Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: JrhCUw62o4QzNI95EQNttqLyL1diulmmF7BpHcgcn/g=
Subject key identifier: 7C:D1:51:F1:FF:65:04:A2:2F:8A:8D:30:01:78:18:11:46:9F:E8:2F
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 01A0C70F318CD4872C0C6C0D2B1EC00DF66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 1A70
Signing time: Tue 22 Sep 2026 03:00:56 +0000
Manifest this update: Tue 22 Sep 2026 03:00:56 +0000
Manifest next update: Wed 23 Sep 2026 03:00:56 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: RjKbB6IWLDhqsNdaGNQYRGBwRug78cEIdZIA9D4AEqo=)
2: AIfGsSPAIhGTAhcJMT-43FCuJiw.roa (hash: Pu5NP+j1KvnCv1UXGo8u9ACIZ/QzV4gjTT63qqxTR/Y=)
3: E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa (hash: l/y3pPw5aQeELMhZp5go4vxGzvDlJdC51uABU1/1c6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0f:31:8c:d4:87:2c:0c:6c:0d:2b:1e:c0:0d:f6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Sep 22 03:00:56 2026 GMT
Not After : Sep 23 03:00:56 2026 GMT
Subject: CN=7cd151f1ff6504a22f8a8d3001781811469fe82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:cf:28:4e:bf:1c:f0:96:b0:ab:d6:c8:68:
ec:b0:d0:55:1f:27:81:6e:bd:c5:fe:1d:e5:70:a4:
62:10:41:81:64:86:6b:ae:1f:a7:a1:de:12:53:3d:
3a:60:e4:ec:9e:35:9f:46:64:70:8f:44:14:e0:e4:
b4:46:65:9f:f6:c0:d0:67:0c:42:9b:48:dd:8d:3b:
df:35:9f:50:0e:dc:a2:7c:b7:f2:0e:78:19:b1:aa:
1b:4b:b9:f1:9e:7d:98:3a:56:44:42:8e:2c:2d:72:
53:94:44:ad:11:26:b8:2c:1d:97:e7:23:ac:be:cf:
4d:20:86:8b:cc:aa:ed:6b:f5:39:c3:3b:79:e4:af:
b9:26:f0:eb:3f:e4:6c:22:3f:72:a2:53:5d:03:fe:
00:89:a9:82:bf:91:02:69:a1:cb:1c:6b:aa:d3:0d:
4f:76:c5:7c:1b:78:8a:bc:96:bb:24:29:0a:f5:1c:
f8:7f:92:43:32:7a:0b:d4:43:e8:54:5b:96:14:12:
b4:28:ab:7a:df:cb:c3:a2:3b:95:9a:f1:49:94:91:
cb:b2:43:98:1c:71:0c:ad:0c:58:95:20:e2:eb:9f:
2d:35:b7:e5:76:c4:e6:59:01:e3:7c:e0:8c:b5:55:
b4:d4:ec:bd:d1:83:d5:8b:f6:26:02:90:6a:86:75:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D1:51:F1:FF:65:04:A2:2F:8A:8D:30:01:78:18:11:46:9F:E8:2F
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4a:54:0f:6b:fd:20:fb:93:90:8e:90:63:d1:5d:8e:53:43:
35:f8:0e:32:4e:8d:27:96:ec:8a:71:c7:65:cc:b4:49:3d:1a:
59:d5:eb:22:d8:ec:b7:c7:20:60:73:12:43:6b:25:60:fd:1f:
9c:50:e0:34:1d:4c:02:6c:e0:0e:a2:ab:a0:b3:6e:9c:50:de:
30:96:b1:cd:c1:94:9f:61:99:f3:7d:b0:aa:3b:67:2d:ac:70:
0c:f8:df:a8:34:31:0c:78:77:d1:ec:2f:aa:b4:ed:33:b3:7d:
c4:0a:9e:bf:cc:e3:11:b4:82:91:4c:ee:13:6d:6d:17:f5:57:
36:76:85:fa:5b:c6:01:48:8c:dc:18:7f:14:8e:30:0f:5c:20:
61:fb:20:c7:ce:66:9d:87:ea:2f:68:6c:bd:4d:da:e9:d3:3f:
a7:13:9d:a6:02:0a:26:8d:51:ae:50:33:b2:4a:b7:9e:b8:d8:
1f:27:e4:40:cc:28:81:b1:ae:dc:89:f4:81:ab:93:5c:29:ae:
b5:c5:eb:73:23:3f:96:4c:99:2d:a1:b2:ec:54:60:2f:e0:91:
30:31:6f:85:2b:30:4e:30:8d:5d:c9:56:40:5d:51:e3:26:79:
83:77:cf:60:26:76:f5:9a:8b:dc:52:f0:31:a8:7b:99:b4:7f:
e3:67:6d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:35:02 2026 by rpki-client