Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: wMZWGHJ5SumfeykqHr0LlcFkI5QV3NRo3AJ16ZGLSQk=
Subject key identifier: 02:61:FF:CC:0D:37:2C:FB:C7:20:C0:17:10:99:CB:76:6D:61:B3:8F
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 01A0C10D20D70E2AA6A3F23252C6888C23FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 1A4D
Signing time: Sun 20 Sep 2026 23:00:58 +0000
Manifest this update: Sun 20 Sep 2026 23:00:58 +0000
Manifest next update: Mon 21 Sep 2026 23:00:58 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: 9kK+/Jp+RDkmcZNnpN1Y3cYvm3nQ4C+ZFheUQ8dVNnw=)
2: T9rz93pJrKV5HZUDPNt-auvowcY.roa (hash: Y2TAvhfs7O4nAyyTTSyBt46eHZbCQZ13ePvrQ4ueMNo=)
3: rtoaF4eNoCfBlVaGIH3lILCxwDw.roa (hash: uP2Cltj1neggz9Zc7r+kubVviQuOHIeAbOo973WtReI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:20:d7:0e:2a:a6:a3:f2:32:52:c6:88:8c:23:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Sep 20 23:00:58 2026 GMT
Not After : Sep 21 23:00:58 2026 GMT
Subject: CN=0261ffcc0d372cfbc720c0171099cb766d61b38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:57:71:61:11:ba:22:6b:da:51:6e:a0:f4:
cb:e8:72:ba:da:7e:fe:47:cc:ad:e6:9a:31:2d:e8:
50:9f:26:50:25:8d:a2:29:4e:9d:5c:75:75:42:16:
66:34:0d:97:37:d2:82:6e:48:b8:39:ad:4f:3d:44:
cf:7e:b7:f3:82:26:16:10:16:44:f2:2c:11:27:36:
7e:ea:c4:57:0a:79:6d:3b:46:9f:8b:9f:d7:b3:82:
b0:ac:c3:af:c6:28:95:a8:02:3c:42:0a:a4:bb:da:
34:f9:82:ca:26:29:1a:bd:2d:19:e3:c8:46:a9:47:
cb:19:57:15:75:fa:93:a1:c4:29:d5:97:9c:fe:74:
4f:ec:9e:9d:73:6c:ef:49:39:92:83:05:a9:7e:36:
76:78:af:d3:9b:01:7b:80:a0:d6:69:15:90:d4:b6:
1c:47:0f:12:b2:79:98:d1:31:22:dd:69:9c:d8:f1:
89:e8:dd:80:71:3b:8e:bb:e8:1c:1b:3c:e9:ee:4c:
e8:80:cc:00:80:67:c6:57:48:e6:6f:c0:48:d5:d1:
41:4d:3f:74:6b:bb:76:03:91:95:0c:20:b3:17:5f:
63:7f:52:52:85:45:16:90:f3:5f:fd:64:a1:a9:24:
84:46:18:47:34:8f:7d:ab:bc:62:28:06:a7:22:50:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:61:FF:CC:0D:37:2C:FB:C7:20:C0:17:10:99:CB:76:6D:61:B3:8F
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6c:27:b8:a4:39:b5:3e:e0:72:57:a2:58:5b:d2:85:e6:ed:
ab:ee:5b:5f:73:10:93:30:f5:66:f4:c0:7c:64:93:c8:13:52:
e0:5f:a8:84:48:ff:32:e4:40:b2:88:d1:2f:3a:c4:b3:ea:cb:
e8:87:ac:6a:5e:c3:d5:a3:e6:63:c0:0a:3d:95:50:b9:e3:63:
da:b9:cd:8d:6d:e3:58:36:8a:dd:37:93:20:23:3d:95:ed:7b:
d9:b7:dd:bd:77:8d:20:6f:e9:94:88:07:2d:ff:d7:cb:1e:83:
04:a5:9a:29:4a:1a:97:4b:c2:b5:ad:ea:0b:ce:af:51:47:ca:
1a:a4:a8:99:02:9d:09:53:b4:ed:3a:d4:aa:e5:e5:40:85:8c:
3d:24:8c:de:5b:45:a8:89:04:98:10:97:b7:9f:75:93:4b:26:
49:82:97:06:73:a7:35:19:6f:9b:f0:5a:5f:b6:82:6d:45:c1:
35:fe:5e:8e:d8:d7:c6:ba:d2:33:2b:4e:25:6b:8d:84:e4:70:
ca:a2:0c:50:5b:e3:09:00:f3:85:14:aa:be:18:8d:e1:3e:15:
09:e4:59:7c:14:c4:6d:72:f7:57:61:f1:48:4d:a1:b5:8e:06:
2c:d1:2b:23:4f:3b:91:4c:4e:17:32:dc:ee:cf:f5:5e:bc:f5:
25:29:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:47:48 2026 by rpki-client