Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json)
Hash identifier: VfuAFmhmv5kg9sn/91oZe7qzx5VtPJSPInZiv9Zl70w=
Subject key identifier: 97:81:22:50:17:F4:23:8F:53:6C:DD:46:27:26:03:85:10:3E:29:7B
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial: 01A0D9BBACC545A2D3A511C138C7859C7946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
Manifest number: 040F
Signing time: Fri 25 Sep 2026 18:02:30 +0000
Manifest this update: Fri 25 Sep 2026 18:02:30 +0000
Manifest next update: Sat 26 Sep 2026 18:02:30 +0000
Files and hashes: 1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: lWRxQ17Mv01gHl9ZShcvm3Ir4X2t4DDjU2Ef+v8S2G0=)
2: W3uokoIan0bL_6hGsLT2Lc4cFQY.roa (hash: lnmDhnBJ1en6JgsP5wQ9r3eh318nNpbuOqRdtOpx05A=)
3: c7-vm7ayWM43onBxMirp6xh4ses.asa (hash: Yn9xC9hv7PLljqa8pOnthNeGkVr/8TT8ccV2WmSMABI=)
4: mqyazNOfM1ZVPm3cOVRYyNHDwpA.roa (hash: C7VZbHKV6HPYsBlX1X4bgcS+0xR52AiRYn6dtHpeMwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:ac:c5:45:a2:d3:a5:11:c1:38:c7:85:9c:79:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Validity
Not Before: Sep 25 18:02:30 2026 GMT
Not After : Sep 26 18:02:30 2026 GMT
Subject: CN=9781225017f4238f536cdd4627260385103e297b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:3c:61:bf:b0:6a:83:43:08:66:c9:c2:be:
57:b9:0e:c0:0c:8e:69:51:64:2c:b1:8e:71:79:94:
e3:b1:98:c2:0b:5b:2c:77:f9:29:35:9b:9b:26:7c:
10:e2:84:a1:6b:50:88:f9:8d:6e:fb:ee:fd:d3:35:
1f:41:43:26:b8:6b:3e:49:08:36:be:01:1d:d0:f7:
f2:dc:37:7d:ca:04:88:ca:a1:f8:f4:b1:e1:24:f5:
a0:df:47:0c:78:d6:ed:c0:de:b7:9f:56:8b:6c:29:
b0:a9:d2:bb:f8:89:dc:ec:eb:5b:4c:fb:19:43:ee:
46:3d:89:ca:d2:f4:50:1f:ee:07:72:3f:b8:a1:b4:
ab:9f:06:21:b7:e9:ab:8b:25:1c:da:4b:d7:4e:71:
b1:c8:f1:f0:c2:2a:40:6d:e9:a2:4a:7c:53:69:05:
83:40:e3:d3:b3:3a:e6:73:1b:e5:fe:cd:78:43:03:
1a:f1:74:5a:6b:bf:01:d7:f8:e5:63:a6:23:1a:8e:
6c:e9:99:1a:2b:7b:f4:7c:11:69:d3:9d:66:06:fb:
e5:f3:03:a2:f5:8b:e7:50:99:6b:49:55:a8:72:a2:
c6:be:82:38:83:06:d6:03:66:7f:c0:4b:6c:a9:24:
52:0f:b9:6f:27:11:27:63:85:3d:98:f9:e6:eb:86:
6c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:81:22:50:17:F4:23:8F:53:6C:DD:46:27:26:03:85:10:3E:29:7B
X509v3 Authority Key Identifier:
keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ac:66:1f:7b:dc:00:d4:65:4e:68:ae:3c:65:ca:89:86:e6:
cb:56:dd:ac:ec:fb:84:88:f0:b6:69:cc:fa:3f:7a:01:ca:b7:
8c:ac:f7:ad:6f:7c:84:9a:54:de:80:4d:ef:bf:48:5a:be:f7:
28:58:3d:dd:a7:05:d8:48:e5:c1:25:3f:63:54:68:82:72:91:
7b:1b:f3:a7:9d:c9:9f:3a:cf:f1:6c:07:5a:6e:f8:13:c5:54:
39:43:f6:0b:c5:0d:b3:04:9a:ae:d3:58:23:c7:58:8a:71:09:
8c:fe:b6:6e:cb:d7:3a:dd:79:51:ff:50:f3:cf:c6:67:29:51:
50:3b:54:c1:6c:3e:6e:97:2f:2e:d0:6a:8c:30:64:8a:2e:06:
d0:e4:a2:37:42:89:f2:08:d7:d9:67:e9:76:b9:8a:5e:8e:b5:
ba:d6:0a:11:39:fe:95:ef:1a:62:88:79:c2:b9:44:3d:53:a3:
9d:f8:c8:39:6a:d8:e7:f8:7c:a1:5b:15:6a:9a:74:6d:2d:fd:
b6:86:ff:b3:a9:74:70:39:0c:c5:b9:ab:91:d5:b4:15:fc:8e:
78:bc:64:86:fc:42:17:a3:d8:37:b6:96:13:6a:b2:42:71:dd:
0c:52:ef:c4:49:f4:e2:b9:92:f4:14:4f:e8:11:2b:33:a9:7e:
bd:25:7c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:24:02 2026 by rpki-client