Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier: P53YlP4507UerUcfq6JAnz8hT8PIvl1NV+794LeIC8s=
Subject key identifier: C9:FC:17:A4:51:A7:B3:26:0F:EA:9E:F2:5E:0F:53:DD:E5:80:2B:97
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 01A1111687D99B8DF1E7ED5810724A7578D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number: 1A99
Signing time: Tue 06 Oct 2026 12:00:51 +0000
Manifest this update: Tue 06 Oct 2026 12:00:51 +0000
Manifest next update: Wed 07 Oct 2026 12:00:51 +0000
Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: tKWyUxXKmG/xsydUTWlyoAUAUpNF5kl1fiF/OpQvzB8=)
2: 2Bdi4XnLFiihlMAX_gDRRlR7QGM.roa (hash: VjiQO9aLNwn7skSw+PzxXhanmj53IG3y+tedhX+Sjas=)
3: 6-xQbUlUaR82Mjs6L91ilC6T9zk.roa (hash: 3yF/4C6JYKybBw99BMZ6GkxatUw24XNyWwCB72QH0u0=)
4: 7OXas1BE939lVr3MLLkFfgwwLME.roa (hash: FALGOD2pTrLC0LwxjWMNOoQIcuSrSVg8619SA2u9eio=)
5: INUpirlxyhCbq85VbAW6ztdQs4k.roa (hash: jkGGZWjPY73Dhwpc13NpoAleBEBZrvWBjPm/O8n+EJ0=)
6: OroJQKCq7I4yVcFTm6lWNUxxqrw.roa (hash: nDA5smDMOF4n6Nj5rxqPI/iYhWZmpnNfYaYuSp7sOUs=)
7: ZhkHANnwp0wI55F5kUZAa2xMrE0.roa (hash: UMOnz6djXz4C+wt70K102Br84XLLMdwFlF/5hZkaKPg=)
8: qFql76UYRJ7MqINcpO2JRQNjZJk.roa (hash: b3XQyMMRxs2maOmxKWw8Mo7+dtT/HrPvRDYI0jww5Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:16:87:d9:9b:8d:f1:e7:ed:58:10:72:4a:75:78:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Oct 6 12:00:51 2026 GMT
Not After : Oct 7 12:00:51 2026 GMT
Subject: CN=c9fc17a451a7b3260fea9ef25e0f53dde5802b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:f2:3e:66:97:ff:b3:c2:19:79:4f:15:0a:
c6:ae:45:0e:84:2c:9d:8b:77:45:9f:41:b1:d3:24:
0e:3c:d9:94:2b:8c:a8:11:72:c0:21:7f:ee:45:81:
3c:72:4e:5e:e4:b1:60:3d:ef:e2:5a:df:23:6c:f8:
33:6d:13:b8:b7:89:94:84:da:8a:c8:cf:bb:6c:60:
f1:89:47:56:18:e8:be:0c:80:6d:9b:7d:4d:55:45:
9f:1b:53:8e:c5:19:51:cb:50:ac:db:73:10:30:ea:
75:df:2d:16:d8:6c:5d:c3:8e:93:af:52:19:fd:8f:
08:56:67:ca:e4:0f:71:48:a8:d1:f7:43:54:a9:05:
49:61:5d:24:b0:4e:73:91:fb:c3:9f:f6:62:07:b9:
db:b4:78:f6:32:07:9a:1e:56:de:1c:5e:a9:43:74:
86:51:9f:71:76:12:4b:01:ae:69:10:e7:de:37:34:
8d:4d:af:97:de:25:4c:88:fd:97:53:2b:c4:f9:dd:
e7:6d:0c:74:8c:c9:f7:03:9a:b5:cb:26:c5:15:03:
00:05:24:3a:73:36:ca:da:e0:b9:ce:12:d7:67:70:
2b:47:77:57:4e:c6:1a:38:ee:ab:fa:25:87:ca:39:
47:60:7d:f3:65:7e:88:47:29:7f:3d:50:4e:a2:67:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FC:17:A4:51:A7:B3:26:0F:EA:9E:F2:5E:0F:53:DD:E5:80:2B:97
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:34:d9:c9:19:c5:c5:6b:d8:94:b5:a7:66:e7:07:5f:25:9d:
22:2e:13:f1:60:61:a4:50:b0:9f:8e:44:6c:87:53:e3:28:85:
07:2f:fb:88:05:c8:b3:80:42:b7:72:e1:a4:95:0e:8c:b9:84:
35:90:3c:d6:ae:d4:ef:bc:84:84:01:02:3f:55:a2:fa:81:a0:
7e:3c:c2:42:86:cb:a1:f3:a6:20:50:f6:39:33:e2:c2:fb:8b:
f9:31:4d:fc:96:7c:ab:1f:e6:4d:5f:c9:c0:0c:6d:cf:00:2f:
d7:2b:90:47:a9:68:40:96:f5:16:ad:c5:a9:f5:a7:47:91:1c:
e8:33:2d:6d:51:74:81:2b:d6:c0:6f:fb:09:23:5c:0d:ff:30:
33:54:7f:8c:c4:f9:7a:3e:f9:eb:bf:c7:6e:fa:12:89:46:33:
cf:3d:0b:28:3b:36:e6:e6:7f:28:46:68:64:cc:8e:1c:87:86:
54:0b:6d:2c:9a:2c:87:2e:fc:c8:30:78:92:9d:a4:e7:7c:e8:
a9:b1:04:b0:41:96:a3:66:6a:6a:f2:8f:7e:01:fb:66:c3:03:
66:bb:4e:a5:18:f2:b0:50:3e:0c:22:13:7e:8e:e4:8e:ce:13:
15:7b:52:13:c1:f7:2d:c9:a6:a8:80:5a:3e:c2:52:2d:c8:9c:
25:e0:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:18:26 2026 by rpki-client