Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
File: 9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json)
Hash identifier: /8JIL8kh6R7382vTSxwTTvLreLiniCMvkwqRArGCOBk=
Subject key identifier: 46:02:BE:0A:65:28:FD:E0:15:F9:2B:BF:05:43:E8:E3:03:EC:28:6E
Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Certificate serial: 01A0DA5F87C4A0C5F991CDD9EDC208C2DCF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 21:01:28 +0000
Manifest this update: Fri 25 Sep 2026 21:01:28 +0000
Manifest next update: Sat 26 Sep 2026 21:01:28 +0000
Files and hashes: 1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: CqwkvUinBnE3tPl2VVaBZWsEAjtpfGlYT63TMdgE25Q=)
2: _nZKD9ZTGWn3ixeAqRkUR8-oFdY.roa (hash: E+dKSGK3CToMIv6bsluEab6asnsTgpRJX/4wcKUB3No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:87:c4:a0:c5:f9:91:cd:d9:ed:c2:08:c2:dc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Validity
Not Before: Sep 25 21:01:28 2026 GMT
Not After : Sep 26 21:01:28 2026 GMT
Subject: CN=4602be0a6528fde015f92bbf0543e8e303ec286e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:60:df:02:39:f7:f0:01:a1:88:ae:6f:0e:
50:37:9b:f6:90:1f:a5:2a:38:36:49:48:4f:d2:30:
e1:8a:aa:64:75:69:ce:7d:72:a2:2b:64:25:30:0f:
54:48:24:8f:6d:95:36:4b:1a:f6:96:a7:1a:7b:ba:
c4:9d:11:5d:0f:a2:15:a0:39:45:fc:19:aa:23:ea:
40:56:59:7c:5e:10:14:b9:0d:a5:a9:04:3a:fc:d2:
34:a9:dd:d0:32:5f:cd:5c:ba:bb:bc:d2:4c:8c:01:
d0:86:bc:cf:c7:1a:48:d8:8f:c1:d2:73:03:64:2d:
39:9e:b6:3c:66:3e:8d:64:2d:7b:ad:42:de:fc:b2:
a0:45:48:5a:c2:41:ed:6e:7f:0c:12:ad:f4:91:14:
d1:0b:96:4f:0f:43:fa:da:b9:b2:c7:d1:7f:f2:12:
f8:88:ad:ca:27:87:26:b6:ae:5f:15:b6:c3:e4:fd:
2b:50:bf:4d:68:f7:06:e7:c3:4e:09:43:2f:ba:cc:
92:48:95:33:3d:9f:c3:34:58:a4:fa:be:53:78:73:
7f:3e:e3:75:9e:14:8f:34:1f:a4:63:00:82:80:7a:
c1:e6:40:67:a3:a0:91:66:df:93:09:60:6a:d7:16:
32:18:31:87:9f:9d:6d:51:fb:e4:e0:2b:b3:3a:84:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:02:BE:0A:65:28:FD:E0:15:F9:2B:BF:05:43:E8:E3:03:EC:28:6E
X509v3 Authority Key Identifier:
keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:11:38:56:d9:f4:2c:a6:10:16:d3:cf:7a:79:d4:53:c0:9b:
93:80:f5:48:0c:3c:bb:c0:c3:5e:e1:13:7c:91:64:38:a5:3a:
13:14:fe:a4:74:86:48:e7:9f:5d:52:df:6b:71:ac:c3:dc:a1:
a2:4d:73:ad:de:ec:30:6e:f0:47:42:dc:8b:7b:9c:74:af:4f:
0c:29:30:71:c6:6a:9e:0d:d4:3e:07:79:4a:ce:e1:38:b9:12:
fd:69:0e:5c:a5:d2:4f:5e:16:50:22:bd:30:5b:72:28:d0:16:
9f:5d:9d:53:02:03:57:16:fc:07:04:f7:af:e4:39:4a:6e:a5:
c4:fc:65:57:9e:8b:44:87:fb:9b:fb:bf:86:cc:89:3f:1d:79:
70:4d:e0:e8:75:62:e7:eb:a9:83:0c:07:3a:75:7e:0f:52:28:
ae:c0:8f:75:1a:03:26:0c:b0:2f:15:58:7f:65:d6:e4:db:81:
d6:e1:91:7b:f4:8f:40:c5:16:c9:03:37:94:70:ad:13:68:7c:
de:46:f1:85:1d:49:de:42:08:11:f8:ff:5c:f3:26:af:0c:30:
1a:66:55:af:e8:a1:2b:42:3d:c4:e1:80:93:e7:0c:b2:81:6e:
d3:3e:21:aa:2c:82:c9:54:79:fc:ae:58:6b:ed:5e:bf:4a:b6:
49:1d:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:30:06 2026 by rpki-client