Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: W1Z4RW3H2qOrkQQaX1//2LE+yiO/bDfSA/xHD4DwGKc=
Subject key identifier: 9F:89:89:B1:5B:DC:27:89:B3:BC:37:2A:27:83:AA:D6:E2:57:E7:46
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 01A0C47CB96170E599B6F337CFA30FB9675C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 10FF
Signing time: Mon 21 Sep 2026 15:01:43 +0000
Manifest this update: Mon 21 Sep 2026 15:01:43 +0000
Manifest next update: Tue 22 Sep 2026 15:01:43 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: I1KHBqVSXkOKmCl5o9sWedlAoesK9xPB3nyj1O0Hylw=)
2: TgwXo42orCf9sT1fT8jrPa56jeU.roa (hash: GfcY69aJuiib4Ntp1/VS83/ai4i4eQHgc9DzBgB534U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:b9:61:70:e5:99:b6:f3:37:cf:a3:0f:b9:67:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Sep 21 15:01:43 2026 GMT
Not After : Sep 22 15:01:43 2026 GMT
Subject: CN=9f8989b15bdc2789b3bc372a2783aad6e257e746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:49:bc:a9:4f:d0:85:da:f2:cf:5b:3d:93:
64:36:15:24:c0:62:ef:31:7b:00:ad:18:b9:97:df:
2c:38:97:15:27:38:c9:d4:a1:5a:2e:64:6a:76:da:
2a:03:50:a2:dc:11:e8:e3:a4:b7:70:cf:c0:22:b7:
96:db:cc:39:10:de:42:ba:38:09:57:5c:4b:d4:da:
5a:40:f0:a3:c5:b0:e2:f9:c6:2f:cc:e9:23:0f:8c:
8f:05:8e:eb:9d:ac:1b:88:f4:d6:46:82:72:94:78:
13:c5:05:5c:f1:3d:e6:de:1b:1a:6f:17:26:35:df:
b2:79:6c:b2:65:09:53:90:44:d7:e8:8d:be:3c:15:
e0:a5:30:e4:d4:ac:bb:3d:6c:8f:3d:40:12:49:76:
ad:7b:25:b8:29:42:9e:4f:7d:6f:40:b9:e4:bf:df:
77:93:c2:f5:19:f7:3e:97:ec:86:55:93:99:39:29:
17:ba:a7:af:6f:c0:fd:1b:ae:20:45:65:73:16:ba:
58:fe:a3:12:89:36:14:3b:7a:8f:38:d5:7d:41:ce:
5c:9d:79:a2:7f:cc:ff:1b:ed:19:93:63:b0:29:71:
e4:19:e3:9d:33:40:3a:3e:89:71:a3:af:86:c7:26:
ce:df:54:88:56:3e:3a:76:87:89:3f:13:cb:18:4f:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:89:89:B1:5B:DC:27:89:B3:BC:37:2A:27:83:AA:D6:E2:57:E7:46
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:77:8c:0b:35:d5:25:f4:0b:94:f4:48:83:5f:34:12:6b:c6:
39:b6:98:0d:06:ce:af:ce:d5:de:d8:c0:a7:6b:9c:1c:14:e4:
ad:8d:d4:a6:e2:52:8f:15:42:cc:39:9d:a7:c0:b0:2e:ed:22:
9b:93:4c:81:a3:c9:40:6b:9b:27:98:e2:25:d2:6d:e1:a4:27:
42:5b:99:45:4c:8f:57:d9:c3:b1:6a:af:fc:51:60:d9:d9:43:
0e:3f:4a:4b:b1:83:58:af:13:45:ce:06:73:3b:7b:c0:66:9e:
47:22:87:a4:63:0d:6e:dc:12:49:01:b5:7d:0a:e0:8f:15:bc:
ae:0b:22:d7:51:03:7b:c4:7a:91:79:df:e9:8f:be:97:26:f8:
d1:88:fe:e0:09:50:9a:30:9a:b0:85:e5:88:6d:cd:bc:74:74:
6c:9e:cd:59:02:49:20:db:35:e8:9b:1c:1c:e6:db:c1:9f:99:
cd:c1:3b:f1:67:45:d1:e9:ee:2b:8d:db:b8:e0:72:f5:8e:df:
d5:ff:3c:27:4a:94:af:7b:ce:79:e8:73:06:b2:65:5d:b5:4d:
fb:c7:cb:9e:58:d0:79:bd:fa:fb:e4:e8:16:a8:f0:3f:26:46:
d7:c3:8f:ea:3d:5e:a4:fc:80:a3:48:e8:f5:2a:0a:23:06:6b:
4b:50:b3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:49:00 2026 by rpki-client