Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier: rMVjCCVjsW71ob0q67lw948YqBw66kMsOTQBri4W1GQ=
Subject key identifier: D9:22:31:EF:FB:FD:E3:B0:6E:85:3E:C3:74:37:BE:87:77:62:FE:B5
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial: 01A0C66AEC4595D2CC8DD412FF4AB0F55ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number: 09FA
Signing time: Tue 22 Sep 2026 00:01:31 +0000
Manifest this update: Tue 22 Sep 2026 00:01:31 +0000
Manifest next update: Wed 23 Sep 2026 00:01:31 +0000
Files and hashes: 1: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: 2ICSxhbzuyoWzIpadhsWImGaL2/Gi7H3Yra9SBGO8HY=)
2: HvbqYPMAVepvi6ZtkrW2fUxUxMM.roa (hash: kj2P3vyd4ShtsXAZbQsRTziSHIgT6QC6RQY8zqv9EFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:ec:45:95:d2:cc:8d:d4:12:ff:4a:b0:f5:5e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Validity
Not Before: Sep 22 00:01:31 2026 GMT
Not After : Sep 23 00:01:31 2026 GMT
Subject: CN=d92231effbfde3b06e853ec37437be877762feb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:a4:d8:a2:b0:cb:3d:fc:79:06:48:17:15:
e1:16:22:c1:98:e6:1f:b4:83:c2:9d:ae:59:76:ee:
47:1c:1a:a7:9a:ea:9f:f3:fa:ae:26:cd:21:d5:63:
96:6b:2b:de:32:89:9d:15:02:79:d0:52:23:23:86:
52:ca:76:91:6e:38:ae:6f:36:6a:70:b9:cf:ee:68:
dd:69:65:21:94:a6:b4:8b:6b:c5:3b:1c:d5:66:0f:
52:07:9d:4e:da:95:b3:fd:ef:ed:39:3b:63:51:58:
5e:ec:27:ca:e7:3a:96:fa:7d:42:0a:8e:9a:6a:89:
bb:ab:4b:30:ba:01:72:4d:b4:22:72:47:a3:a8:e4:
7f:21:55:44:9a:c5:18:d9:c8:2a:55:e9:aa:fa:57:
4a:1d:f1:ec:83:b4:21:13:86:03:13:42:8f:48:a9:
b5:4d:43:d2:76:22:56:9d:c1:87:e2:ea:21:7c:81:
de:eb:3e:36:1f:98:ff:68:6f:30:07:8f:e1:22:85:
ed:82:71:42:03:4b:f1:66:ab:4f:43:96:fc:06:ce:
25:a9:65:67:c4:90:0a:d6:41:8f:c0:12:5d:e5:a2:
e8:e6:bb:f6:3f:37:c8:48:74:0e:e4:27:03:88:70:
f5:5e:a8:3c:61:2f:8d:48:25:fb:21:e3:6a:02:f9:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:22:31:EF:FB:FD:E3:B0:6E:85:3E:C3:74:37:BE:87:77:62:FE:B5
X509v3 Authority Key Identifier:
keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e0:35:05:80:f3:74:db:6b:5d:fe:e6:6f:32:3a:61:d2:ba:
06:85:58:07:b1:d0:00:2f:ee:0b:03:c7:6b:17:75:d3:aa:b1:
d3:da:f8:4c:10:1f:d4:b9:a6:4e:4f:4d:39:5f:3b:c3:67:ed:
c3:ca:f3:98:b1:74:e1:20:ca:e9:d8:b1:72:d3:42:d9:1f:12:
96:9e:f0:f4:8f:4b:52:fe:30:7b:10:7c:df:b4:74:ab:70:86:
46:d2:f7:48:8c:de:7e:2a:bc:2c:84:1a:ba:b7:9b:f6:26:6a:
f9:9b:24:6c:92:d3:49:a6:9c:61:3f:98:a6:99:60:72:52:88:
75:bc:ec:10:40:92:66:31:b7:db:26:39:2a:4f:2f:fc:9e:54:
6c:b5:05:61:45:70:9e:72:ad:42:46:3c:69:1e:33:ad:70:02:
85:50:58:db:55:41:26:22:aa:ba:af:d2:e1:04:ed:d1:d3:79:
1c:13:54:b8:e1:53:bf:8d:f4:b4:80:f3:b7:76:78:88:3f:c8:
e0:d2:0c:45:e6:91:55:de:66:dc:ac:f4:c2:da:21:af:f0:61:
4d:93:f9:d3:5d:d9:7a:86:2c:da:c8:ac:96:e7:ad:0f:f8:e5:
b9:72:41:08:6f:d3:83:49:d7:de:3a:23:c3:a4:ea:cd:11:7e:
da:47:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:29:25 2026 by rpki-client