Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: 0JrirDxm1h9lAxKMc8/Gia2iddLJbUFDOcNasXVQg+Q=
Subject key identifier: B9:14:F9:51:18:E2:CF:16:A3:D1:52:7E:22:8F:65:A7:2E:BC:13:46
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 01A139A4419755A792E3E59C75A9C2FF433C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 1A08
Signing time: Wed 14 Oct 2026 09:00:28 +0000
Manifest this update: Wed 14 Oct 2026 09:00:28 +0000
Manifest next update: Thu 15 Oct 2026 09:00:28 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: X2ER6pXBN9B5hIV8U8tgMDKvDY6WLojWWwSgXeHz8o8=)
2: oY8wzqxSZtFw6pVYs4NFV60daUg.roa (hash: DFgw9sxWQdsrNBj4RrkibFIZhSj9mHDN7Zn+MkePlLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:a4:41:97:55:a7:92:e3:e5:9c:75:a9:c2:ff:43:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Oct 14 09:00:28 2026 GMT
Not After : Oct 15 09:00:28 2026 GMT
Subject: CN=b914f95118e2cf16a3d1527e228f65a72ebc1346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:ad:38:46:c3:a3:b8:65:8d:36:a3:4d:9e:
d6:5e:6c:23:64:44:61:d4:8d:a4:5c:c2:f8:f8:a8:
68:e7:1a:b7:5e:80:45:0f:86:8e:b1:2f:3d:c9:db:
07:3e:d3:95:73:31:cd:b7:3f:36:fd:98:d2:b3:04:
c1:17:c3:67:87:e6:15:46:07:bd:32:cd:88:24:dd:
12:8e:8f:42:10:2a:3d:1b:a0:f2:ee:08:28:8c:ca:
eb:11:e9:ad:1e:c4:62:6f:53:e9:da:d9:49:6b:96:
fa:96:23:aa:27:0e:86:ac:1c:4d:b4:98:50:e8:13:
5a:36:a7:8d:6f:fe:d3:4c:66:7f:bf:e9:28:21:cd:
78:ca:fb:53:a8:03:ce:b3:7c:6f:46:8a:bb:ca:2b:
84:c5:30:a2:a7:4f:fb:4e:c0:99:f6:0b:aa:8d:24:
6d:dc:a3:17:93:f9:41:b5:a6:f6:36:7c:4f:b5:99:
7d:c8:33:26:9f:02:e1:89:24:87:fd:15:c7:d3:f5:
47:52:36:3d:28:fb:b2:09:bf:e9:1c:34:37:18:fd:
0f:2e:09:9c:80:8a:76:cd:98:85:89:70:6d:99:08:
6e:15:04:b7:76:a0:5e:b8:36:da:b8:46:01:b4:1b:
fb:55:c1:1e:45:b8:47:a8:e2:cd:fa:46:0f:c5:f1:
76:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:14:F9:51:18:E2:CF:16:A3:D1:52:7E:22:8F:65:A7:2E:BC:13:46
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:42:92:e2:8e:a4:72:55:66:98:d3:b6:0b:42:ed:b3:23:45:
55:88:79:7b:1b:6c:21:ae:90:ee:00:5f:74:59:a4:28:b0:ea:
50:fc:8d:ea:3a:d0:55:1b:99:6e:74:f2:1c:fb:ce:47:ad:b7:
aa:ba:d7:18:c6:9a:39:fc:26:65:8b:f9:98:b4:35:a9:df:73:
31:d7:5b:80:a2:22:df:58:f0:b4:73:08:b8:89:5d:ec:74:2c:
73:dc:85:d0:65:bb:a0:3d:ec:e1:48:4f:41:a0:a7:ca:10:37:
48:ed:e3:4e:62:a6:4c:15:dd:70:4b:17:0c:7f:9f:75:c4:3b:
f1:78:79:f4:ab:a0:cb:cb:b9:f0:5f:d1:c5:9d:00:79:78:2d:
c7:56:5d:6e:5e:ca:03:b3:42:91:85:36:bd:d3:6d:3e:bd:ef:
68:55:e7:df:26:22:6f:3b:9a:f9:76:8d:1e:e4:76:43:2f:92:
97:02:d3:5f:81:81:e3:23:dc:bd:95:db:24:1a:b5:02:50:03:
6d:f4:6f:01:15:8c:b9:bb:89:b5:f4:85:cd:de:59:02:e7:33:
f0:68:9c:7f:00:0b:fe:00:69:a9:51:ef:15:5c:2c:0b:60:04:
36:f0:ab:15:8a:1f:a2:d9:65:82:c3:ca:97:23:03:39:03:bf:
fe:a5:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 14:14:32 2026 by rpki-client