Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
File: F_2hoaCf3teimtqgN1JFpM7SPGg.mft (raw, json)
Hash identifier: BdoT4QNdabXvNkhtq2QXHt6GYO4TAnrJE5HI0iGQFKU=
Subject key identifier: AA:81:94:BF:9F:AD:4B:BB:1A:33:9E:FE:C2:F4:DB:3C:F9:5D:DA:95
Authority key identifier: 17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
Certificate issuer: /CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Certificate serial: 01A0D426CE9C31E9FE851E92E5AD85A550A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
Manifest number: 01B9
Signing time: Thu 24 Sep 2026 16:01:47 +0000
Manifest this update: Thu 24 Sep 2026 16:01:47 +0000
Manifest next update: Fri 25 Sep 2026 16:01:47 +0000
Files and hashes: 1: F_2hoaCf3teimtqgN1JFpM7SPGg.crl (hash: cegTN2Chcxeg9f3W7DLRRWQH/5gXRH5dXSiXSWyWoxw=)
2: V_lZZIqY5s85SF0ugHkKTWjJMIw.roa (hash: k646Q+fHI6cZiQ9lJkMUeqvbWvtUz1EBniyuZudyxSE=)
3: ccpyB2p3G0mmKqz1sdLuUDX6wl0.roa (hash: VbBq9JONk0sG6hiNflvsf2M93Fqkn8mHP3+rmtcZv9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 16:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:ce:9c:31:e9:fe:85:1e:92:e5:ad:85:a5:50:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Validity
Not Before: Sep 24 16:01:47 2026 GMT
Not After : Sep 25 16:01:47 2026 GMT
Subject: CN=aa8194bf9fad4bbb1a339efec2f4db3cf95dda95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:d0:30:be:0a:87:44:3b:8c:1c:f0:ce:a6:
f5:30:d3:58:6b:1c:55:45:ec:01:2b:c5:04:d5:83:
ae:33:a9:11:9e:0d:b1:20:f4:12:e8:49:55:8d:6d:
aa:c4:19:ea:a9:6b:48:c6:ba:a0:03:1b:45:e0:3e:
c5:a1:1e:88:99:35:95:e0:0a:9b:70:5b:51:4f:37:
54:ee:0e:79:23:6d:16:c8:45:79:9e:56:1b:1a:fb:
bc:ff:1a:91:6f:39:c9:cd:a1:eb:5d:40:52:57:00:
47:56:f2:97:73:e3:7f:55:74:7b:84:60:b8:a7:29:
0f:42:79:e0:55:81:c6:c6:cf:c0:cd:62:8e:90:3e:
54:af:c4:68:7b:ec:b7:2d:47:42:53:98:a8:00:76:
a0:45:2e:76:b5:67:ce:a3:21:1a:8e:17:be:d6:32:
38:e2:9c:aa:4b:c2:96:c8:cf:67:9c:fc:9f:18:64:
d6:ec:d1:cf:a0:1d:71:e0:d3:b2:22:7a:09:a9:38:
5a:b3:8b:3c:12:c5:f7:eb:5d:21:87:41:a4:42:66:
4a:2a:44:e9:04:fa:99:67:93:8c:be:a8:78:7b:6b:
21:dc:c9:e2:49:28:a3:54:14:50:ad:54:08:4f:57:
7a:28:0f:19:ab:1f:a1:a2:b8:46:b5:5c:5d:0b:cb:
db:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:81:94:BF:9F:AD:4B:BB:1A:33:9E:FE:C2:F4:DB:3C:F9:5D:DA:95
X509v3 Authority Key Identifier:
keyid:17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e9:fb:48:76:e3:8f:32:56:24:60:29:63:d3:fc:fc:48:95:
8b:f3:8e:11:18:bb:3d:1a:0c:29:ec:58:e2:27:83:58:b4:a8:
24:8a:f4:58:a9:bd:68:b7:40:2c:f4:22:d2:3f:1d:2d:dd:4f:
b6:e8:2d:6f:e9:ba:2f:eb:17:aa:93:48:0f:0c:6d:2b:81:1a:
9b:65:64:e8:ae:b6:c7:f6:8f:87:9f:3f:f1:3a:17:56:45:af:
fb:6f:bc:25:23:54:d0:a3:0e:9d:d4:31:85:5e:3d:2c:08:f0:
bb:98:93:3a:db:f6:81:0d:df:12:c7:c1:91:38:95:2f:6a:ec:
58:67:00:0d:6a:9f:a4:17:56:cc:54:7b:9a:d8:6b:ff:cf:82:
6a:0e:6c:c2:94:c4:33:44:e2:ed:c8:af:28:e6:68:90:2b:2e:
6e:94:80:9b:29:1d:b2:a3:fe:ee:5f:c5:2c:45:70:68:6a:83:
b4:7b:91:8a:a5:75:b1:ea:11:de:d8:68:56:95:48:de:72:6b:
3e:72:ca:74:34:65:78:55:f6:8b:b2:bc:2d:4d:48:c0:1d:e7:
df:48:2a:ff:9d:fc:cb:5a:ea:a6:70:d2:2a:74:d8:f1:ae:08:
3a:63:38:e5:8b:5c:15:6f:fb:28:93:18:7d:23:cc:c9:54:75:
5d:81:86:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:12:51 2026 by rpki-client