Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json)
Hash identifier: +753rwIHrvfmEqfnb0lk3xCDd+5nAxTfeY9YuF+RmqA=
Subject key identifier: CA:01:71:B8:59:19:1D:05:7E:FD:80:38:19:60:CC:DE:7D:E7:32:65
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial: 01A1DF4CAF7E7DDD21CFA9F0D95D13922F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
Manifest number: 09C7
Signing time: Sun 15 Nov 2026 13:01:47 +0000
Manifest this update: Sun 15 Nov 2026 13:01:47 +0000
Manifest next update: Mon 16 Nov 2026 13:01:47 +0000
Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: bAWsPtap40jQ0KkA3vr7cnTst8kNOmnL7zovUO0pAKs=)
2: fBJnMHALZfcjzCrh2ePgybbFbm0.roa (hash: O2YCNOyi52ka2IOCrOYs4Cry49I7H3lrzo66p5voKNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:af:7e:7d:dd:21:cf:a9:f0:d9:5d:13:92:2f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
Validity
Not Before: Nov 15 13:01:47 2026 GMT
Not After : Nov 16 13:01:47 2026 GMT
Subject: CN=ca0171b859191d057efd80381960ccde7de73265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:a7:0a:0c:c2:6f:82:ba:56:eb:df:67:b8:
f6:03:4b:fd:cd:2c:4f:ca:f7:27:9c:b6:5e:7f:f5:
83:52:ce:47:77:56:df:dc:1c:2e:8e:65:c3:6c:6a:
e0:01:ad:f7:06:f0:17:e8:e2:3f:11:39:ad:cb:42:
6a:83:a9:6c:2d:9a:86:f7:26:99:db:58:e3:34:1a:
1f:2f:94:f4:1e:c3:18:51:d2:6b:e4:92:c2:b1:88:
d6:42:59:81:d9:34:54:b8:8a:38:26:15:4f:67:74:
72:66:6c:26:c8:98:b1:91:63:dc:49:05:90:9a:7c:
3b:1d:53:f9:50:32:e6:ca:13:eb:f4:21:97:56:ea:
15:b7:af:0c:89:ba:bc:f3:9c:0a:09:83:61:45:f3:
99:0d:85:b4:43:a1:0b:cd:79:f7:52:b2:8a:50:ad:
a2:0e:d6:9b:ca:ad:32:5c:8a:92:4c:54:09:c9:dc:
5b:00:c9:85:f9:bc:62:69:ac:30:f6:7f:34:f5:99:
0c:7c:28:08:e4:cb:3b:40:3a:50:f3:ee:ab:bc:af:
13:47:9e:87:ad:de:43:de:58:19:f7:cd:0a:20:48:
4e:52:1b:68:e0:d5:17:b2:f2:0f:09:61:bc:e1:1f:
7c:65:81:eb:9a:fb:d0:d5:8e:7b:47:a2:c8:9c:08:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:01:71:B8:59:19:1D:05:7E:FD:80:38:19:60:CC:DE:7D:E7:32:65
X509v3 Authority Key Identifier:
keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:70:0d:ca:2a:81:12:3e:a0:39:54:ca:a6:99:7e:5f:03:ac:
f8:e5:16:d8:f4:5f:43:3c:67:75:b0:f6:b4:1e:cd:1f:e1:a6:
b0:ee:0f:29:8c:ce:9f:dd:94:b5:24:db:41:c0:bf:2a:d8:a7:
82:d0:4f:2c:c6:0f:ed:29:68:77:d9:12:31:6d:de:bf:9c:df:
f8:80:9d:c8:96:e1:b7:64:72:84:78:52:d0:4a:63:1b:95:1c:
91:f5:66:95:b5:a4:c4:c9:cc:c2:ee:cc:1c:12:fc:d5:af:7c:
f3:4c:42:c9:26:25:50:71:a4:ee:49:e8:47:b3:8c:4b:02:fd:
e9:51:c5:18:41:c2:64:c2:04:87:91:5d:7a:17:e6:ac:d4:3c:
bb:2a:88:41:2b:b1:f8:8b:53:18:44:e5:64:c1:10:0b:a8:ed:
31:99:3a:fb:de:80:2c:da:f1:36:9c:c3:87:49:2a:ab:04:b2:
89:a4:62:8d:71:00:b4:73:ff:02:19:f1:55:72:60:0e:c3:db:
aa:ad:33:c7:51:2c:56:64:1e:e0:1f:19:93:2e:d6:f4:ca:32:
b1:6a:21:14:af:22:51:4e:f9:94:37:2c:ab:c0:c6:7b:61:9f:
71:ac:ee:1c:9c:f7:ab:e6:e2:06:a1:aa:88:64:7f:56:c8:45:
b5:1a:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:25:26 2026 by rpki-client