Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: div81o1FRUnVy+pA2steQJU4oFQYzqoAqgCxsBnJ51Q=
Subject key identifier: 99:B9:EF:D6:25:FE:C9:45:0F:D6:FC:D5:53:DC:E1:55:2C:C3:75:AA
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 01A0C444D2E142F6D6F6DF6E4EF909CF5BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 099B
Signing time: Mon 21 Sep 2026 14:00:39 +0000
Manifest this update: Mon 21 Sep 2026 14:00:39 +0000
Manifest next update: Tue 22 Sep 2026 14:00:39 +0000
Files and hashes: 1: 69yOYQhcSzVteXbmSSuXjdooyOA.roa (hash: 2ZA47QSgmHPBZuYu1sYyxVw+wEl4vjMSOZuQJyxjjcA=)
2: DaNzl7w617W61WMkK2mhl8jN5wU.roa (hash: KfPIGqY3EVhRc2Ytnf57ChmISLtMr8fTABQiZHidkaM=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: Cr9tf0lqPwD1P5QWjLAC29VRG5W+C/Y63HujpoNryM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:d2:e1:42:f6:d6:f6:df:6e:4e:f9:09:cf:5b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Sep 21 14:00:39 2026 GMT
Not After : Sep 22 14:00:39 2026 GMT
Subject: CN=99b9efd625fec9450fd6fcd553dce1552cc375aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:29:5d:d8:a1:a8:db:a9:41:a8:6b:31:3a:2a:
00:bd:85:62:b2:ff:37:21:15:dc:98:aa:d0:48:d3:
e5:ef:53:ab:07:f8:fd:c1:fe:ff:2d:43:c5:55:7b:
d4:93:2f:6b:9b:25:8a:13:52:8e:98:9d:04:ef:1e:
80:2f:b9:11:3b:83:99:41:d3:fd:ee:ea:7f:23:37:
cd:03:d9:74:7b:89:59:58:8b:7a:02:0e:d1:6b:c8:
17:2f:fb:c5:d6:73:fe:aa:41:80:9d:af:1a:bc:01:
dd:c3:b0:5b:55:0f:59:c2:df:35:a4:20:8a:6b:f2:
a0:49:f8:b6:43:20:9f:cb:1b:1f:a6:1e:e4:fd:02:
2a:90:d6:a4:0c:06:b1:58:18:62:c2:5e:8d:21:85:
47:1f:df:39:f8:61:ca:72:e0:bd:fc:3e:ef:3b:fc:
e9:ac:ac:46:ae:91:9e:c1:cc:a6:f4:18:85:f6:ea:
c1:c8:ed:28:7e:1a:33:55:0e:5a:8c:35:5e:f0:76:
f3:d1:c1:1c:f8:23:db:98:d7:79:a4:5f:8b:a1:f1:
a0:43:fa:3b:a9:5f:91:2e:9d:6d:a3:6a:5c:be:c1:
80:38:50:95:a6:f8:93:c6:09:af:7d:d4:02:5a:8a:
9f:e6:6c:b5:ca:2b:87:35:40:14:ff:a2:d4:4c:23:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B9:EF:D6:25:FE:C9:45:0F:D6:FC:D5:53:DC:E1:55:2C:C3:75:AA
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:45:b6:4f:54:09:d5:2c:21:0a:6c:f0:4d:dc:5e:68:88:e1:
8f:1e:b5:fb:95:94:c9:5c:db:85:cd:e8:78:56:17:5c:4c:c1:
e0:98:0d:a3:c3:62:36:b7:dd:c7:a8:78:00:7d:4f:6a:65:2d:
4b:ae:ab:18:ca:61:a3:c5:10:4e:8e:31:e3:00:3c:5e:bc:86:
59:b1:dd:20:0e:bd:99:f9:db:74:d5:1c:6e:cc:1c:25:2e:eb:
e8:41:20:cd:2c:ae:40:97:af:c9:3e:3d:98:c5:32:bb:43:90:
7f:eb:a9:52:42:c7:22:5e:6b:15:c2:2e:c7:d8:1c:a8:cb:3d:
4a:b8:b9:c4:22:04:10:9e:97:f5:c3:8d:c5:83:6a:03:22:ea:
8b:70:92:2b:f4:c2:6c:c5:ac:f3:79:fc:4d:72:8b:ad:96:50:
5c:0e:62:ad:a8:a8:99:ae:76:62:2b:76:55:2f:ad:42:f1:9d:
89:24:d9:f5:af:48:1c:81:3a:0d:05:c5:14:a2:b7:6a:ab:3d:
fb:23:75:c5:e2:9c:a2:fb:1d:0f:dc:29:6a:72:43:39:2c:8e:
1c:dc:2b:18:ea:68:09:5c:f6:b4:79:c0:3e:df:1e:c4:b5:29:
bd:16:4b:b5:4c:54:12:61:9b:8a:92:d8:f6:1e:de:23:c8:2c:
5a:d4:09:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:56:49 2026 by rpki-client