Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier: F5ETpwOzGUvDCdmcULE7CbvoMkMASrj4diEl0eJXoCI=
Subject key identifier: F4:5D:5C:9B:B7:B9:24:44:92:FA:EC:A5:35:32:77:E4:C7:F2:1A:B4
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 01A1076EDAE7A24FC3226796DBCFFECDB229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number: 1AA3
Signing time: Sun 04 Oct 2026 15:01:07 +0000
Manifest this update: Sun 04 Oct 2026 15:01:07 +0000
Manifest next update: Mon 05 Oct 2026 15:01:07 +0000
Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: JBvdWAo+aidfqxT0apK9vAVPEPd+d7De9ZxdASee31k=)
2: lc3C3wc32zcnHrU1F3n1Adhu2_g.roa (hash: 799Y5VOF1laQ/F9V5y2xMZ9oXgKkk02hVDbVY//MZDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6e:da:e7:a2:4f:c3:22:67:96:db:cf:fe:cd:b2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Oct 4 15:01:07 2026 GMT
Not After : Oct 5 15:01:07 2026 GMT
Subject: CN=f45d5c9bb7b9244492faeca5353277e4c7f21ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:0a:53:0c:d4:1e:ba:0b:d2:40:ed:1f:83:
c2:d6:d8:13:90:3a:d6:dd:e4:cf:7f:71:9a:c9:03:
36:d1:18:14:3f:e0:dd:10:ab:8f:2b:cd:85:dd:1e:
1b:f2:49:c3:71:87:18:6f:e5:4a:7b:9b:98:6b:78:
e0:57:14:12:55:b4:b1:b2:e5:28:fe:c6:9d:a5:1a:
b4:ff:1d:35:2a:e7:d7:9f:3d:49:32:b2:af:60:24:
ac:36:a2:ce:26:33:68:62:7a:d1:b7:96:3f:7b:04:
c7:29:18:45:5b:6e:48:3b:e8:ef:38:a8:88:98:f1:
26:23:53:cb:d1:37:ca:95:7b:d9:2f:91:61:63:3a:
57:c0:42:26:88:61:e2:60:ed:1d:25:3a:a9:2e:48:
aa:19:57:a6:9e:00:fd:c0:ae:be:05:ec:b0:36:9f:
a4:2a:3f:61:88:4e:90:e2:b1:e1:86:f6:78:ee:e1:
b3:08:0d:1d:8e:fd:2e:f3:f0:0f:86:79:58:df:05:
e5:92:83:77:78:b5:53:14:82:5d:f0:5e:f4:9b:c0:
9e:9e:71:c6:fe:0a:51:c1:7d:6a:10:74:b8:c3:99:
19:2d:7f:17:93:10:94:58:ce:30:90:40:4e:0f:a1:
21:34:ab:b3:8d:dc:07:a1:6d:60:9f:44:67:ae:2e:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5D:5C:9B:B7:B9:24:44:92:FA:EC:A5:35:32:77:E4:C7:F2:1A:B4
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:46:cd:ca:a9:e9:31:91:eb:9d:ef:1e:dd:1a:1d:34:d9:d7:
fd:2a:76:ea:21:7e:c2:89:9b:78:2e:a9:2d:b4:72:cc:dc:cf:
0b:77:0e:40:a2:4f:fe:14:cb:db:79:ee:ea:9e:63:42:ce:1c:
8e:62:e2:82:78:8c:19:b0:a0:53:56:f9:ff:3b:90:d8:1c:48:
73:90:c5:ca:fd:93:fe:42:7c:2d:3d:ba:73:02:86:93:2c:c0:
f5:01:96:88:bc:d0:f5:d5:94:34:c5:8a:56:e7:05:6f:d4:b5:
df:1c:8b:22:f9:b3:54:b9:e5:79:c7:85:ad:b1:8c:6e:64:40:
09:e9:a4:9b:73:77:9d:61:da:02:64:18:e5:4a:6c:a8:e1:72:
ea:4b:5d:96:2a:53:4e:50:d3:18:83:56:1e:79:84:b0:46:dc:
87:f3:e4:49:f6:89:08:5c:be:07:f9:a1:91:98:e8:1a:54:8a:
4c:c0:64:7e:f5:1a:97:30:e3:19:3f:07:3e:d9:59:20:5d:ae:
b6:ba:a8:0b:dc:5e:29:9d:c4:cb:19:a6:42:e5:b3:39:7a:13:
3d:28:b8:c7:84:6b:b8:4b:63:52:3d:1f:00:6f:f1:71:6a:fb:
46:22:36:5d:74:ca:dc:4b:43:fa:a7:b1:ba:eb:92:ae:54:6b:
b9:10:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:51:41 2026 by rpki-client