Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
File: mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json)
Hash identifier: FVvizbI9jdNADF2XMxx6x7Pbko+tPu1ApRTDmo1x+KI=
Subject key identifier: 4C:CE:A2:54:F2:B5:63:F6:75:CF:D7:82:47:F7:DE:7D:68:3C:2D:E2
Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Certificate issuer: /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Certificate serial: 01A0C40E56E3475514760E5CB9B20DE5EBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
Manifest number: 0A35
Signing time: Mon 21 Sep 2026 13:01:08 +0000
Manifest this update: Mon 21 Sep 2026 13:01:08 +0000
Manifest next update: Tue 22 Sep 2026 13:01:08 +0000
Files and hashes: 1: Xgkh2jqWshIrm_XP38KT2hJAFLI.roa (hash: HtXZbHm1lMY4MWtIUl2UqL3oGRY9eBOP4/14fbeHHSQ=)
2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: nyGHRbTP7dyTGwIA1kwCafFWq80cW1YyJd7M9Bq+N9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:56:e3:47:55:14:76:0e:5c:b9:b2:0d:e5:eb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Validity
Not Before: Sep 21 13:01:08 2026 GMT
Not After : Sep 22 13:01:08 2026 GMT
Subject: CN=4ccea254f2b563f675cfd78247f7de7d683c2de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:8c:5d:fc:a7:5f:5e:e6:bd:5e:94:0b:0f:1e:
2f:93:f6:c2:07:db:27:0d:42:69:f7:75:12:b7:55:
21:bd:a5:2a:d3:c5:d4:28:d1:84:39:80:88:9c:f8:
c9:a0:73:85:2c:05:4c:0b:59:f2:fc:4c:9a:93:43:
02:35:1c:bf:a8:83:91:14:2b:61:50:a3:10:f5:3b:
f2:76:14:d7:3b:e0:4c:04:a1:00:17:e6:11:a6:ef:
3d:15:06:98:01:35:4a:b0:0d:d0:cd:1f:3c:d4:dd:
36:9b:55:d7:b7:b3:56:36:b8:fc:d0:2c:8e:9d:1e:
a1:5c:a0:86:d8:22:41:b3:53:c6:b8:ee:50:cd:19:
4c:3d:6d:25:bd:aa:ec:d5:e2:5f:9c:7d:08:14:d0:
e9:17:d5:72:69:e8:1d:22:06:fd:d5:ee:e3:24:07:
f7:b0:36:01:68:de:02:36:02:e3:21:f7:57:6b:3d:
22:4b:a5:8f:90:00:d6:93:3d:9d:78:97:5f:ff:f9:
fe:3c:ea:2e:15:d1:ba:93:7d:cf:05:4f:6c:da:9a:
46:bd:b1:e3:bd:4e:d4:e2:38:01:8e:5b:e5:78:90:
53:8f:00:75:88:93:27:f9:dd:ac:d1:bf:90:65:f9:
49:9b:43:17:0c:74:6b:8d:db:bf:6e:81:05:7f:46:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CE:A2:54:F2:B5:63:F6:75:CF:D7:82:47:F7:DE:7D:68:3C:2D:E2
X509v3 Authority Key Identifier:
keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f7:0c:20:43:ef:f3:04:b9:d1:f6:c7:e6:be:76:2f:e1:7b:
1c:6b:73:a1:70:6d:d2:a5:92:70:24:83:2d:11:e6:8e:28:16:
53:9a:60:c1:c4:e4:40:d9:94:15:61:c2:a3:12:e3:5c:54:89:
4f:d2:7e:04:5b:5d:1c:b0:36:17:e7:6a:db:a3:82:22:f4:5a:
13:80:59:94:55:93:2a:f7:6c:96:d7:91:9b:f0:82:5d:c2:84:
ea:ad:2c:62:3c:38:6d:9b:2c:22:a2:ae:d7:96:1f:d6:c0:78:
40:87:da:b9:79:41:56:cf:d0:a6:68:b8:f2:7f:5d:b4:94:bb:
a1:d5:27:be:47:78:4b:bc:31:67:8f:6c:88:8a:b5:99:9e:a3:
eb:4b:7a:ce:0e:17:fa:e9:61:38:55:40:fc:1b:f2:70:73:df:
e4:2a:bc:cb:89:9e:2d:8d:5b:c0:1e:23:23:24:2f:bd:e0:aa:
d4:f4:82:0c:e5:42:a5:36:22:75:36:44:1b:fa:a7:2f:bb:66:
ad:4e:bc:2d:42:1c:7e:bd:b7:73:43:27:fe:01:e6:5f:f3:6d:
19:93:55:7d:93:e8:ae:a1:95:0b:b2:ba:db:17:73:b9:a2:75:
68:2e:9b:d4:3a:e1:93:05:f8:f7:44:6c:00:a2:4d:40:da:96:
c6:f8:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:12:54 2026 by rpki-client