:09:6e:78:c1:
66:9f:1b:08:1d:20:3a:fb:b8:fa:94:30:be:85:11:da:89:ef:
00:f0:7e:f5:e3:1e:06:3d:1c:38:9b:c3:30:91:3b:1e:2c:23:
62:16:dd:44:15:a0:fa:86:0e:7c:2a:af:48:23:16:d3:11:82:
15:92:93:b2:8a:9e:7b:b5:3f:cd:91:01:62:60:b6:ff:f9:5e:
99:d9:5c:6e:f1:79:26:39:0a:53:70:ff:66:d1:fc:4a:fe:fd:
7c:32:d4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:51:51 2026 by rpki-client