Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: ticuIO86MH+XOp28GtL0y/64wfXd5Myul9x3oLW9XtA=
Subject key identifier: 8F:B5:92:3E:4F:F6:CD:33:5B:B2:C8:DE:B8:7A:AA:0A:8B:2B:14:67
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 01A0F67B86A59B12FBF815F39D672D66E407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 1A12
Signing time: Thu 01 Oct 2026 08:01:25 +0000
Manifest this update: Thu 01 Oct 2026 08:01:25 +0000
Manifest next update: Fri 02 Oct 2026 08:01:25 +0000
Files and hashes: 1: 42Oa6hAtTxZiFbmEwvIO-2OcwoM.roa (hash: SkLlsU0plCQ3OmjzWWaN+6X8mXDGCP5VlIK1uTpu/is=)
2: V0-osk911oZBoXIEbj4rnci62yY.roa (hash: rYxJFA3gAE6iirrxlQ+evDRo4zqxQB5y71GogsBIQ7c=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: jiRHCjdSjFt3Qwfx7ZKwxQ2FV5211DWboTbECkNskZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7b:86:a5:9b:12:fb:f8:15:f3:9d:67:2d:66:e4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Oct 1 08:01:25 2026 GMT
Not After : Oct 2 08:01:25 2026 GMT
Subject: CN=8fb5923e4ff6cd335bb2c8deb87aaa0a8b2b1467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:5d:98:b8:60:72:65:f0:df:e7:df:49:0a:
62:20:64:ef:0b:1b:37:44:fc:c0:b2:19:13:96:db:
9d:1d:7f:87:dc:ae:c6:00:a7:6a:ed:6d:85:79:4a:
e4:54:07:0f:d0:e6:72:1e:72:85:d3:5b:95:93:c8:
ee:c0:78:e2:ad:b1:9f:e9:c8:a0:37:6c:b7:1b:87:
b2:59:10:07:94:a6:94:a6:be:15:4f:89:5f:73:8d:
61:8f:60:b5:fa:01:c5:19:f3:27:24:52:57:4f:a3:
05:50:3e:94:14:5c:e0:ac:3a:f6:64:cf:14:cd:bd:
e3:ac:51:38:8b:b4:40:24:f0:27:41:fb:31:6d:47:
af:e6:5d:37:5e:46:52:40:f1:80:5f:a8:38:47:d0:
9a:39:81:7b:92:53:c8:3d:a1:92:73:94:07:b6:b5:
0f:ca:57:eb:c9:3b:a5:7e:b0:52:71:a3:be:85:4d:
d9:f0:fc:d6:a2:01:13:10:cc:c4:42:92:d8:c6:f2:
d2:28:c2:92:9d:09:4f:09:c1:cb:a9:92:7a:3f:d0:
55:5e:82:e7:7f:10:69:01:b0:03:e6:db:9f:07:92:
32:f5:52:4d:f2:1c:26:60:8c:0a:d0:cd:4b:fc:ff:
8d:3a:d0:d3:b2:01:db:f0:ae:aa:a8:06:07:bf:89:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B5:92:3E:4F:F6:CD:33:5B:B2:C8:DE:B8:7A:AA:0A:8B:2B:14:67
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9e:df:a9:3b:09:f6:f0:c6:d4:be:55:51:fd:a6:28:3d:df:
b4:52:e5:eb:8c:f0:e5:fb:9e:67:2b:54:c0:62:dc:31:48:b9:
9e:57:2a:30:08:92:7a:61:9d:dc:25:36:9d:3b:f4:c9:74:30:
a3:f7:35:58:a8:cd:3a:ff:78:75:27:17:db:86:b4:db:43:08:
75:fa:98:da:22:03:a9:14:eb:9e:15:63:74:5c:e2:a6:a2:de:
97:cd:61:2f:3f:21:7d:f1:32:4a:47:a0:ac:4f:6a:0d:c0:c2:
9d:5a:e6:e1:2f:6c:c4:fb:25:b4:ff:30:e4:fd:01:7f:cd:29:
c0:f8:c5:72:d0:2e:37:ca:7c:f2:1a:21:12:0b:f9:12:02:9e:
30:87:4f:ca:00:fb:fd:4b:cf:5f:dc:1b:6a:49:dc:06:7c:8a:
32:0f:f0:56:f5:e9:db:10:6f:62:67:80:b2:74:6f:65:48:3a:
15:19:0d:2e:87:7d:3f:69:07:58:a6:d6:b9:ac:65:40:3b:68:
22:3e:1c:e7:87:2d:e8:b6:d3:c0:d7:00:e8:ab:24:21:42:b5:
f6:41:9d:61:6d:5e:6b:a7:ca:a5:41:3b:43:55:0d:9c:9b:7f:
79:ac:85:ea:c8:91:ae:cb:ba:cb:51:85:41:0d:75:34:e7:5f:
e7:cf:e3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 18:54:58 2026 by rpki-client