Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: PtizEKnxStp1Y8K0nYn+Z7Z89NogpZSFUQQlSeApIOg=
Subject key identifier: E1:1E:3D:85:94:45:20:44:2C:8B:26:B7:44:D2:D6:FE:09:BC:0A:82
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 01A0C3D715E87ACD5207C92BF72C796796DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0F36
Signing time: Mon 21 Sep 2026 12:00:47 +0000
Manifest this update: Mon 21 Sep 2026 12:00:47 +0000
Manifest next update: Tue 22 Sep 2026 12:00:47 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: mYeLP6mqu4iZC2kHmVdNmcE15k7VH/UjvM41ppuROwM=)
2: xhDUoIsJaJCqOA6VTkyeMee_Z9s.roa (hash: bDCv1HCZJO4EbMKAw0lf46zS80bqNn1qKkmrw6hFSH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:15:e8:7a:cd:52:07:c9:2b:f7:2c:79:67:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Sep 21 12:00:47 2026 GMT
Not After : Sep 22 12:00:47 2026 GMT
Subject: CN=e11e3d85944520442c8b26b744d2d6fe09bc0a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:47:57:c4:49:93:6f:b9:77:a7:11:58:28:1b:
5e:1c:7f:b3:dc:25:a7:11:6b:80:20:71:2f:42:29:
4f:d2:85:dc:27:c5:97:2b:70:fd:8b:20:f1:d6:f0:
17:37:97:2f:69:ff:fc:49:cc:db:4f:03:48:3b:ff:
de:40:33:3b:d8:a0:d4:3e:e1:d5:19:8f:40:11:6d:
44:7d:7e:46:85:ce:f5:29:ba:ac:52:14:92:c0:f6:
b5:0b:7f:2a:56:30:d0:86:7c:d8:ae:14:e7:1c:b4:
a0:ae:b2:99:2e:c1:13:a9:2b:6d:90:6a:12:8c:92:
1f:7b:26:6d:e4:28:7e:ca:ba:51:14:d8:04:ba:58:
b5:13:d3:41:b0:43:99:68:3a:e2:ca:87:18:7e:30:
df:33:dc:c9:12:6b:04:56:75:df:8c:72:18:38:b2:
69:76:33:8c:18:f5:8e:94:bd:5d:25:18:c5:08:5c:
a9:73:cc:b7:fb:2c:45:03:94:82:62:56:e7:66:08:
f2:6c:0d:66:ca:70:69:91:b2:ec:4d:d9:0b:41:c8:
14:9d:03:9c:ac:a4:79:0f:0f:7b:c0:3d:c5:b5:5a:
19:9b:03:55:6e:f0:8b:f4:29:fa:81:98:65:c1:65:
72:65:58:30:fd:7e:5b:01:57:a2:62:68:07:8d:b3:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1E:3D:85:94:45:20:44:2C:8B:26:B7:44:D2:D6:FE:09:BC:0A:82
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cb:db:83:d5:ab:6e:5e:cf:e1:87:60:b3:6b:c1:15:e7:80:
78:e6:48:19:ca:c9:4a:a3:28:7e:b0:42:b5:85:87:6e:f2:9e:
39:ef:69:4e:ae:7e:1b:0f:15:46:be:ed:66:e5:9f:a4:e9:06:
97:b9:9c:43:10:62:d4:4f:c0:8e:6b:6f:1c:c8:b0:0b:f8:e2:
6c:a8:a2:87:6d:ce:57:d4:10:92:c7:1e:4a:4f:fe:a0:44:2f:
e0:a5:2c:e0:b8:46:c2:3a:cb:86:e0:2e:3e:bf:da:f6:e5:6c:
b5:dc:8c:db:dd:22:16:45:b9:29:ab:50:0e:97:df:3f:19:47:
dc:77:ee:a8:fd:66:91:ec:81:d5:d7:88:aa:57:46:f5:45:e8:
26:e3:82:d8:74:14:66:60:0a:54:58:04:cb:70:c5:5f:71:60:
c9:7a:a1:24:2c:a6:57:21:f8:6b:41:53:84:e1:18:c5:86:49:
45:81:e0:f3:c2:b2:c7:89:33:21:fa:b3:4e:34:b5:4f:50:bd:
3e:36:0a:02:4f:4b:66:39:5b:87:ba:62:84:c4:be:6c:f9:99:
7c:ff:08:bd:0a:7c:60:ea:fb:1f:42:6d:94:3a:cb:e0:76:4a:
1b:89:57:93:b6:7b:88:88:ae:41:1e:8d:5b:5a:da:6c:97:71:
3b:ec:f2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:45:47 2026 by rpki-client