Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: NxLJqBgYFzk6vPYgp775z/BjY8I6bjs+KYoeaM3v4lU=
Subject key identifier: 83:51:F8:30:BE:AF:79:64:07:93:AA:BE:E9:98:25:BC:DB:63:F3:E2
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 01A1DDCC0F8BC2CFFCCE18311E8DE1E69670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 06:01:40 +0000
Manifest this update: Sun 15 Nov 2026 06:01:40 +0000
Manifest next update: Mon 16 Nov 2026 06:01:40 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: OakMP2I4U+zsAlKQFJh5QllIuC4vjF+GYkJVmCvurqc=)
2: IRtOc9xNuHtN4zmsWWnKZRqgKMs.roa (hash: jkPYQDPHDAj2YZTZO0wQGRdV29/MSC+GrpeiHVDq/M4=)
3: Jomyc4HWtnITYsIDG8BVeLdHId4.roa (hash: klQBrykZJDAdf4GMS1JWIpprMsc/7rY9pUPlh5dkvXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:0f:8b:c2:cf:fc:ce:18:31:1e:8d:e1:e6:96:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Nov 15 06:01:40 2026 GMT
Not After : Nov 16 06:01:40 2026 GMT
Subject: CN=8351f830beaf79640793aabee99825bcdb63f3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:1d:4b:1e:81:5d:41:27:74:c3:b1:65:6f:
d9:4d:94:ef:3b:80:55:f4:59:3f:d4:41:9d:0c:cc:
68:e6:8c:78:c8:ad:48:7e:e9:cb:df:a9:6f:7f:81:
5a:77:46:c4:13:49:48:29:85:fb:61:7d:0f:be:92:
10:15:1c:2f:29:50:4a:8f:d2:fc:bc:98:80:3f:9d:
ed:07:69:3e:95:19:f3:bb:53:8c:f2:f5:ab:50:89:
98:cb:32:e4:1e:15:f8:87:af:91:a5:d2:47:47:c8:
71:03:0d:ca:7d:e5:45:e5:d6:31:f7:84:c6:7c:67:
46:f6:12:9c:69:46:ce:1e:be:2a:77:97:be:59:db:
d9:79:65:4f:7f:53:f9:1d:48:9b:df:ca:da:59:63:
af:7c:00:25:17:d8:ff:7a:58:45:36:f2:50:85:4f:
97:00:f0:69:56:11:84:d5:1e:c0:b2:ec:b7:3c:a6:
59:9b:8f:95:92:89:bc:37:cf:df:71:08:1d:be:81:
aa:f9:5f:ea:ee:a6:e8:6c:4c:a2:d7:ca:f3:45:f4:
5d:47:47:77:67:56:64:ef:16:90:22:c1:0c:73:df:
b4:97:df:d1:35:4b:70:d5:bb:84:87:87:e4:c9:4b:
91:4f:c2:5b:97:f5:cf:f4:81:77:1a:d9:c4:b0:89:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:51:F8:30:BE:AF:79:64:07:93:AA:BE:E9:98:25:BC:DB:63:F3:E2
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6c:d6:78:73:84:4f:9a:40:05:c8:8a:a9:3b:74:26:64:28:
ed:23:32:af:b7:ee:ee:ff:e4:de:bb:80:96:ea:e9:99:11:98:
32:09:e4:84:60:d7:15:e5:a8:ec:7a:13:0e:65:18:54:67:22:
b2:cd:74:2b:f1:2c:80:19:f6:cd:b6:16:17:8a:3f:a3:a7:82:
0a:18:ef:6d:aa:b1:b3:b0:83:ed:15:36:9c:9d:87:69:71:91:
8b:10:f7:e9:2c:d6:94:fc:be:ad:75:4c:77:4e:16:29:d4:41:
5a:f1:5c:9f:fd:35:30:fb:ae:c4:f0:6c:80:03:d9:cc:9e:d8:
e7:bb:86:49:fd:25:af:65:6b:15:49:c6:e4:3f:f2:ee:11:6c:
30:9d:5a:3b:11:e2:cc:ae:31:72:f7:1c:5e:b2:e8:8c:3c:4e:
1b:34:f1:56:ea:b1:32:26:9c:df:c0:d3:14:34:42:7c:3d:79:
76:63:2c:37:c1:19:b1:5e:6e:0c:4a:3c:73:2a:f1:57:ef:14:
2a:2c:3c:87:7b:26:73:b0:4f:aa:4a:9c:4b:b5:4f:18:ee:39:
b7:88:3f:02:c4:99:5b:43:2a:d7:a0:6b:52:ec:c4:e1:59:26:
4a:a4:6d:a6:65:5b:8f:8b:db:7f:e7:5c:a5:38:a4:e2:40:a2:
1d:a4:1b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:45:44 2026 by rpki-client