Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
File: 9ffGz7jHWxG31BX3mS0AZKRV6FA.mft (raw, json)
Hash identifier: hI5Cutv3rCyXU6JRLMkjx0LOwFNdllDsSZI3TYesHBw=
Subject key identifier: 2D:CC:EA:64:E2:2A:A5:23:61:EE:24:FC:16:43:21:78:30:18:33:2D
Authority key identifier: F5:F7:C6:CF:B8:C7:5B:11:B7:D4:15:F7:99:2D:00:64:A4:55:E8:50
Certificate issuer: /CN=f5f7c6cfb8c75b11b7d415f7992d0064a455e850
Certificate serial: 01A0BFC322FEC7E577C0115BBD67C2BF28E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ffGz7jHWxG31BX3mS0AZKRV6FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
Manifest number: 08
Signing time: Sun 20 Sep 2026 17:00:31 +0000
Manifest this update: Sun 20 Sep 2026 17:00:31 +0000
Manifest next update: Mon 21 Sep 2026 17:00:31 +0000
Files and hashes: 1: 9ffGz7jHWxG31BX3mS0AZKRV6FA.crl (hash: ttsAkMWycqc8Da39bThYHyClByCtOE4wIc6zP673hXI=)
2: Zx7Q8aKSaWd5VMFP4osRhni-9fM.asa (hash: cED8OgeMgvpEKX/+AxzFJiR9qympXx564F6hDopqC3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ffGz7jHWxG31BX3mS0AZKRV6FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:22:fe:c7:e5:77:c0:11:5b:bd:67:c2:bf:28:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f7c6cfb8c75b11b7d415f7992d0064a455e850
Validity
Not Before: Sep 20 17:00:31 2026 GMT
Not After : Sep 21 17:00:31 2026 GMT
Subject: CN=2dccea64e22aa52361ee24fc164321783018332d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:89:46:de:0a:43:06:24:2c:eb:36:37:2a:ed:
4c:17:f3:85:14:25:22:4b:94:c3:94:6b:b7:33:89:
c4:3d:a5:0f:1e:0d:1b:7d:69:77:cc:b5:4f:c8:ce:
ff:95:8f:86:72:d8:72:cb:3e:2f:90:86:5e:26:e8:
57:3b:3e:97:a5:0f:49:aa:df:db:07:cd:52:62:41:
51:14:57:4e:0e:1f:c3:1e:1d:b0:7d:09:44:c7:61:
1b:04:3d:20:64:b8:ef:68:14:99:6e:7e:d6:45:b8:
ac:27:9e:73:65:78:be:4d:ec:b7:94:bc:da:e8:e5:
83:0a:8d:86:3f:02:b8:df:8a:60:94:5c:4a:0e:b3:
4d:ee:94:7c:07:64:28:26:f6:49:fd:3b:d7:27:05:
26:ce:34:2d:a7:94:6f:86:6e:75:28:06:e2:42:9c:
18:cb:0f:91:e0:06:ef:8e:e2:da:8d:43:23:4b:fd:
ac:28:03:62:69:a7:c7:af:34:ae:19:1b:9a:fd:75:
98:c8:9b:e5:1b:8e:a9:11:ff:f4:52:a7:fe:93:a5:
71:d4:00:c3:6b:d2:8d:64:80:15:40:8c:24:01:b4:
c2:1e:69:a4:5b:79:45:e0:82:c2:e0:01:56:71:6d:
1e:04:43:d3:c2:fc:a9:30:26:be:72:8a:36:42:7c:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CC:EA:64:E2:2A:A5:23:61:EE:24:FC:16:43:21:78:30:18:33:2D
X509v3 Authority Key Identifier:
keyid:F5:F7:C6:CF:B8:C7:5B:11:B7:D4:15:F7:99:2D:00:64:A4:55:E8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ffGz7jHWxG31BX3mS0AZKRV6FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:54:76:76:1c:9e:3b:ab:48:1d:58:fd:36:54:8d:d8:b7:68:
3f:65:fe:1c:de:ee:5f:a8:5b:fc:4d:7c:a6:ae:22:95:fb:53:
97:ce:69:4a:31:5d:b7:52:fc:26:de:5a:a1:82:eb:e3:55:e7:
24:48:1e:ad:bc:53:41:8c:c9:31:be:e3:aa:88:7f:e2:bd:e3:
a9:55:88:ac:20:4e:69:35:93:98:2e:78:54:47:80:83:20:74:
cc:dc:87:69:e1:5e:6f:0b:d5:91:21:5c:eb:1b:95:d1:69:f6:
dc:c1:38:09:ca:ef:5c:06:8b:d7:e3:f7:01:df:49:6b:ba:b3:
c9:1e:c9:f2:d0:c4:f4:9c:87:0f:c7:7c:2b:8e:b6:c0:ff:3d:
e5:0a:69:29:e8:5f:d8:2d:93:3f:fd:0c:ac:e0:b4:78:10:d0:
2f:99:98:56:64:9c:70:4c:a1:89:67:7c:e3:bb:59:11:a6:3b:
ad:c2:1f:1f:71:7d:e4:50:86:59:21:b3:16:fc:37:eb:dc:c4:
9a:40:46:ed:e7:25:76:19:5f:9c:fd:f4:7d:16:b6:76:20:80:
29:0e:b6:42:fb:42:d0:c0:6f:6f:97:31:f5:45:20:95:cf:b5:
e0:e6:85:64:58:e8:55:67:d7:d6:e2:11:df:f7:e5:89:dc:33:
de:c7:23:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:29:32 2026 by rpki-client