Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: m8h40Z8Zyhji45e/DVvnGE9lI71oBtwbw2fxsoryzKM=
Subject key identifier: 4B:0D:22:CC:B3:CA:95:7B:35:F8:A7:81:75:CD:0B:62:AA:75:B9:CE
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 01A0D26DD541304462976A09497927494F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 08:00:08 +0000
Manifest this update: Thu 24 Sep 2026 08:00:08 +0000
Manifest next update: Fri 25 Sep 2026 08:00:08 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: U7aw9aq7vsAZz5BggPKudtjk0EVcP2+XQZpLNUVKV0g=)
2: HZePOmsjkPsg7dlktNrDrbvkEoQ.roa (hash: EMtZKX87wa385GEwMyBcWWCzgkUjroenf3wknZ0qOr8=)
3: feUrijd_KveyJ7eNJ1rBQYy4hhQ.roa (hash: 8ChsNr7pTk9JhrykIfRkpxl+JlzU+6lvsFJu1WkZIeY=)
4: jbQbuOumCNgoddvSeNQ0EqiLIvk.roa (hash: r2PNx4QtBVQh/b8nKhzHQVcKqAGoHRGsycMInrQsQyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6d:d5:41:30:44:62:97:6a:09:49:79:27:49:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Sep 24 08:00:08 2026 GMT
Not After : Sep 25 08:00:08 2026 GMT
Subject: CN=4b0d22ccb3ca957b35f8a78175cd0b62aa75b9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e5:c5:45:5a:8c:7b:6d:a0:70:88:f4:38:f2:
24:ce:93:56:4c:e4:62:9d:f6:92:9a:92:d3:35:71:
c3:93:76:db:ed:97:9e:38:2b:bc:fb:86:cf:e7:3f:
24:ef:5d:cb:38:2f:3d:c3:6a:09:f6:11:06:89:ba:
64:1d:e9:b7:37:5a:a2:52:98:22:d4:c3:de:73:00:
6e:70:1a:da:09:33:05:0b:f9:59:65:c3:90:55:db:
ec:ad:55:3e:94:c8:6d:62:34:4a:4a:6d:a6:ed:d6:
c4:cd:5a:b2:23:b5:8c:cc:ab:46:82:ef:e2:80:aa:
a6:4a:49:b8:5a:9b:a6:27:e3:b1:ac:af:d3:c0:de:
54:d3:a5:02:e3:52:55:1a:f7:50:c9:16:84:0a:a5:
53:ce:ce:4f:b0:8f:bf:3a:36:ff:2e:03:73:66:53:
db:ad:f9:b0:c7:30:88:29:a6:f8:4c:88:c3:2f:00:
dd:1f:bd:8a:a0:5c:ad:ad:a9:95:87:ba:55:a3:60:
04:89:b5:80:5f:24:05:9e:9c:3c:c3:2c:43:7c:16:
d0:1f:62:37:e7:d1:94:25:fe:79:0b:e1:23:b4:e0:
6f:bf:83:bb:5d:28:59:aa:f3:f1:bd:5a:20:77:73:
83:ce:87:c1:04:28:12:0a:4b:89:3b:b2:9f:09:c7:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:22:CC:B3:CA:95:7B:35:F8:A7:81:75:CD:0B:62:AA:75:B9:CE
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a9:5a:f4:d7:b0:a1:55:86:83:ed:1d:1c:7c:84:a5:64:d8:
69:f7:61:6a:f4:99:72:28:18:fa:6f:9c:d1:c3:a6:ee:6f:68:
07:e1:24:24:d2:d1:a2:44:5b:4d:db:f9:58:a8:f4:34:59:8d:
1b:e9:15:d9:f6:b4:2e:df:ee:72:6f:90:42:2a:10:d6:f5:1f:
85:6d:af:de:0f:29:3c:bb:01:be:1e:ed:c1:32:4b:fe:24:ca:
f4:da:35:9e:77:b8:13:f5:f2:0b:24:c9:b7:52:6f:5a:c2:1f:
2e:e0:52:81:fd:9f:0d:ab:3e:ca:11:bb:35:2a:36:c4:cc:b8:
ba:15:8c:f7:87:8f:50:2f:90:be:fa:2e:04:24:b6:6a:57:e4:
f3:1b:38:60:0b:65:1f:ac:13:60:e0:2e:05:69:91:be:ed:40:
72:79:bf:5f:2a:ba:fb:85:9b:43:8d:f2:f0:b8:58:98:61:fa:
35:af:04:90:44:8a:97:74:89:bd:fd:31:96:a9:b8:fb:a8:94:
ef:d5:b4:71:03:3a:75:8f:20:1d:8c:72:49:e3:2d:c9:48:63:
a3:92:24:7e:69:1f:e3:5b:8d:a3:9e:49:86:c3:33:02:0b:fe:
63:c3:26:af:d3:63:46:fc:19:19:a1:ff:73:52:5d:d0:b4:42:
74:7f:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:42:16 2026 by rpki-client