Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
File: D9zw7HuvNJ6JLVERXCLA29Q1C44.mft (raw, json)
Hash identifier: iCpU4JOzU6ExnLfcoPeyidTvT72LkJgjYLSlkgu/EIo=
Subject key identifier: 9E:07:D9:63:51:87:E4:CA:0B:AC:07:89:01:B1:47:66:4B:B8:03:F7
Authority key identifier: 0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
Certificate issuer: /CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Certificate serial: 01A0C1E8B6C3DF771B64F7AF8B07D50759B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
Manifest number: 071C
Signing time: Mon 21 Sep 2026 03:00:48 +0000
Manifest this update: Mon 21 Sep 2026 03:00:48 +0000
Manifest next update: Tue 22 Sep 2026 03:00:48 +0000
Files and hashes: 1: D9zw7HuvNJ6JLVERXCLA29Q1C44.crl (hash: spAGew2jCC3yXjuyK/adBI8TfdeS2SxEax5/YWHLjPc=)
2: Jv3FrbaSeXZke2UP27JZQguG_qc.roa (hash: dePpEEDTqP/enapSxKmHvz68yt/UQtEn5OCz1CdZVCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:b6:c3:df:77:1b:64:f7:af:8b:07:d5:07:59:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Validity
Not Before: Sep 21 03:00:48 2026 GMT
Not After : Sep 22 03:00:48 2026 GMT
Subject: CN=9e07d9635187e4ca0bac078901b147664bb803f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:b6:48:8c:2a:31:41:98:22:6f:d2:a7:fd:
a8:68:84:6d:00:ac:38:74:20:26:67:b9:38:1a:6b:
df:56:bb:67:2f:f4:31:c5:72:43:9c:60:21:ab:19:
3a:10:2a:61:2a:e5:3a:47:dd:fa:cb:7e:c6:e3:11:
be:97:9a:6b:de:1b:94:dc:2e:03:e5:86:99:82:30:
65:de:e8:ef:34:76:62:d2:d0:18:88:15:db:0f:77:
b4:a5:98:df:32:41:d5:91:e8:9d:70:05:71:34:df:
73:d5:a6:b2:12:b8:95:28:8a:6c:ca:d8:86:e2:79:
0f:d8:76:bc:91:11:8d:ff:f5:74:dd:87:d9:6c:0e:
1a:5f:ef:b2:ec:74:d6:ac:8a:1c:b3:cf:50:c3:99:
71:a3:69:40:7c:c0:25:54:3f:f8:03:58:b2:00:7a:
ec:a9:b4:df:d3:32:b1:20:13:71:40:38:67:40:a1:
d5:1f:9a:0a:1c:f0:32:6e:a4:c2:3f:ac:51:89:5e:
a1:a1:87:f9:be:09:8d:96:41:8a:4d:37:c4:a4:96:
2d:05:7d:d6:c1:2c:7d:a7:94:bf:b6:21:0f:05:57:
94:5c:06:df:02:27:82:0e:c7:0a:6a:a5:b7:cf:55:
71:88:1a:92:bf:3d:40:9a:14:bb:25:42:1a:43:cc:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:07:D9:63:51:87:E4:CA:0B:AC:07:89:01:B1:47:66:4B:B8:03:F7
X509v3 Authority Key Identifier:
keyid:0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d1:12:4a:95:61:d0:4c:89:98:cc:0e:32:4e:a0:92:0c:4e:
32:f5:99:b2:1f:30:9e:0c:18:d6:c8:b2:b1:fa:d8:55:58:88:
11:18:df:c7:4f:98:3f:ce:20:18:6c:9c:a4:be:ed:ec:1c:77:
dd:23:24:c5:bd:8d:ae:df:96:78:52:ca:dc:b8:6b:98:e1:02:
38:dc:45:3c:17:e1:26:b6:a2:ce:db:e2:82:cc:df:aa:d0:12:
f7:a5:7c:3c:09:52:00:30:b4:da:16:47:56:f3:4b:d3:c3:1c:
01:c2:85:ef:8a:94:21:7d:f5:d1:72:8d:68:b3:b5:52:f2:27:
3b:ba:82:e8:ca:a2:82:d3:6b:7b:d1:c6:21:8b:96:6b:6d:ff:
71:d4:7c:14:b4:91:91:90:71:00:bd:d5:c4:44:de:26:f3:4c:
f3:87:22:44:d1:3b:7e:4a:88:11:c0:46:83:87:9c:0a:7c:b8:
76:d5:46:03:8e:07:db:32:a8:65:c6:7d:6f:68:84:5c:ef:7d:
88:17:89:35:a8:54:ae:f4:49:2f:3f:92:10:d6:bb:15:18:f3:
f0:1c:ea:3b:f2:2c:f8:8c:8e:97:9d:bd:50:29:1f:ea:a6:0b:
3f:d4:b0:a1:31:16:75:60:db:7c:d7:17:f4:a0:a0:72:8e:4b:
c3:96:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:35:45 2026 by rpki-client