Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft
File: 9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft (raw, json)
Hash identifier: 94aCoT1Mtr9xE73iW9aVO3QBdKIzp99mu7aolfmZ0BA=
Subject key identifier: A6:C3:EA:E5:A0:E7:D2:8B:27:DC:19:5D:B9:CE:BA:0F:CB:DF:82:59
Authority key identifier: F5:03:B6:83:D7:40:86:44:3B:D4:4E:6D:92:B7:17:76:C5:C3:51:70
Certificate issuer: /CN=f503b683d74086443bd44e6d92b71776c5c35170
Certificate serial: 01A0C85877085ACC631319EA9B6C6100E53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:35 +0000
Manifest this update: Tue 22 Sep 2026 09:00:35 +0000
Manifest next update: Wed 23 Sep 2026 09:00:35 +0000
Files and hashes: 1: 9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl (hash: xxN1thaRYysQ2/Gk6TUhxwYBlH2mnnSpu2VbtfrFbXI=)
2: HTNsugke4MWbq-KA8tY6qGsGFPU.roa (hash: Mi9NVud1o7sRwVPeXhNA2XrKJJxoAf4148gfz5Otapk=)
3: JJ3xHddZ0I1G4GC6ngsCT2Z1AKg.roa (hash: p0H/nJ8SSJawvhGyEkFr2hf/MirWYL1XCitw4pi102Q=)
4: _tSwCFIyoro2_8fyrvvppEiqvS0.roa (hash: TVivWAxuruX7VGe8Ch5xumfC8p0/dufE200KVqqhK0s=)
5: eFymynVjt6vNLX6dgR8AMKIzfPY.roa (hash: HmoMiqC9o5KMCkBBFDS5GyMpNG5AXy7PpIEPOGUNk+k=)
6: yPbTPygA04jm5b6RI-fjv8j8p54.roa (hash: Mw7So9/gLa1JzNMQ+Fuh1uffOAeMJx7QSDexSxpXoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:77:08:5a:cc:63:13:19:ea:9b:6c:61:00:e5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f503b683d74086443bd44e6d92b71776c5c35170
Validity
Not Before: Sep 22 09:00:35 2026 GMT
Not After : Sep 23 09:00:35 2026 GMT
Subject: CN=a6c3eae5a0e7d28b27dc195db9ceba0fcbdf8259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:ba:ca:94:c3:29:d8:5a:2a:32:42:95:18:
ee:7a:62:25:fa:e1:da:56:47:0f:4f:56:74:5f:e6:
71:ec:c4:1c:99:40:f0:8a:fa:5d:51:2f:5a:c2:67:
36:05:ca:7c:c8:cd:c3:24:1f:a1:59:79:79:0e:11:
1b:d9:a9:5c:01:91:69:e2:47:97:0c:c8:e7:4e:59:
c5:54:d1:b7:ab:0a:98:4b:a8:45:80:72:0e:f5:76:
f6:b0:67:3f:c4:5e:0e:22:fe:83:ef:82:8c:47:da:
ca:90:ee:71:5b:29:3b:8f:3e:e3:38:42:8a:53:75:
77:f8:a4:bb:15:c3:8f:b1:40:d0:2c:26:10:85:77:
1f:28:b4:59:5c:62:02:2e:57:7e:ec:b2:64:ed:cc:
c1:a5:a1:94:2b:9c:9e:6d:17:52:2f:8c:2d:cb:3b:
7c:91:55:ce:60:5e:c1:e5:f1:2f:d1:de:14:be:76:
42:a2:cf:10:29:78:89:ae:84:9d:a0:b2:ce:1d:68:
fc:08:76:38:ce:6b:85:2d:4e:79:27:0d:35:75:a5:
9a:3b:a2:e8:4a:17:58:d2:16:a2:78:84:e9:7e:93:
d2:04:bd:f3:0f:60:07:43:c1:a7:66:85:7c:67:26:
78:1b:a6:52:dd:91:27:1f:3c:63:83:bb:27:17:d9:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C3:EA:E5:A0:E7:D2:8B:27:DC:19:5D:B9:CE:BA:0F:CB:DF:82:59
X509v3 Authority Key Identifier:
keyid:F5:03:B6:83:D7:40:86:44:3B:D4:4E:6D:92:B7:17:76:C5:C3:51:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:85:b7:0b:e9:a7:de:aa:4e:38:20:3f:c0:87:8f:14:af:16:
83:2b:0a:cb:95:0a:23:99:1f:f6:eb:67:f7:42:75:b9:10:96:
c3:25:96:53:0c:54:ba:e3:6f:3f:6c:a4:4a:2b:d4:f7:14:5a:
d1:6e:48:f8:eb:ec:bd:a6:e5:a9:92:97:99:b7:cd:ff:6f:7b:
fa:d8:a0:81:04:c8:bc:0d:1b:b7:d9:37:77:89:b7:bd:39:0c:
1c:60:f2:cb:7b:53:18:26:8d:14:12:fe:cf:c4:b1:f4:5b:30:
0e:32:ce:f5:ff:fc:12:82:f9:17:53:ef:b3:ad:f3:b6:e1:60:
72:9a:2d:2d:70:cf:37:d2:ee:ca:bd:f3:1a:93:8b:e6:c3:65:
31:af:07:5b:8c:19:5a:ab:86:78:f1:ec:a8:23:56:be:3b:c8:
14:66:87:81:85:7b:2c:ab:89:d9:2f:07:dd:06:67:43:59:59:
c5:09:b7:f1:f2:43:d0:67:17:08:42:0d:0e:0e:49:b9:2d:d0:
67:0a:5f:d4:9e:c7:e7:a5:6a:e7:6c:cd:54:c4:0f:a3:60:24:
16:3d:02:b6:3d:73:c6:25:df:65:ed:fa:33:3a:8f:2c:67:bb:
3e:d7:b6:10:c2:81:dc:3f:be:38:63:e3:d1:2c:65:3b:d9:24:
d0:bf:0c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:25:57 2026 by rpki-client