Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: 6FgR6YMcfqeX2sHXMo71wDnuGq8ZtkTDU97srMD4Ls4=
Subject key identifier: 24:07:0D:89:31:85:75:FB:8B:D0:4D:65:5F:06:B8:AD:C1:46:C8:B5
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 01A0BF1E10E402D8800435BF15CDC6D1D53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 1A7E
Signing time: Sun 20 Sep 2026 14:00:13 +0000
Manifest this update: Sun 20 Sep 2026 14:00:13 +0000
Manifest next update: Mon 21 Sep 2026 14:00:13 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: gGJJl3bANp+9ybpoS41zmLgpdCK6hUAS6X9swIqbcIA=)
4: CBb_QUmnyPXNyR2rB5w8NXHg72U.roa (hash: bD1I4HJtFjaX/Nr5+DpgVpAOzK/Hlp8fWNP0ho2Ow6s=)
5: ccMww59mDMVNflZi8lXAUqrYmZg.roa (hash: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=)
6: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
7: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:10:e4:02:d8:80:04:35:bf:15:cd:c6:d1:d5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Sep 20 14:00:13 2026 GMT
Not After : Sep 21 14:00:13 2026 GMT
Subject: CN=24070d89318575fb8bd04d655f06b8adc146c8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:c9:5c:74:41:61:71:f7:d1:93:ab:3e:62:
d3:b2:77:e2:ed:fd:37:44:f0:94:a8:cd:f3:24:17:
c6:31:15:52:5f:e1:aa:7c:a0:3b:6f:ef:0d:67:ef:
e8:d9:3a:00:1b:50:fe:02:32:12:31:68:90:90:60:
e2:8d:1a:c1:99:13:42:e0:10:e6:35:9e:c7:86:0a:
07:c5:84:ac:26:be:15:41:8c:0a:82:50:b6:cb:0e:
12:4e:f0:88:a5:91:3d:cc:c0:6c:5a:09:9a:4b:fa:
ca:62:f4:aa:5c:80:f4:6a:29:42:ea:69:31:d7:44:
09:f9:64:5e:45:61:0d:85:d4:9c:01:bc:ff:a3:78:
73:10:6f:34:98:fd:4e:c3:5b:7b:1f:6a:48:83:9c:
ba:ee:10:d0:6f:32:16:07:16:1b:58:92:d5:82:35:
31:82:5f:65:b0:47:9e:70:ed:2e:4d:b5:5a:4b:8e:
3b:f4:68:b7:8f:d6:0b:69:7e:3a:a8:0e:85:3e:5b:
06:f4:d7:ee:f3:b7:7b:6e:f9:f7:f1:24:cd:9b:71:
46:72:5b:09:58:fe:1b:4c:a7:ab:ea:5a:a4:08:90:
da:01:ae:83:1b:4b:de:b5:dc:7d:a5:5a:c6:68:55:
b5:7c:12:7b:27:c6:74:23:46:16:ae:b3:23:2e:41:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:07:0D:89:31:85:75:FB:8B:D0:4D:65:5F:06:B8:AD:C1:46:C8:B5
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fd:66:66:33:92:6e:58:cc:f2:4e:fc:1d:57:66:f7:8b:6d:
df:b6:1a:ad:8b:95:48:e6:da:72:61:0a:25:ac:5c:c4:65:bb:
5f:11:38:bb:4d:e8:2d:48:21:c1:b4:e8:c6:74:d9:31:fe:56:
41:3f:7a:cb:e2:a2:44:9c:e4:14:1b:46:14:ea:df:72:21:c0:
1a:54:4b:76:8a:88:58:31:6a:7a:ee:88:ed:35:da:2e:55:18:
62:29:9a:8b:57:9c:b3:cf:6b:2a:67:7e:1a:a1:dc:d5:e0:38:
17:77:db:ea:ee:67:03:5e:d0:dc:29:fd:2a:70:ab:e0:71:a7:
6d:42:08:62:4d:f1:da:3d:11:1c:af:1a:ba:9e:83:91:f7:8f:
85:b9:ab:84:49:b2:3f:5b:6c:f0:5b:31:b7:e3:80:ba:3e:61:
a2:28:e2:ba:20:e6:58:ab:47:22:1f:17:fd:2f:0c:c9:eb:9f:
4c:8c:c1:7a:7d:6a:a0:6b:43:b9:ac:29:da:7e:a1:45:1b:41:
8e:28:b7:98:79:dd:25:d1:6e:88:b1:df:b5:14:43:fb:0e:1d:
a9:03:1f:f4:01:20:5c:a5:0f:0b:d1:cf:a2:ec:8f:42:77:42:
14:73:73:96:ca:8b:ac:e4:59:dc:d5:11:12:d7:51:69:ef:54:
45:fa:f1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:28:36 2026 by rpki-client