Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
File: 9iZUZY9nKqzzcTO1xxz0sRwYado.mft (raw, json)
Hash identifier: gzaR7xoz8xdSY1PlIjMJ/c5CzDB6KWbb3wZALLnemrw=
Subject key identifier: C4:B8:BA:1A:73:0F:9F:36:74:C6:CB:FB:9D:38:FF:21:A1:C0:D2:B4
Authority key identifier: F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
Certificate issuer: /CN=f62654658f672aacf37133b5c71cf4b11c1869da
Certificate serial: 01A131B40AF12A45702627CD1566CF154F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
Manifest number: 05A9
Signing time: Mon 12 Oct 2026 20:00:45 +0000
Manifest this update: Mon 12 Oct 2026 20:00:45 +0000
Manifest next update: Tue 13 Oct 2026 20:00:45 +0000
Files and hashes: 1: 9iZUZY9nKqzzcTO1xxz0sRwYado.crl (hash: Kz8krU3hWP/smiRfueIPgFw1iw7rXWRXbccZBhnGQD8=)
2: d6pd06B5mnNywdYo5eZBwLJxfT8.asa (hash: ETla8YTJcM+5uBnfvCMaInkUnAmAwDLx0tjpRZMyWmk=)
3: tvMXQZLl7Wysz_xvdn4KxR27LYI.roa (hash: DS+mGSmFWnDI1NNRJFgUsn5iaFW320NJTO3U5Mk3hfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:0a:f1:2a:45:70:26:27:cd:15:66:cf:15:4f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62654658f672aacf37133b5c71cf4b11c1869da
Validity
Not Before: Oct 12 20:00:45 2026 GMT
Not After : Oct 13 20:00:45 2026 GMT
Subject: CN=c4b8ba1a730f9f3674c6cbfb9d38ff21a1c0d2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:71:ca:67:0c:86:45:56:7a:11:8a:7b:25:
1b:39:4c:75:36:01:3d:9d:c0:cb:2e:dd:9a:de:b4:
45:99:cc:4d:5c:c0:66:df:52:bf:70:28:96:22:25:
be:ac:a4:c6:26:9e:4d:0f:7b:5b:96:f7:26:e3:2f:
97:f8:5e:86:4b:38:35:ff:93:77:2b:1c:82:52:08:
19:85:94:00:ed:88:69:8b:75:67:e7:5c:d4:e5:61:
c3:6d:98:8d:8a:32:b5:20:86:9b:31:94:aa:12:39:
0b:4f:20:70:06:42:eb:de:87:98:06:71:f7:f1:87:
0f:aa:c1:db:2c:f2:7d:1f:82:c7:f7:c6:c6:ce:95:
88:57:72:49:b3:07:95:5a:0a:25:bf:27:f7:28:9d:
ab:68:ae:32:4e:3e:73:fc:1a:c0:32:d6:48:00:bb:
88:b7:3f:9c:4a:cf:6b:d3:e4:cc:a3:79:7b:81:c2:
36:fc:b4:b7:a2:68:46:56:19:9f:59:07:12:9e:3c:
0b:ad:b5:de:ae:29:fe:81:14:ca:e3:bb:f7:e4:98:
41:e0:3c:a4:72:7c:44:d8:9c:37:82:c3:8c:bb:e6:
29:ed:e7:77:33:b5:1f:dc:89:7d:bd:e7:d0:01:d9:
5b:0b:80:3a:ee:d5:71:46:ec:eb:3f:70:1d:52:c3:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B8:BA:1A:73:0F:9F:36:74:C6:CB:FB:9D:38:FF:21:A1:C0:D2:B4
X509v3 Authority Key Identifier:
keyid:F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:12:2e:3e:90:bc:1c:61:68:f5:8c:b1:3e:87:28:8c:4b:1b:
74:9e:fd:bd:70:ba:fc:ad:4f:58:ec:72:9b:41:b4:7e:fa:3a:
d0:53:14:55:0b:d4:4c:e2:ca:15:22:d8:cb:66:13:53:0a:fd:
b4:51:82:be:60:8f:bf:30:34:a1:cb:0c:3b:fb:7f:20:e6:ec:
ff:be:1f:55:4c:5a:51:2b:ea:fa:41:41:20:85:4c:37:8b:62:
74:ff:1a:68:da:8c:cc:a5:5e:c3:84:54:01:2c:2a:ac:a7:98:
da:36:f5:24:16:eb:f5:9c:4b:25:b3:3b:ce:48:f2:cf:af:28:
15:26:e1:25:04:b2:aa:a2:12:33:2b:b3:93:7f:ca:c1:31:97:
19:15:f5:4b:f3:4b:8e:45:32:2e:81:37:29:38:60:15:4b:fe:
f3:ca:5d:2f:31:24:b5:14:90:ab:da:c7:1b:b5:5c:ca:d0:cb:
30:a6:0c:d9:05:be:b6:68:b7:8a:8f:a7:93:e2:e4:2a:6d:16:
df:76:57:33:0d:87:9f:45:17:51:ba:8b:97:36:c4:6a:21:fa:
35:d7:39:76:93:8f:2a:a2:bf:58:60:ae:ea:24:49:93:8e:2f:
9d:e8:9c:b8:b5:53:44:fb:22:74:2b:78:ea:84:a3:11:93:f7:
24:f5:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:27:45 2026 by rpki-client