Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.mft
File: 9R2ExrZtJSOMstRz3oU5PLI8CNM.mft (raw, json)
Hash identifier: Bkr4QRdd8AgPLDuq2o9Brjcxf6/4qcpZx2HN2iyAlKM=
Subject key identifier: 95:65:83:08:0A:3C:3D:A2:76:72:F5:77:18:B6:08:DA:30:8A:5F:71
Authority key identifier: F5:1D:84:C6:B6:6D:25:23:8C:B2:D4:73:DE:85:39:3C:B2:3C:08:D3
Certificate issuer: /CN=f51d84c6b66d25238cb2d473de85393cb23c08d3
Certificate serial: 01A12CFBF0D8E46E15E579FDAAC092DFE11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9R2ExrZtJSOMstRz3oU5PLI8CNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.mft
Manifest number: F3
Signing time: Sun 11 Oct 2026 22:01:10 +0000
Manifest this update: Sun 11 Oct 2026 22:01:10 +0000
Manifest next update: Mon 12 Oct 2026 22:01:10 +0000
Files and hashes: 1: 9R2ExrZtJSOMstRz3oU5PLI8CNM.crl (hash: KRGs7fb2he11+4jXGfp24lJ7FqYlML/ZSEHC8ZJ672k=)
2: gQt5rO11iazVIlm1HaoS1XjTomo.roa (hash: TYTsgTz3jwRNWm/bjIscWI7r1p2LFoVROym+8x52XLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9R2ExrZtJSOMstRz3oU5PLI8CNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:fb:f0:d8:e4:6e:15:e5:79:fd:aa:c0:92:df:e1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51d84c6b66d25238cb2d473de85393cb23c08d3
Validity
Not Before: Oct 11 22:01:10 2026 GMT
Not After : Oct 12 22:01:10 2026 GMT
Subject: CN=956583080a3c3da27672f57718b608da308a5f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:61:06:fb:c8:3b:4c:7f:a0:13:c2:12:c0:
53:92:87:be:7b:27:82:67:85:5a:92:88:bf:13:fb:
32:1f:1f:79:58:63:fe:66:16:45:6b:e0:f7:dd:f0:
7e:73:00:34:24:b7:6f:fe:15:b6:71:5c:dd:1b:d6:
fe:48:64:4c:be:a8:54:08:95:33:f1:88:94:30:01:
b8:bb:f3:a2:ee:c0:53:32:76:c1:a9:31:fb:24:fc:
d8:f1:be:db:ea:c4:52:98:16:fd:3c:d8:15:1b:37:
c3:e3:29:78:50:72:10:93:c3:c4:96:0f:d6:bb:9e:
07:c7:cf:24:97:d9:44:4f:0d:f3:16:0e:4c:9b:2f:
9c:e3:f9:9b:05:8a:2b:5a:b2:40:9b:f9:e7:e6:2a:
3e:20:b6:f8:90:47:14:c9:88:75:76:5d:a5:c0:a8:
4b:5e:a0:86:54:15:91:f5:67:6b:ca:ef:23:0c:b7:
60:1a:5a:27:ef:7e:5d:48:fc:71:74:aa:d4:ef:f3:
28:3b:5a:e3:51:2e:d9:4b:f9:b2:a6:a7:3a:17:2d:
3c:ee:b8:d6:4d:6e:3f:18:77:20:59:8b:f5:1e:30:
4d:6e:fd:a2:ef:0b:d4:d9:ef:65:59:ad:65:1b:66:
4c:4b:1d:63:34:c6:ae:4b:67:3e:1a:a6:53:5c:24:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:83:08:0A:3C:3D:A2:76:72:F5:77:18:B6:08:DA:30:8A:5F:71
X509v3 Authority Key Identifier:
keyid:F5:1D:84:C6:B6:6D:25:23:8C:B2:D4:73:DE:85:39:3C:B2:3C:08:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9R2ExrZtJSOMstRz3oU5PLI8CNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:66:be:2b:8c:d6:58:6e:25:72:f5:da:ce:4d:33:29:43:56:
ef:40:f4:cf:5d:ba:2a:32:35:8e:f3:53:26:c4:b4:6a:8e:8b:
e2:81:19:a3:6c:d2:c3:46:f5:90:d9:88:c2:36:18:73:02:91:
ea:c4:df:5e:3f:6a:d0:d3:e3:a6:95:da:41:83:d8:f6:2d:e7:
dc:7e:a0:03:82:91:ca:5a:ec:99:74:8b:fa:4e:cb:cd:3f:9c:
02:51:57:56:7b:db:7c:d0:46:ca:ff:75:8a:cc:a6:a9:27:8d:
87:67:9b:df:4e:ce:d9:02:83:c9:64:2d:34:5e:e3:34:ad:af:
37:16:7f:77:bd:68:76:4c:09:ae:e5:8d:79:b9:19:f8:02:66:
5e:b0:09:64:90:c5:90:6f:be:e2:74:3e:70:6e:2b:c9:80:21:
ff:04:c7:e0:8e:fe:77:65:12:0b:fa:51:dd:d6:be:5c:5b:59:
9f:7f:c8:5e:44:d3:69:e8:20:b9:7b:41:2d:e4:6c:3a:3d:1e:
8a:f1:cb:66:01:8e:b2:5f:1f:25:35:18:f0:28:29:99:dc:c7:
29:08:89:ff:03:14:b6:df:67:8f:e9:69:ea:dd:7b:f6:2f:4e:
c2:db:d7:3c:69:8f:e9:93:bc:44:3c:0d:3b:02:9c:b2:9b:c7:
7c:8e:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:26:30 2026 by rpki-client