Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: E5+Qv4CvAOr8iIZCgvxE5obvRHcrdFT8Pn1j3YZx45s=
Subject key identifier: 12:46:CC:B3:CB:7D:FB:E8:C0:D0:7C:57:66:77:94:32:9B:2E:4A:92
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 01A1A8CBF0828CC256B95AE67B524780BC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 1AC5
Signing time: Wed 04 Nov 2026 23:01:39 +0000
Manifest this update: Wed 04 Nov 2026 23:01:39 +0000
Manifest next update: Thu 05 Nov 2026 23:01:39 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: bpY9oTK//J5MPdCYsSfvH6wbglhaYngxXqHklIChhdM=)
2: T9rz93pJrKV5HZUDPNt-auvowcY.roa (hash: Y2TAvhfs7O4nAyyTTSyBt46eHZbCQZ13ePvrQ4ueMNo=)
3: rtoaF4eNoCfBlVaGIH3lILCxwDw.roa (hash: uP2Cltj1neggz9Zc7r+kubVviQuOHIeAbOo973WtReI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 23:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:cb:f0:82:8c:c2:56:b9:5a:e6:7b:52:47:80:bc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Nov 4 23:01:39 2026 GMT
Not After : Nov 5 23:01:39 2026 GMT
Subject: CN=1246ccb3cb7dfbe8c0d07c57667794329b2e4a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:21:4c:30:46:aa:9d:8f:72:37:11:05:a6:
32:fe:cd:7f:bd:54:1e:65:42:34:08:50:94:5a:0e:
3a:b4:a6:e9:87:f7:34:0e:09:0a:99:a0:53:c8:a2:
6f:62:e1:73:13:67:d6:8a:ba:63:51:22:94:47:16:
4f:35:84:6a:51:af:d3:bc:d2:53:0f:04:68:c0:4e:
df:5d:70:f4:d3:0c:b1:0e:40:7e:5c:f8:64:28:b6:
66:c4:92:69:ab:97:5b:0f:a1:14:ce:a7:7c:03:f0:
61:3c:06:d5:3c:55:cc:42:4a:68:28:54:43:54:95:
87:18:1f:a0:28:dc:3f:a2:36:ae:29:7d:39:df:b6:
69:84:7a:ae:8f:31:12:e8:9f:b2:e4:83:d6:9e:01:
50:e6:20:a0:37:a4:29:28:8d:00:7f:0f:52:2c:d7:
9d:2a:64:a9:87:0a:87:fc:d8:14:67:b5:29:29:f0:
41:99:6a:1f:1e:b2:5b:37:7f:45:a2:ba:1d:6e:ef:
ad:36:39:50:3e:47:95:46:9b:59:2f:7a:c4:24:bb:
3b:70:d9:4d:61:aa:aa:d6:f4:72:2a:6d:7d:cd:88:
8f:36:68:47:38:c9:40:93:ef:4a:13:62:d0:64:e5:
57:a4:ab:ab:8f:82:5f:24:64:c8:06:26:92:d5:19:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:46:CC:B3:CB:7D:FB:E8:C0:D0:7C:57:66:77:94:32:9B:2E:4A:92
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e9:ea:9a:76:ec:49:5a:f9:6d:fb:b3:aa:84:2d:ea:fa:ca:
b9:f7:41:1c:ba:28:0f:7f:b8:11:e6:bb:b5:55:98:c1:59:aa:
0c:d3:52:0a:68:25:69:ee:47:97:62:d8:4b:76:4b:07:41:9c:
e5:9a:75:ed:33:91:e3:e1:90:68:1d:57:0c:cb:25:f2:c7:92:
00:e8:e7:2d:03:88:05:0d:45:63:8c:20:f6:a3:4c:66:cb:91:
f9:c2:77:f1:54:5b:b7:fe:d5:8d:f8:81:3c:6e:73:1a:4a:43:
83:f0:6b:dd:97:ac:76:a5:af:65:45:d9:c5:27:05:01:82:ce:
62:9d:93:dc:88:ac:ec:86:94:a3:2d:b0:8f:2e:10:70:93:0c:
70:a6:8a:36:16:29:09:f1:2f:4e:2e:06:66:5b:b1:13:64:9c:
d7:5e:d0:60:49:74:9e:20:ed:d4:23:2a:de:a9:0b:75:c9:5a:
0c:89:f1:0c:cf:9d:d1:66:34:47:4c:ab:df:8f:7a:f6:05:9a:
a3:ba:79:18:3c:d0:bc:f6:3f:e6:ad:50:af:20:62:d2:71:4f:
3d:04:02:71:4f:97:3e:a0:fb:ca:ce:12:1d:c9:d4:68:da:60:
72:1e:05:ed:a2:7a:d8:a2:4d:a0:5c:09:52:b1:62:8d:8f:53:
10:f4:b4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:03:42 2026 by rpki-client