Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: 4TFzIJ1jYasUvKV8tnEfBpUDgsVq++vogzrjnTW2Fkw=
Subject key identifier: CD:AA:06:1A:02:16:BA:59:07:42:0A:CB:11:A1:A0:B6:E2:03:50:E2
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 01A0C40D996DAA273FC1A5A1379D54132007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 13:00:20 +0000
Manifest this update: Mon 21 Sep 2026 13:00:20 +0000
Manifest next update: Tue 22 Sep 2026 13:00:20 +0000
Files and hashes: 1: Yo_sQDnlWVAHdBUjfYUlBGrEGAk.roa (hash: UtSlgr8dKlU2oiUU/YuYyiNrWIQBlqU7VjuzqeMr5iU=)
2: Yohrn8HNTtjhGA9URKUO2_Mby_U.roa (hash: /XhETKRi5W1obuv4QEHTmdciLbp0sxJedBeaO8RsKsM=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: mTlVa2zG9QTmf+HtD3JYTLUVt1K0ioANLekv+SWD+II=)
4: pqiBFTplBLtHWoMHzRforQTq8dI.roa (hash: wl+v61veOlULrNd8VjKMUyPIgjxBb6XbU3q/woMIXVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:99:6d:aa:27:3f:c1:a5:a1:37:9d:54:13:20:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Sep 21 13:00:20 2026 GMT
Not After : Sep 22 13:00:20 2026 GMT
Subject: CN=cdaa061a0216ba5907420acb11a1a0b6e20350e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:aa:42:39:e7:cb:d9:93:78:dd:be:1e:04:
08:dc:e0:ee:94:77:e0:be:ec:0d:c2:6f:53:45:f6:
3f:da:3a:11:64:1d:86:42:ff:45:c8:8e:15:df:8d:
c4:33:34:fd:44:58:7e:8f:e3:7d:ad:d1:4c:78:c7:
10:c1:04:89:39:b5:e3:d3:bc:a5:f1:fd:5e:09:c2:
38:db:7d:e5:6e:22:dc:a5:aa:b4:2f:42:4e:65:0c:
07:25:ad:aa:53:b7:47:fc:2d:15:c7:61:23:ab:cb:
75:50:cb:a7:e7:d3:cd:cf:c0:32:7e:5a:02:cb:62:
e5:68:ae:58:ea:d2:87:7b:9d:a0:2c:f3:8a:dd:84:
fe:cf:b3:49:c5:44:2e:e9:4a:01:9b:1e:38:de:51:
36:4d:45:cc:f4:ad:3a:14:42:84:f3:9b:a3:92:af:
9b:13:85:ad:07:7e:04:b3:22:7f:b6:75:ac:47:65:
ef:c0:16:e4:f8:2b:88:07:0b:84:5e:90:e8:fc:8c:
5d:d2:a5:73:c4:a4:66:5b:76:55:99:58:54:ea:4e:
f7:d5:72:7b:9a:51:49:0c:a2:b2:55:0f:38:44:94:
fc:c1:cd:57:cb:ac:dd:5f:ae:63:02:4e:8f:16:ec:
e7:64:ad:d4:bd:25:a4:05:d1:d1:0c:fc:20:dc:da:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AA:06:1A:02:16:BA:59:07:42:0A:CB:11:A1:A0:B6:E2:03:50:E2
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:75:d1:63:7f:5d:94:92:4c:b9:67:b7:37:f7:bb:5e:cd:d7:
bf:b8:38:10:25:74:da:0f:87:c2:8e:23:d3:43:ab:78:21:8a:
e7:77:8a:04:d1:66:de:80:a4:73:ed:0d:73:e4:d3:b1:a8:99:
73:50:6c:47:f5:24:8f:eb:ba:33:23:52:3c:57:ad:fc:43:49:
07:ec:92:08:58:97:48:6b:9d:6f:e9:9d:33:ad:1e:15:3f:3f:
8f:ee:74:98:12:b0:80:b0:c1:41:fc:c9:49:86:d4:21:7a:ca:
60:1f:17:eb:80:10:7e:53:c0:f2:fa:96:08:3c:9b:4d:8c:33:
5d:83:32:bf:e9:ca:26:1d:86:b3:85:6a:9f:b3:37:fc:1d:06:
eb:0c:b4:ac:6d:34:04:e8:1d:2e:3a:cb:54:4f:0f:02:f4:7e:
7f:8d:2a:a4:ad:f2:5e:0c:bb:c8:15:30:a6:15:c3:88:d4:2e:
af:d1:db:ef:b1:74:03:67:a3:23:ec:02:d5:37:8d:dc:f7:6d:
1c:d6:eb:e8:b8:f4:da:bf:79:9f:7e:2b:8e:c1:b6:26:03:ea:
78:2a:9a:0e:ca:45:64:53:4d:0b:25:44:b5:6d:d1:89:03:d3:
32:9c:08:99:40:f8:84:22:52:56:31:d2:d7:36:5d:db:cf:c7:
1d:9d:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:13:22 2026 by rpki-client