Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier: oA3MYYcG5VLbiyu2Xu4kNzXCMu6WpaaMs56S+hESwlg=
Subject key identifier: A5:22:21:B4:04:59:C0:86:33:60:67:F4:08:05:BC:69:D8:AE:FC:28
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial: 01A0DC84B0F01C44DA678FB652210E052D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 07:01:18 +0000
Manifest this update: Sat 26 Sep 2026 07:01:18 +0000
Manifest next update: Sun 27 Sep 2026 07:01:18 +0000
Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: MJZAR/yLvZYw759oo13ppKk1am2AHerzcSKchaVZ99E=)
2: L3FElQgN_OK9ME85XjkPB5d4njo.roa (hash: 7fKQw9/kLDh7zT4p1MB3dQg/LI4nczVMbuMgYO277J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:b0:f0:1c:44:da:67:8f:b6:52:21:0e:05:2d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Validity
Not Before: Sep 26 07:01:18 2026 GMT
Not After : Sep 27 07:01:18 2026 GMT
Subject: CN=a52221b40459c086336067f40805bc69d8aefc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d0:f0:ef:78:d1:eb:88:76:fc:60:4a:4f:90:
3d:05:85:48:a3:15:18:d3:2b:6c:98:e0:3f:c7:86:
c6:15:97:58:ad:d8:99:d2:94:ae:95:93:44:c8:c4:
cb:ad:cf:f2:80:9c:09:59:c3:de:87:c3:fa:33:40:
db:a8:ec:ad:02:da:a0:02:b7:bb:8c:1a:6a:b3:60:
f5:c3:be:f0:8f:58:1f:39:dd:2d:1a:ab:9e:ec:29:
5b:2f:09:83:a8:81:83:b7:71:c8:15:4a:a6:12:12:
a8:c8:c4:c2:c2:f1:64:45:16:99:15:d7:61:56:a3:
fc:1e:7f:18:04:27:13:52:98:5f:8d:74:1e:b4:10:
38:0c:7d:5c:20:9e:a7:03:ea:56:53:28:41:ae:67:
aa:3d:68:ef:c5:bc:60:3e:55:02:18:63:84:18:f5:
0a:19:2d:5f:3a:b9:36:c1:63:f4:c5:e7:78:2a:94:
f4:cf:9a:e6:64:e7:1f:48:e1:23:c1:c4:fb:36:e2:
0d:b8:df:90:1a:81:38:40:a8:4e:82:5a:9e:4c:3a:
f1:ba:8c:fe:b4:0e:c6:f1:d1:0e:7f:19:f9:c7:32:
11:73:ee:ef:27:09:7e:7f:54:76:c1:0d:cf:b8:15:
38:08:06:18:06:41:06:1d:13:3f:7c:8d:6e:78:f5:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:22:21:B4:04:59:C0:86:33:60:67:F4:08:05:BC:69:D8:AE:FC:28
X509v3 Authority Key Identifier:
keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f2:17:df:ef:66:58:8b:4a:90:93:bd:98:20:70:4a:cd:db:
40:59:d2:0d:0c:22:d0:c9:77:5e:af:bf:c2:77:f8:94:7b:34:
30:d3:58:20:c5:fc:9e:f2:80:c9:22:a2:98:e7:be:6c:13:82:
94:e9:49:16:08:17:60:84:08:33:60:20:85:fc:dd:0d:86:24:
73:b1:c6:69:26:b3:a8:5b:fc:c4:6c:33:3a:c7:3b:e7:b4:48:
b5:07:34:d6:b2:8f:b5:d3:27:58:9c:0c:a2:79:d3:64:a3:74:
57:d7:a6:85:42:40:ac:88:e8:3a:99:21:e0:35:f0:e7:15:23:
f4:f3:9b:43:01:31:37:fb:09:82:f6:02:f6:64:35:b7:a0:21:
96:5b:c3:a8:25:6a:0b:1c:60:c8:9b:7d:e9:15:cb:c0:1e:f4:
25:d1:75:66:66:c3:92:70:c8:b9:01:eb:ab:4b:29:cc:16:0c:
f3:d0:72:5a:0b:73:f7:f4:21:4e:ac:0e:a9:08:a8:e0:64:fa:
83:6e:47:01:09:44:74:40:76:f2:28:b1:74:ee:69:c3:ec:86:
98:73:26:b2:e1:3c:47:67:cc:71:12:c4:34:ef:c1:20:35:31:
d9:87:c3:8c:72:51:9f:e9:18:8a:c1:b8:56:c9:34:f4:ce:b1:
eb:50:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:18:30 2026 by rpki-client