Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier: m8fb38qWrRVF/A9MKsIlo8/lVF7Md8bCVLea0fr3Qj8=
Subject key identifier: 6A:BA:A7:63:E5:79:F1:4B:F0:54:9B:68:55:AD:BD:3B:C2:05:44:FD
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 01A0D19319772147FB6D9C689A49518565D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 04:01:13 +0000
Manifest this update: Thu 24 Sep 2026 04:01:13 +0000
Manifest next update: Fri 25 Sep 2026 04:01:13 +0000
Files and hashes: 1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: Oyz7+wUpFFia0XNND2Ps8YD4pVgYuOcLh/ZjdmUQ+B4=)
2: MYsq3VI7S6Tys8tH6kZ55isv4aM.roa (hash: nLJu9Ca3UL28v4nK9lRnWd7XxYbaE6zulNTp5ZAXAYk=)
3: q_ccM_3Nsf3YIqRvSxwp7j28WKA.roa (hash: bQAdrUPOpax3Tea6DtDpoS5dYyAQRIvDyf7eum/Y1dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:19:77:21:47:fb:6d:9c:68:9a:49:51:85:65:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Sep 24 04:01:13 2026 GMT
Not After : Sep 25 04:01:13 2026 GMT
Subject: CN=6abaa763e579f14bf0549b6855adbd3bc20544fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:77:3d:84:f3:6d:ff:9a:d7:8e:bd:0c:2f:
62:cb:ab:e2:a0:4d:56:95:e1:e3:ab:23:ad:ba:73:
19:1d:4a:0c:b1:24:2c:33:67:a7:22:87:27:17:f3:
c8:ba:03:6a:04:42:73:d7:4f:bf:32:c6:d2:be:51:
8a:54:95:d0:fa:25:a3:06:01:30:7e:9c:bb:8e:ab:
ae:84:48:d7:78:6f:a4:48:92:3e:1b:79:b4:02:26:
c0:74:15:30:15:f4:c4:2d:de:82:10:96:76:e4:ec:
da:26:d0:ee:23:94:55:a7:96:07:17:03:ba:f3:7b:
5c:68:8a:59:bf:3e:e5:92:a4:3b:89:84:1f:7e:ef:
9e:c2:2f:a7:92:12:dd:e5:68:f0:f2:05:e5:90:c3:
4a:96:71:49:61:1f:75:ad:72:40:84:2e:f6:59:57:
aa:db:5e:48:81:65:9c:64:80:4d:a8:44:f6:bc:6d:
2e:ab:c2:ef:03:e6:b4:98:44:7b:8a:00:0d:35:02:
b2:bc:0a:f6:dc:5d:07:34:3e:03:8c:db:51:25:95:
72:f2:5f:71:30:32:ac:6a:5f:f8:83:09:a9:ff:aa:
de:58:b3:2c:7c:b2:d0:13:2f:bd:a6:72:c1:37:92:
25:e3:5c:3c:8f:6c:95:6f:75:2c:b2:0a:bf:d7:66:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BA:A7:63:E5:79:F1:4B:F0:54:9B:68:55:AD:BD:3B:C2:05:44:FD
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ae:ed:e5:eb:78:4e:87:89:ff:4d:43:ad:98:42:c3:bd:41:
dd:7b:72:3f:0b:87:98:47:e2:b2:3f:c4:bf:44:78:e6:ff:3a:
fa:9c:b7:79:a8:74:a2:ba:64:e3:37:59:97:2e:dc:7e:a6:e1:
b9:cc:64:e2:f8:4a:11:b1:11:bc:f8:71:4c:77:25:0e:d0:6c:
d4:1c:57:21:26:77:39:e6:1f:2f:d4:5e:f1:be:eb:e1:36:3b:
0f:a1:cd:ec:c1:31:4f:d4:34:28:5f:e5:20:44:cc:47:68:a6:
67:c2:f7:f7:6b:23:73:29:d3:b7:7d:ff:dc:07:9c:16:ee:6c:
50:75:48:61:6f:4a:4f:30:ce:e6:79:25:d4:9e:0f:47:e0:82:
09:49:91:45:25:a2:52:28:6e:31:0e:03:d3:c2:e5:5c:12:d5:
fb:4f:e8:f5:52:f9:10:24:30:6c:e3:d8:a2:7d:f7:5f:62:3b:
20:ca:92:fc:e6:8d:60:8a:5c:36:e3:d9:42:bc:0d:41:5e:8a:
3d:ec:20:ab:dc:b7:ca:3a:41:6c:69:f3:49:b3:92:e5:98:4f:
45:21:1d:bc:59:91:c5:7b:2d:a5:4b:e0:f9:0c:02:1d:64:3d:
6e:86:9a:4c:01:89:8e:4e:4a:ee:90:13:38:6f:82:55:3e:10:
d9:16:af:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:53:19 2026 by rpki-client