Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File: v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier: 6z9WoqmZxgG7iQ97cWLUyszCgkEp1PwOcPNRt1Jef74=
Subject key identifier: 13:3A:1A:94:CE:40:A6:44:CD:D1:57:3F:79:B9:9D:9B:AF:75:84:5C
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 01A0E7AEEEA2FFDBCD559FFD40D4622CE414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 11:03:16 +0000
Manifest this update: Mon 28 Sep 2026 11:03:16 +0000
Manifest next update: Tue 29 Sep 2026 11:03:16 +0000
Files and hashes: 1: 33KpGlS_VtYMS4VxaCOKuIoKRIU.roa (hash: PycRk9WWt2oF1w6VPqOesZM2Iyc5sLWnv91I0/vqfTA=)
2: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: n6kzk7QhoVEr5ya8QO5XyTaSETxcE8pitAGh6JumHuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:ee:a2:ff:db:cd:55:9f:fd:40:d4:62:2c:e4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Sep 28 11:03:16 2026 GMT
Not After : Sep 29 11:03:16 2026 GMT
Subject: CN=133a1a94ce40a644cdd1573f79b99d9baf75845c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:45:a1:f5:99:33:a4:20:37:9c:64:ef:53:
e1:c0:6e:38:57:b7:24:c9:e7:6c:60:48:9f:ec:41:
4e:85:9e:ed:f6:b9:03:38:cd:6f:23:45:9b:0d:14:
d9:af:b5:61:d5:39:70:12:b0:2e:a6:77:84:c6:57:
05:51:26:59:55:15:f1:4f:6a:51:b8:4d:77:00:a0:
79:9a:11:30:cf:95:b1:dd:4c:a7:b8:c1:f2:e2:43:
3d:8a:3f:a6:58:56:96:9e:9c:23:4b:a9:bd:f0:dc:
ac:1a:d5:0d:77:86:31:b8:60:b8:85:a0:04:19:20:
bb:3d:69:48:77:f7:47:a2:b5:87:17:2e:64:9f:3a:
6b:e0:89:50:22:43:09:47:36:94:35:f1:54:9f:1f:
11:b2:84:6c:69:09:d4:b2:0f:12:c5:cd:e2:23:86:
ba:f5:14:b3:98:07:53:6e:f8:c5:40:2b:40:21:73:
ea:27:c9:82:14:bc:62:8f:67:79:f6:88:5e:b5:7a:
3e:d5:3b:9b:af:4b:d5:7b:de:b2:fd:6f:ac:9c:14:
f0:aa:4a:c7:3d:38:39:07:e1:f9:ba:fb:82:59:80:
f2:5d:bb:97:71:77:3c:5a:54:05:bd:3a:38:32:1a:
5e:38:37:20:28:a9:59:2f:5e:cd:b4:1d:80:27:d7:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3A:1A:94:CE:40:A6:44:CD:D1:57:3F:79:B9:9D:9B:AF:75:84:5C
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a9:e6:64:28:bc:e5:80:9f:39:53:9c:17:2f:d3:50:18:9c:
2a:f5:23:d9:5d:9b:27:0d:c3:a8:d1:49:77:a5:31:6a:97:ff:
27:d1:1a:1a:8a:55:b5:0f:ee:88:3c:ac:29:e0:72:c6:3f:e4:
a0:b1:c7:7e:72:bb:23:4a:e8:66:99:19:f3:53:00:75:6c:ce:
11:fa:db:44:33:08:be:8a:54:42:af:2b:b7:2b:e2:a7:e6:09:
92:5f:cf:8c:e9:80:90:d8:84:36:0e:90:b8:b3:30:1b:90:8e:
77:15:3d:91:e7:a7:d0:da:bb:d8:fa:6a:c3:7a:d5:73:46:f4:
41:50:87:11:4b:fc:8e:71:1b:7b:91:23:a5:0a:6a:ae:d7:f0:
e8:39:10:fa:9e:be:16:81:3b:ea:b2:2f:b9:e8:75:6b:93:2a:
8f:b7:57:c4:e7:ef:1e:51:f1:5b:25:b7:57:fe:21:69:6c:14:
07:45:fb:bf:50:24:ee:58:76:7a:17:28:d0:80:69:26:24:b3:
2e:d4:24:33:b0:3e:69:e7:75:53:04:21:69:82:ec:c2:ec:d0:
d4:6d:0e:35:d4:ee:9e:78:56:fe:b2:95:81:c5:7e:27:6e:02:
71:66:b0:c3:80:64:53:fe:6b:d0:1f:a1:14:0e:25:f0:40:05:
c8:17:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:10:37 2026 by rpki-client