Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
File: 9aSNNBWgK5T1T-4rZZSPJetPfdo.mft (raw, json)
Hash identifier: 2dSSpj+hcRe6ub8093nu7BLtc5d/RayVhrtUA3bOWAk=
Subject key identifier: 7A:64:16:4B:8B:ED:C3:FB:7F:05:0C:72:93:2F:E8:F6:04:0C:53:A2
Authority key identifier: F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
Certificate issuer: /CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Certificate serial: 01A1DE39AD08152FFE5B061B4BD2E1832B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
Manifest number: 01A1
Signing time: Sun 15 Nov 2026 08:01:24 +0000
Manifest this update: Sun 15 Nov 2026 08:01:24 +0000
Manifest next update: Mon 16 Nov 2026 08:01:24 +0000
Files and hashes: 1: 9aSNNBWgK5T1T-4rZZSPJetPfdo.crl (hash: gfJyYAn0WFPdPPMaCa4Q4Qb3bvoNldpOTaaVxmTyXUI=)
2: KB-nu_fDuo0XIMgqWugjNtPelKM.asa (hash: xVtyR3/ZytBeSN3L364bzhtV6xgki7m57Wrm3JRE2Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:ad:08:15:2f:fe:5b:06:1b:4b:d2:e1:83:2b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Validity
Not Before: Nov 15 08:01:24 2026 GMT
Not After : Nov 16 08:01:24 2026 GMT
Subject: CN=7a64164b8bedc3fb7f050c72932fe8f6040c53a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:12:2e:53:8a:b3:1f:47:9e:e0:14:d6:39:
51:4f:ff:2e:66:8d:9f:f5:19:e9:75:bb:17:f1:2a:
4f:70:cc:8f:cc:78:bb:59:15:6f:47:bd:d2:f7:4c:
89:15:e0:80:8f:72:af:1b:43:a0:9b:81:49:16:39:
86:26:07:47:1a:a1:5a:e3:62:4c:9e:84:ba:25:d2:
06:27:4b:1a:c5:86:d5:6e:5c:2c:7f:42:cd:c5:61:
bc:a2:bd:1d:b1:f6:0b:fb:80:d9:b5:06:18:3d:2d:
15:d2:cf:6e:f8:68:b7:df:68:28:6a:86:92:2e:5a:
d8:6d:68:39:56:b8:a0:28:1c:c5:bf:12:36:0b:46:
42:20:db:7d:50:06:19:cc:56:5b:d6:47:ae:5e:e3:
2b:8a:7b:b2:c8:06:3c:ed:23:12:cd:6b:bc:04:95:
92:96:0f:cb:8f:a6:eb:7e:29:86:e0:34:09:d3:a4:
cf:55:43:51:af:11:ba:fc:ec:71:99:02:9f:7f:68:
e2:c2:3e:ef:d8:4f:95:71:e9:28:37:fb:91:5b:7a:
c3:4a:0a:2a:c5:00:29:be:dc:eb:40:b2:8b:d9:13:
e5:f1:e0:cf:ba:f4:82:07:36:0d:56:05:f1:62:66:
d9:24:c1:62:d6:f9:cf:88:8a:e9:d2:87:35:0e:58:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:64:16:4B:8B:ED:C3:FB:7F:05:0C:72:93:2F:E8:F6:04:0C:53:A2
X509v3 Authority Key Identifier:
keyid:F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:83:97:14:49:75:e5:d3:1b:5a:39:50:3f:ab:9d:d6:6f:a4:
37:f0:f9:c5:09:4f:1e:77:58:d8:51:7f:05:05:51:d7:90:d3:
cf:d9:85:fd:c1:c9:bd:40:9e:16:1a:7e:cf:67:84:fc:ce:53:
a4:6c:36:52:ff:b7:67:e8:60:b4:6d:b6:a5:54:24:31:57:53:
28:b0:99:0a:e5:1e:27:c8:1f:bf:80:98:fa:be:69:5c:66:af:
3d:50:5c:e3:37:2c:3b:bf:6c:73:f8:fe:bf:05:f9:87:88:6e:
e9:ce:3d:43:89:0d:81:31:64:48:04:cd:0d:6a:8f:0a:8f:20:
dc:6c:f8:02:01:38:32:fe:74:6d:35:97:e8:40:45:d6:5d:b2:
6f:d2:07:2e:4f:91:87:37:d0:f8:85:60:12:0c:92:dc:80:01:
f3:ad:0c:55:a2:94:89:57:dd:09:7c:da:48:41:10:5b:0c:dd:
c0:6b:81:d4:fc:23:39:1f:5e:cf:84:75:c1:d6:c9:d5:73:78:
30:23:2f:c9:dc:b5:a1:e2:de:45:01:b6:9d:a6:bc:bc:9d:47:
fb:3e:e1:0d:db:5f:9b:53:f5:d6:38:12:6d:36:1a:1b:72:b1:
b6:e3:d5:33:d7:ea:49:68:73:b8:e6:42:5b:63:42:55:73:d6:
67:88:4a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:39:10 2026 by rpki-client