Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json)
Hash identifier: 1yr8BvqWvUJFAVuG+s/DfFJsoKlxxsRMu+fOfTwokGM=
Subject key identifier: 6B:7E:23:CE:16:11:7D:47:58:6F:D1:CC:2F:0C:D5:8B:D8:43:1E:7F
Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69
Certificate serial: 01A0D2008A571E12AD7941D91491AD013564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
Manifest number: 03EE
Signing time: Thu 24 Sep 2026 06:00:45 +0000
Manifest this update: Thu 24 Sep 2026 06:00:45 +0000
Manifest next update: Fri 25 Sep 2026 06:00:45 +0000
Files and hashes: 1: 1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa (hash: aHfsmVZKRy+7AFPaygX163J+5qjXxNU2emyKoCQGtN0=)
2: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: sVT58QysvIcKk7jrlFiG2b8xa69o2E8ERBPg8++PZQw=)
3: F_pPHJDcrHyVOVWzvhakia7DJiQ.roa (hash: tFJBSOLCH7tZWWFthieckptanNdtDSMnw7UCYwe6+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:8a:57:1e:12:ad:79:41:d9:14:91:ad:01:35:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69
Validity
Not Before: Sep 24 06:00:45 2026 GMT
Not After : Sep 25 06:00:45 2026 GMT
Subject: CN=6b7e23ce16117d47586fd1cc2f0cd58bd8431e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:89:c4:32:7a:a1:c9:71:69:2d:c9:e3:24:
c8:04:a5:d1:13:4c:c0:9d:fd:d7:0b:f4:fe:3c:a9:
b0:03:36:f2:97:f0:a1:dd:bb:23:91:b4:5c:c4:61:
7d:22:b1:90:a9:fd:04:50:8e:c4:cb:8d:d3:2e:5a:
76:c3:a3:f7:44:72:db:59:d5:9f:71:e7:dd:07:64:
9e:3b:ed:5a:f6:96:c9:34:0f:18:1b:6b:05:e8:c2:
3b:e2:c3:07:9c:9c:34:e5:1a:c5:8b:5a:1c:ac:8a:
4d:4d:92:d0:6f:88:96:b9:e2:cf:bc:eb:93:63:2b:
ff:dd:35:39:b0:70:dc:97:8d:61:63:d4:f4:80:58:
4a:33:36:02:a7:8d:2a:5d:42:a1:48:36:d3:fd:21:
83:cc:d4:8c:d0:fe:c3:4d:25:32:eb:04:a2:f2:9e:
88:bf:fa:56:cc:7b:6c:53:9c:de:3e:52:f7:f9:0a:
58:a5:db:ee:8c:b4:9b:c0:05:a6:7f:f4:92:70:b8:
ed:1e:8a:73:3f:15:27:af:c9:ad:c5:5a:0b:f7:a3:
e6:9f:62:2b:15:13:95:64:97:66:99:5a:99:9d:50:
88:97:ca:47:be:6a:12:04:09:d2:42:32:0b:81:c3:
17:fe:d4:62:40:d3:e2:d9:d6:84:0c:7c:5c:7e:f2:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7E:23:CE:16:11:7D:47:58:6F:D1:CC:2F:0C:D5:8B:D8:43:1E:7F
X509v3 Authority Key Identifier:
keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:69:1d:71:80:44:bd:98:b6:57:31:b3:ca:d0:68:7f:ba:9f:
eb:38:40:5d:62:71:05:71:f0:1e:8f:c6:d3:a3:d8:0a:1a:b7:
c2:cd:d3:ef:c5:11:21:a1:59:34:0d:5b:af:07:36:ee:64:7b:
46:07:ca:fd:54:37:27:dd:1d:d3:4e:9a:ae:7b:af:4e:fa:dd:
bc:0a:20:b5:b7:4b:02:5e:9a:d5:c4:d2:86:83:dd:03:7c:93:
6c:61:5b:1f:a1:28:53:95:9f:14:9b:89:27:ef:3c:37:d5:96:
39:1e:8f:c5:98:f9:21:b6:41:54:a6:11:f8:bb:d6:a7:fa:81:
28:76:ca:38:07:c3:0d:09:c8:9d:b8:40:a9:5b:3e:c3:70:56:
04:00:8c:80:e6:1c:ff:71:7e:ae:96:a0:35:60:aa:0c:c1:83:
f0:f7:9e:d1:8c:11:b4:d2:20:db:e5:80:17:9e:ef:c6:eb:55:
9a:b1:ab:f2:5c:5b:6c:cb:bd:fc:31:2b:00:71:37:5c:28:22:
b6:ae:9a:40:bb:e2:e0:8c:8a:f9:a3:4d:42:60:7a:ca:57:05:
9a:b7:97:1f:29:75:3a:52:c7:db:79:85:06:18:d0:cb:56:95:
a6:8d:97:5e:39:0c:55:61:da:60:83:29:63:35:17:85:45:6e:
e7:b4:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:37:34 2026 by rpki-client