Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: 4BnihVSoFDJhwh5Y4dDwWQPBUQ5TvP0ue4pCsSy5C+s=
Subject key identifier: AB:E1:E3:84:79:0E:77:68:D9:FF:12:00:81:AF:B7:49:29:E5:60:86
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 01A132906594769249C1A5BFA333852E8D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 17DA
Signing time: Tue 13 Oct 2026 00:01:26 +0000
Manifest this update: Tue 13 Oct 2026 00:01:26 +0000
Manifest next update: Wed 14 Oct 2026 00:01:26 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: 9ZA+7/Hrd7B7OCU3X10JCPNk+CLZkcLwacl5i+6HVy0=)
2: mEgDM3l5c0LrVuCqn477ft25k3w.roa (hash: KJ2JP42lCHcxJukTZAz4D69v5GnFU1eWXwSmVHNVnQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:90:65:94:76:92:49:c1:a5:bf:a3:33:85:2e:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Oct 13 00:01:26 2026 GMT
Not After : Oct 14 00:01:26 2026 GMT
Subject: CN=abe1e384790e7768d9ff120081afb74929e56086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:cb:a6:4b:40:81:d5:a8:82:1b:61:75:c1:
b4:9f:c0:53:f7:14:bd:03:4a:75:ac:27:dd:ae:8c:
66:9e:ff:ce:47:81:fb:9f:54:05:3c:aa:0e:21:90:
dd:43:5f:db:72:2c:46:f2:57:8a:70:52:65:da:c9:
97:7a:ee:a2:db:bf:b9:15:56:6e:02:b5:76:f9:a9:
cc:7a:6b:ed:9f:b2:f7:2e:28:94:da:ac:16:a7:de:
4a:dc:f4:02:a9:69:3e:bc:0f:19:95:6c:50:45:9f:
57:2f:98:bf:48:e4:c9:6d:29:6a:00:83:0f:a4:e5:
84:bb:a6:4b:0c:7a:f6:14:97:f9:80:d5:43:a9:56:
fd:c0:42:67:4a:11:31:e2:17:d3:d8:ae:ff:3d:4d:
67:54:eb:c8:69:62:68:f2:10:f7:c5:1d:29:39:fa:
28:b6:4a:4f:31:e5:e0:fa:25:c2:52:e5:ee:48:90:
32:70:31:7b:3d:10:9a:10:5e:39:f5:29:ff:5d:80:
ef:80:ef:dd:15:31:81:05:15:cb:86:10:58:29:ea:
e1:8b:79:5b:a9:d5:d7:dc:9e:19:f7:fd:e7:a5:2f:
9e:e6:01:18:49:02:e9:98:90:fd:4a:6b:b0:53:3b:
fa:39:74:d5:25:d6:d9:a2:61:25:2c:52:08:5f:33:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E1:E3:84:79:0E:77:68:D9:FF:12:00:81:AF:B7:49:29:E5:60:86
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:64:2e:f4:d0:8d:61:10:0c:37:2f:50:56:8b:f9:a1:45:ee:
ca:fd:2c:14:ae:97:bb:3e:09:83:4f:87:f2:9c:d4:41:fb:0b:
19:df:33:31:f2:42:6d:2a:dd:61:87:6f:ef:a5:a6:1e:cc:c1:
e1:97:39:8e:d2:38:26:21:fd:2a:91:ed:dd:dc:48:2d:af:97:
fa:d3:4d:22:99:d5:b9:76:dc:e1:1b:ff:83:2d:9e:e2:08:59:
d7:b5:05:3e:10:f1:69:9f:34:c2:1a:09:a6:65:da:78:40:be:
98:d1:09:22:c4:47:5a:e4:59:0c:fa:3e:5e:90:a0:3f:4d:a4:
45:f4:23:68:55:98:9d:6b:42:17:f4:24:29:d0:0e:3d:04:0a:
f7:a9:75:ec:da:94:22:6c:81:dd:2a:7a:be:a6:0c:d9:b7:83:
ec:60:7c:77:b2:ab:b4:a9:12:2a:8d:4f:94:26:f9:21:04:17:
94:d5:08:2e:64:15:4c:5a:9d:28:51:e8:17:80:64:ea:fe:1d:
bb:d8:84:8a:63:30:a4:a4:64:d9:11:ed:88:c9:29:fd:e7:83:
35:05:56:8a:f0:00:b4:55:c4:e2:6c:10:3a:8c:c7:4c:36:d3:
8e:45:03:1c:54:3e:50:96:f6:32:22:5c:ab:6f:b1:78:e8:27:
d9:60:5b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:50:21 2026 by rpki-client