Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: bhgxTKwdRgl4wg86j7e6mNpIalTiImQrlOA2Aoe/xzE=
Subject key identifier: 61:A8:72:4A:F9:17:CC:64:72:F3:D4:20:44:AD:36:D5:81:28:3E:CE
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 01A0DC16A509C3ED3B773CDCE9CF84F68FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 0A29
Signing time: Sat 26 Sep 2026 05:01:06 +0000
Manifest this update: Sat 26 Sep 2026 05:01:06 +0000
Manifest next update: Sun 27 Sep 2026 05:01:06 +0000
Files and hashes: 1: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: A36kpfKtZRn3BoCz+KHI97bWIb+2carSR36p2xmmfVY=)
2: Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa (hash: llVgeSirYRMnxHxg+jow3ZLNY2RJpGEBaB4uInwuLpg=)
3: q7LASc7RAdvhKI2lD0l4EEgjIM4.roa (hash: Nr2UUQFi//KxEpaf+hC6t8vMKhEd7i+ElopwPR5ej6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:a5:09:c3:ed:3b:77:3c:dc:e9:cf:84:f6:8f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Sep 26 05:01:06 2026 GMT
Not After : Sep 27 05:01:06 2026 GMT
Subject: CN=61a8724af917cc6472f3d42044ad36d581283ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:63:50:99:d4:c1:0b:ec:47:84:95:70:73:d4:
7b:da:8f:fc:e7:70:7b:34:b1:14:a3:36:1e:1e:de:
a2:16:ec:b2:95:42:5f:b8:d1:f0:69:64:ef:2a:ff:
d7:28:ad:ff:33:e7:7b:f3:5a:89:6d:31:42:ff:04:
c5:f1:6f:8a:bf:40:ea:fd:d6:fa:01:cd:fb:d6:cc:
40:62:5e:96:c6:da:ed:61:c1:34:8c:43:ee:2f:11:
10:ab:72:48:c5:e1:fe:65:f8:45:88:03:e0:0c:6f:
7d:bb:b9:9d:ca:45:cc:cf:22:18:3c:43:90:68:f6:
85:7d:cb:6b:31:5c:39:ee:4f:25:d2:a6:ef:59:76:
91:f6:b4:40:34:d7:7b:b0:39:bd:f8:79:4e:f0:f4:
d7:55:93:84:9e:d4:f3:66:e2:99:19:fa:44:17:c0:
6f:8f:94:ba:ef:1f:df:ec:fa:ec:38:60:31:d7:61:
d3:45:fb:c9:2c:5d:2a:06:6f:72:03:2a:15:d3:53:
bf:74:06:77:c0:4f:c2:a2:a9:b3:78:1e:2e:38:24:
57:06:20:5b:27:9e:6d:28:75:fa:5e:f3:b0:d3:02:
9d:d3:98:56:22:cc:cc:74:06:51:cb:11:7a:5e:f9:
e2:d6:ad:4b:79:5d:ee:8a:45:26:66:2f:60:af:dc:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A8:72:4A:F9:17:CC:64:72:F3:D4:20:44:AD:36:D5:81:28:3E:CE
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:04:4b:04:36:19:9d:17:e3:b5:4a:6e:a6:14:d6:c7:a0:6b:
41:fc:ab:88:0b:90:13:d3:98:95:c8:48:58:15:6a:f3:a2:ce:
e4:67:fa:5a:a4:8e:ac:6d:9f:6a:c3:44:61:6d:00:0d:44:82:
77:d2:1a:d7:b0:47:50:2c:da:8e:af:17:78:96:cd:e5:df:07:
78:47:28:d0:79:03:3a:fa:4d:51:33:61:50:77:56:4d:9c:c9:
a3:85:86:af:fa:09:89:03:9f:5c:82:f4:ff:9c:6d:ea:be:0c:
ad:df:92:5e:53:3e:f5:83:ef:64:9f:f9:97:16:c3:6e:ca:6e:
dd:d2:19:bf:7c:bd:81:fa:04:36:ef:c7:d1:e4:bb:f2:ef:e3:
63:5a:c1:0c:8f:2f:58:e5:89:08:5d:a0:f6:49:18:c0:ea:6c:
db:90:93:2c:34:d0:da:90:cd:56:95:65:4f:a0:9d:16:9e:e9:
41:68:b7:f3:26:80:84:17:36:8a:1d:37:91:75:29:8b:18:07:
41:ef:f8:50:2f:88:66:43:15:7e:78:5b:c8:9e:df:d9:77:cf:
f8:2b:c1:61:1a:a5:0c:70:1c:a9:42:bd:80:4c:53:04:84:95:
ff:37:5d:d2:95:5e:a9:19:49:79:a4:38:ab:98:3e:4a:62:46:
29:a5:f9:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcFqUJw+07dzzc6c+E9o/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Mzg5NDdkZGI4OTJmNWYzYTQ4YTY5YWY5N2E4ZmI1MjEw
M2EwZDYwHhcNMjYwOTI2MDUwMTA2WhcNMjYwOTI3MDUwMTA2WjAzMTEwLwYDVQQD
Eyg2MWE4NzI0YWY5MTdjYzY0NzJmM2Q0MjA0NGFkMzZkNTgxMjgzZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GNQmdTBC+xHhJVwc9R72o/853B7
NLEUozYeHt6iFuyylUJfuNHwaWTvKv/XKK3/M+d781qJbTFC/wTF8W+Kv0Dq/db6
Ac371sxAYl6WxtrtYcE0jEPuLxEQq3JIxeH+ZfhFiAPgDG99u7mdykXMzyIYPEOQ
aPaFfctrMVw57k8l0qbvWXaR9rRANNd7sDm9+HlO8PTXVZOEntTzZuKZGfpEF8Bv
j5S67x/f7PrsOGAx12HTRfvJLF0qBm9yAyoV01O/dAZ3wE/CoqmzeB4uOCRXBiBb
J55tKHX6XvOw0wKd05hWIszMdAZRyxF6Xvni1q1LeV3uikUmZi9gr9xY5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGockr5F8xkcvPUIEStNtWBKD7OMB8GA1UdIwQY
MBaAFPY4lH3biS9fOkimmvl6j7UhA6DWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yODliOGQtNzhkZS00MTYwLTkwZDMt
NjFkMjY2MDNjMzdjLzEvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8yODliOGQtNzhkZS00MTYwLTkwZDMtNjFkMjY2MDNjMzdj
LzEvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQRLBDYZ
nRfjtUpuphTWx6BrQfyriAuQE9OYlchIWBVq86LO5Gf6WqSOrG2fasNEYW0ADUSC
d9Ia17BHUCzajq8XeJbN5d8HeEco0HkDOvpNUTNhUHdWTZzJo4WGr/oJiQOfXIL0
/5xt6r4Mrd+SXlM+9YPvZJ/5lxbDbspu3dIZv3y9gfoENu/H0eS78u/jY1rBDI8v
WOWJCF2g9kkYwOps25CTLDTQ2pDNVpVlT6CdFp7pQWi38yaAhBc2ih03kXUpixgH
Qe/4UC+IZkMVfnhbyJ7f2XfP+CvBYRqlDHAcqUK9gExTBISV/zdd0pVeqRlJeaQ4
q5g+SmJGKaX5qg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:26:39 2026 by rpki-client