Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.mft
File: 9TERk7IVV1FGVI7yfs1pX7mc8Lw.mft (raw, json)
Hash identifier: 8kosCVgk0jNRPqCpGeHOMk077Ae6jGhayMBDx87mKZs=
Subject key identifier: B7:D4:A1:5A:CC:04:11:50:89:32:81:44:CD:CD:6C:6B:A3:19:69:70
Authority key identifier: F5:31:11:93:B2:15:57:51:46:54:8E:F2:7E:CD:69:5F:B9:9C:F0:BC
Certificate issuer: /CN=f5311193b215575146548ef27ecd695fb99cf0bc
Certificate serial: 01A0C4E9A103FEBBA15DA36821ED4C618646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TERk7IVV1FGVI7yfs1pX7mc8Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.mft
Manifest number: 60
Signing time: Mon 21 Sep 2026 17:00:40 +0000
Manifest this update: Mon 21 Sep 2026 17:00:40 +0000
Manifest next update: Tue 22 Sep 2026 17:00:40 +0000
Files and hashes: 1: 1Z4JzCvnteCIKQszXHQFc967ne8.roa (hash: Z72/1v0tdbPVk5wGh68TOmDWGusOqq/srlhRedp+nCA=)
2: 9TERk7IVV1FGVI7yfs1pX7mc8Lw.crl (hash: tRPt5hsfMpIStyjPXGB4I/03RL8Xi22yuowlCs7bvqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TERk7IVV1FGVI7yfs1pX7mc8Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:a1:03:fe:bb:a1:5d:a3:68:21:ed:4c:61:86:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5311193b215575146548ef27ecd695fb99cf0bc
Validity
Not Before: Sep 21 17:00:40 2026 GMT
Not After : Sep 22 17:00:40 2026 GMT
Subject: CN=b7d4a15acc04115089328144cdcd6c6ba3196970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:ae:d1:4c:6b:7f:27:9b:dd:68:8c:98:f1:
e2:37:c8:b9:6d:7b:24:0f:9b:24:65:4b:50:79:9e:
6f:be:8b:d7:14:a0:3a:2d:80:cc:31:8f:a1:1f:23:
24:8e:88:03:5f:c4:f7:c3:2a:3f:e8:83:65:e8:36:
65:86:02:6d:94:f1:d9:66:b6:58:37:cc:a5:63:af:
ea:4c:e7:5e:52:1d:77:58:cc:22:3d:02:38:7d:11:
a4:dc:69:c4:f9:6b:8f:ad:5a:0a:41:a5:05:6d:93:
f7:67:75:c2:45:b1:83:9b:c6:17:e2:79:63:5a:66:
8f:8b:a7:f9:18:3b:04:ab:90:50:92:0e:22:99:11:
9e:83:92:15:81:e6:76:48:28:01:56:b7:18:b9:62:
e2:3f:0a:50:2b:c8:c1:f7:07:21:f7:e4:c8:2a:ca:
c5:85:3f:0f:eb:27:88:65:f7:f4:f2:07:e5:a5:3d:
74:01:27:14:af:df:ed:b1:00:91:c5:b7:6c:94:c9:
aa:b9:6b:62:81:6b:90:b3:31:7f:51:3a:93:d8:e5:
1f:2d:f9:a0:2c:1c:ca:c2:51:7d:50:11:97:5a:78:
13:3b:64:cf:b4:81:97:23:7a:2d:2f:dc:42:36:eb:
79:3e:e3:e5:4c:99:8e:9b:ef:60:0c:1f:78:41:b4:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D4:A1:5A:CC:04:11:50:89:32:81:44:CD:CD:6C:6B:A3:19:69:70
X509v3 Authority Key Identifier:
keyid:F5:31:11:93:B2:15:57:51:46:54:8E:F2:7E:CD:69:5F:B9:9C:F0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TERk7IVV1FGVI7yfs1pX7mc8Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5f:e8:77:30:86:e1:55:36:0e:91:6e:19:6e:43:89:bf:bd:
13:f1:1d:f6:50:7a:2e:2e:2d:1c:d9:2a:28:c2:47:1d:31:20:
71:ab:be:15:79:39:34:e0:bd:dc:a6:5e:b9:db:fb:05:8c:3d:
03:03:dc:05:d6:be:6f:95:35:54:e2:ac:30:56:0a:de:01:75:
8a:33:90:7f:d4:94:f9:0d:3c:f1:77:08:a4:00:38:fa:28:a4:
e7:d9:0b:58:0e:1e:ab:22:79:b4:02:c5:5d:85:e3:b2:4f:08:
8c:d3:3d:08:61:f6:8e:ec:b4:11:76:1f:5e:c1:9b:76:7c:9d:
53:9f:d5:ad:b7:0c:32:60:42:66:6e:d4:36:7d:e3:ba:69:e0:
fe:b8:b0:05:6d:f3:3f:92:7a:27:d7:eb:08:9f:b8:4a:f1:96:
df:cf:ff:7e:c2:b7:38:e0:67:4c:f9:92:f6:25:ad:34:9e:8b:
9e:fe:95:bc:6e:92:54:b8:77:b9:cd:c6:03:1d:99:99:4d:fc:
2a:e8:bd:ce:56:7c:14:c8:66:61:dd:02:f7:ca:b2:27:6b:28:
e0:8f:70:74:91:72:db:79:96:bd:d4:4a:51:0b:bd:7e:9c:02:
0d:4c:ea:49:3f:0e:81:59:a2:58:ba:b2:f9:86:40:2e:48:07:
de:93:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:06 2026 by rpki-client