Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: y8VLR+JaEItmVbMvdY5PWP5mDUAuqxeBo/dRYyS0L18=
Subject key identifier: F4:19:24:31:FF:D1:C0:36:12:B2:1B:6F:78:16:AA:EB:1E:B8:6F:40
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 01A0C9A20C20451B7EEA90C6AFBD7DD52C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 15:00:35 +0000
Manifest this update: Tue 22 Sep 2026 15:00:35 +0000
Manifest next update: Wed 23 Sep 2026 15:00:35 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: sTL841psCf6iB7841xD1qbMvASeBnygyx+XqgOm1DWY=)
2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:0c:20:45:1b:7e:ea:90:c6:af:bd:7d:d5:2c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Sep 22 15:00:35 2026 GMT
Not After : Sep 23 15:00:35 2026 GMT
Subject: CN=f4192431ffd1c03612b21b6f7816aaeb1eb86f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:f0:08:11:76:cc:15:4e:08:31:b4:3e:7c:
d8:14:77:26:36:c7:da:12:1d:65:ab:23:3a:13:cd:
87:d9:e0:45:7b:09:52:e0:65:d9:c9:2e:c0:9f:17:
df:91:2e:47:03:06:82:99:1a:e1:6d:26:9e:2e:84:
70:68:b1:96:d9:0b:a2:29:f8:ba:b8:63:54:85:3a:
6e:47:37:73:7a:34:f6:a8:da:fe:91:cb:b6:64:dd:
44:22:4e:13:06:f3:d4:fb:83:6d:5a:29:51:5b:de:
02:27:48:06:e9:17:5b:29:3f:b3:10:59:43:66:1e:
a2:79:3e:67:ef:92:60:45:6d:e9:6f:02:30:30:9e:
91:0c:16:15:66:d4:53:32:cc:a4:73:24:dd:4c:4e:
63:3f:88:4e:67:5e:1f:cd:df:6e:ef:e4:72:62:35:
01:54:d9:f2:86:48:de:d0:d8:f4:9e:f1:6c:7b:09:
cb:8a:3c:ee:ae:5a:43:72:77:fa:ca:48:da:6a:bf:
32:ea:b5:af:02:8b:44:90:4f:d0:03:81:20:bb:c4:
34:2a:4d:d8:2b:1c:1d:1e:26:b2:e9:e2:cb:11:a5:
ad:f7:1b:5c:cb:47:d9:b6:40:71:13:a5:96:16:48:
88:c5:70:60:f1:40:f0:cd:85:2f:0a:85:9a:1b:0f:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:19:24:31:FF:D1:C0:36:12:B2:1B:6F:78:16:AA:EB:1E:B8:6F:40
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:57:37:5d:fa:1e:70:31:06:87:38:fd:0a:9a:d0:cf:64:f5:
81:9f:d4:18:e2:c0:83:e6:03:7b:13:23:a3:9e:e7:70:7c:bd:
79:2b:69:d2:3a:62:e1:03:da:85:19:4e:a2:bf:57:25:2f:15:
13:a6:40:bd:29:6f:7b:a0:d7:e1:eb:f2:98:b1:36:25:20:69:
88:8e:f4:19:58:96:31:30:3d:58:b2:55:db:87:78:56:ca:65:
0b:bc:ff:12:2a:7d:7e:a3:4c:e8:17:30:8c:f7:22:06:d8:af:
68:d9:38:91:5d:b8:ca:7f:c1:af:2a:58:d3:fd:b7:75:c2:e3:
33:27:6a:41:aa:71:21:a2:b0:ff:19:0e:03:be:f7:a5:43:7f:
15:b9:33:e4:15:00:b9:7b:08:0d:96:08:a0:88:0d:58:a5:b0:
57:bb:30:25:2f:6c:67:01:dc:7d:48:2b:3d:31:42:3a:77:b2:
ab:4c:c0:6c:a3:80:0d:1e:92:fe:6f:ae:2c:b9:29:3d:12:a1:
69:12:44:52:fe:f9:12:d9:ce:c6:1d:e4:84:d0:f3:52:2f:0d:
b5:26:8d:28:9b:12:bd:7f:b5:5b:40:d2:82:1c:f9:d3:97:b9:
71:64:72:aa:72:9c:02:43:f1:8d:da:36:1d:90:8f:75:75:5d:
92:20:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:58:21 2026 by rpki-client