Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: Hkrc0BK1RcOF05zdmn7uilVXvtJ3jUvTy/B+U7pM9jw=
Subject key identifier: 4C:C7:58:F1:97:CC:02:42:12:A1:3F:43:56:5B:97:55:0B:61:D3:04
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 01A0C7B3CC8374B76E27802E25C437B8CFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 1A70
Signing time: Tue 22 Sep 2026 06:00:44 +0000
Manifest this update: Tue 22 Sep 2026 06:00:44 +0000
Manifest next update: Wed 23 Sep 2026 06:00:44 +0000
Files and hashes: 1: 14LKfzEcyprlucXZUzPgqnyuaSo.roa (hash: owEZKmUqoURhemkZHaPKsDWoCPoanQn9LH86MqhDwCI=)
2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: 6UKYA1YSYlL5tHSSPiRUyN9rq4Pkdhom+0d4VSwuHJ4=)
3: G5qi4rCJoI8AUX8isP7b0ojIn7g.roa (hash: FS/t0aq2LUO9zTLCRQWanvLuxo6AAzEoo01kqAkUXDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:cc:83:74:b7:6e:27:80:2e:25:c4:37:b8:cf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Sep 22 06:00:44 2026 GMT
Not After : Sep 23 06:00:44 2026 GMT
Subject: CN=4cc758f197cc024212a13f43565b97550b61d304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:fe:2f:25:87:fe:76:30:ff:00:73:12:38:
ed:42:a2:fe:db:0c:a4:8e:45:80:34:6f:aa:19:36:
a0:5c:90:4e:e2:f1:ee:59:a4:0d:2a:2f:2a:de:f7:
6c:99:f5:b6:0d:9a:c7:72:1b:69:e9:08:20:54:c0:
31:ba:24:e9:f1:36:98:3e:88:12:ca:72:77:a0:fc:
b2:f7:10:ee:c4:da:0d:c6:ab:b9:f6:0a:eb:d1:e9:
28:d8:51:90:01:ee:0d:a5:fe:ca:68:22:04:ca:14:
32:6a:17:a7:f7:53:69:f2:5d:7b:74:b5:7f:05:13:
8e:7e:46:e6:81:f6:32:24:90:27:3c:be:39:e3:83:
9c:92:d0:e3:34:de:0c:1d:e7:22:b0:45:d2:dd:99:
be:a7:72:d3:34:b4:89:fe:d8:ac:0b:12:2b:77:5a:
52:8b:01:80:3f:7d:4a:79:8d:ff:d6:a2:2e:50:ed:
6b:55:25:32:14:b1:cb:1b:3b:79:8c:92:f9:4e:85:
33:b8:9a:6d:24:e7:2c:2a:9b:b7:8c:ab:34:02:0f:
d2:91:96:02:5c:b2:aa:46:9a:43:a7:de:a0:02:d4:
51:bb:24:30:90:d7:ab:19:f6:7a:37:72:d2:ca:0e:
8b:3f:97:b5:23:e9:db:0d:ed:87:b4:f9:5d:aa:38:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C7:58:F1:97:CC:02:42:12:A1:3F:43:56:5B:97:55:0B:61:D3:04
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1a:85:bd:22:76:ee:26:a9:b7:73:fe:5d:3f:29:ff:92:25:
c5:1f:f1:d1:7a:61:85:02:b0:6c:a3:c8:35:b1:af:6e:dd:2a:
b3:c1:5a:a5:b5:08:a5:0f:c6:00:d0:b5:71:38:3d:e8:d8:18:
a2:7b:47:d4:90:f7:2d:4f:fc:be:31:36:6b:67:ad:ca:d1:16:
2b:93:cf:86:5c:93:a1:b2:d8:15:1a:84:9f:ce:98:f6:c7:c9:
8e:34:93:d0:8b:cb:69:ed:37:8b:e4:8f:a6:2b:7e:20:bf:e6:
a3:c0:76:81:a7:87:30:af:6b:26:4f:22:d7:6f:e0:66:11:fd:
8d:83:86:c7:b3:09:f9:e6:3f:25:61:ac:e6:cf:07:f4:36:7d:
6a:30:92:be:6e:43:b5:76:e4:16:04:c2:3a:0a:56:1a:d9:1f:
7a:b1:c4:4d:9e:ed:5c:09:70:84:32:83:a7:cd:69:f9:fb:38:
78:7d:8a:90:2e:0a:e9:75:43:96:74:26:f5:56:98:56:cc:bb:
00:57:f5:1e:ce:81:d8:4e:ac:f6:dd:02:f7:07:eb:de:4c:57:
65:aa:06:2c:35:bc:85:35:76:58:22:d7:d5:73:1a:84:c5:b3:
da:2d:ae:71:ef:b7:1c:1f:c5:dd:22:3c:e7:e0:9e:f6:0a:58:
32:f7:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:13:02 2026 by rpki-client