Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier: Siv/1wW6ri7YZuDITjuqg6NI6CLZ07Qum3FueskCNOg=
Subject key identifier: 64:56:70:00:5F:74:73:E7:B8:33:9D:F3:11:B5:DD:09:A6:8F:18:F8
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial: 01A0CBFEA046D09EF7F68F54F7CBC311C025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number: 09C9
Signing time: Wed 23 Sep 2026 02:00:57 +0000
Manifest this update: Wed 23 Sep 2026 02:00:57 +0000
Manifest next update: Thu 24 Sep 2026 02:00:57 +0000
Files and hashes: 1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: YxszlZHkK/72+2BB7YHVVKQ3heQmBxB4YRN8e82eIUM=)
2: jbum_D98f7wXxL3zfJIV6BCwD8g.roa (hash: C+K78EzxF6K+3h9zUKmt0tIENTKcf8CCLlSHEr+JL70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:a0:46:d0:9e:f7:f6:8f:54:f7:cb:c3:11:c0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
Validity
Not Before: Sep 23 02:00:57 2026 GMT
Not After : Sep 24 02:00:57 2026 GMT
Subject: CN=645670005f7473e7b8339df311b5dd09a68f18f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:f3:37:2e:aa:7c:b5:a2:cc:18:2b:98:61:
6a:28:b3:a8:1d:44:1e:88:73:4a:d3:f1:ac:a5:e1:
12:88:a1:7f:90:34:12:81:d0:46:f0:8d:c3:d7:05:
85:cb:80:2e:01:fa:e8:51:8b:d1:f8:f7:97:26:b9:
01:bf:16:40:6c:9d:93:24:f7:31:fc:f7:13:f6:49:
e1:1e:3f:6d:62:6e:42:c6:1f:1b:0e:d7:7e:c3:ae:
8c:92:da:c1:a7:29:dc:80:44:12:06:e1:59:03:8f:
0e:f2:c7:72:23:56:a9:e4:de:42:3e:42:c8:bb:60:
61:0f:df:5e:b0:1f:97:6b:b6:1d:e8:99:cf:21:52:
c6:5d:d3:5c:b2:f4:ca:74:97:68:03:47:bb:ce:bc:
f6:df:f3:bb:2f:8c:84:98:20:63:69:7b:46:52:70:
01:a2:33:7a:68:21:24:01:9c:bd:50:ef:f6:df:13:
6e:95:c3:b3:8a:92:88:53:21:39:0e:a9:95:f1:da:
a8:29:3a:a9:0f:19:32:45:40:c1:0f:b0:d3:d6:fa:
13:d1:a2:96:0e:64:f0:4c:2c:f8:01:8b:05:98:2d:
77:fe:a8:24:d3:a8:8c:33:01:25:ab:6f:71:42:7e:
e4:a6:55:d6:e6:e2:91:ca:a0:cb:5f:3d:1d:9b:e6:
48:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:56:70:00:5F:74:73:E7:B8:33:9D:F3:11:B5:DD:09:A6:8F:18:F8
X509v3 Authority Key Identifier:
keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:fa:6c:fb:c7:0d:df:39:35:cb:8c:2e:70:fa:cf:fe:6b:98:
84:6c:a2:56:c3:4e:02:98:fc:ed:31:db:a8:92:c6:19:54:ae:
75:f3:b1:08:0d:45:81:de:10:28:3d:66:7a:cf:55:4a:5f:88:
49:f9:f0:15:cc:01:df:93:ed:69:99:23:34:96:6c:79:69:4e:
70:87:11:88:d2:db:3c:7a:e6:16:d6:b3:8f:05:7a:cb:87:5d:
80:c2:49:46:9f:8d:9d:8e:9b:fc:77:cf:bc:ad:c4:5f:1e:49:
ff:44:39:9a:a5:8e:be:aa:d9:c8:84:e1:d7:f1:71:f6:21:4a:
50:1c:8f:ee:93:dc:59:c0:34:8f:f3:9d:03:71:70:91:f8:6e:
1b:3a:3d:f8:e9:4b:92:32:d1:44:e9:dc:25:ae:8d:e8:23:01:
16:52:8f:f2:32:25:6f:07:59:60:3d:8c:71:3d:8f:73:be:f7:
63:b2:15:1d:3b:dc:e6:3f:3d:fa:25:53:08:2b:6a:14:4b:b1:
1c:08:d7:28:c9:d4:17:d4:b0:4f:34:87:3e:b3:23:95:ae:f0:
02:08:2d:61:88:ef:16:2d:3e:15:0b:79:78:21:46:fb:f4:9b:
ee:ed:c1:8b:86:25:27:6f:fb:48:a6:1e:cf:ea:93:74:9d:ce:
2a:a3:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:06:55 2026 by rpki-client