Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
File: 9RMq2BqEohEhxQRHsgidzl5LI4o.mft (raw, json)
Hash identifier: ABBMQTL7fF/O6TfFd/xrA8Ow/uc/f7qVUaZHMLzgVDg=
Subject key identifier: 63:A6:5E:D7:11:2E:7E:41:9F:F1:A5:BE:9D:3E:AC:79:F6:53:34:56
Authority key identifier: F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
Certificate issuer: /CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Certificate serial: 01A0FA8F43FE9D721C0665F5D4EF92CC04F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
Manifest number: 01C8
Signing time: Fri 02 Oct 2026 03:01:28 +0000
Manifest this update: Fri 02 Oct 2026 03:01:28 +0000
Manifest next update: Sat 03 Oct 2026 03:01:28 +0000
Files and hashes: 1: 810BVakNXZc-eZCkm84wPbkx0zw.roa (hash: 4W7QJcIB5zQfI2eP/65KAZgZifjdrkX8vzWfoESNuGg=)
2: 9RMq2BqEohEhxQRHsgidzl5LI4o.crl (hash: C04LaIwCn98JXKjdooLWQZpymkO0UeS3h+inz0IwPhM=)
3: T7Q4ZInr7nmTwTSXGOP2lYQS6SE.roa (hash: Y1/e/IgPvhokjR0rrttCkxlf/wWiyXtQnZX5Qj+ssXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:8f:43:fe:9d:72:1c:06:65:f5:d4:ef:92:cc:04:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Validity
Not Before: Oct 2 03:01:28 2026 GMT
Not After : Oct 3 03:01:28 2026 GMT
Subject: CN=63a65ed7112e7e419ff1a5be9d3eac79f6533456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:29:ba:a0:4c:e0:76:4f:45:e2:b3:55:a1:
9b:b2:05:18:dc:1b:1a:fe:5b:3f:91:84:70:23:be:
51:b9:d7:d1:4a:c4:91:82:bb:3f:da:9e:06:51:ba:
0c:fd:0a:58:95:c0:5e:c4:8f:ea:51:3c:0c:8d:73:
61:9f:ed:26:07:c0:76:2c:e7:f0:2c:78:37:d7:33:
42:c7:e4:37:3e:0e:0e:57:b8:2f:46:92:de:c2:58:
9a:8a:95:3c:f3:9e:71:b5:4e:aa:66:26:24:88:de:
45:10:ab:f2:20:61:f6:7c:20:7f:78:46:35:0b:6d:
5f:ec:3b:58:5d:dd:34:7a:b2:d1:74:42:45:83:be:
b2:62:35:dd:6d:68:09:b4:a8:3a:30:7e:09:62:ed:
c4:80:22:20:da:c6:77:45:f3:d2:31:5a:9d:b8:53:
f9:21:28:62:5a:99:b3:4c:b2:4d:30:0c:b8:19:75:
60:ae:22:7e:ae:1d:dc:23:e7:ea:5d:3f:40:af:26:
55:dd:9f:1d:45:4c:b7:bb:50:56:0f:66:45:c0:57:
ad:d6:14:37:8d:e8:a1:02:ed:3a:07:48:9f:75:39:
53:c2:f4:d4:0e:dc:68:c3:07:e4:72:0a:ee:27:f7:
17:5b:df:5e:d3:cb:5e:6a:bd:20:b5:ff:20:12:41:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A6:5E:D7:11:2E:7E:41:9F:F1:A5:BE:9D:3E:AC:79:F6:53:34:56
X509v3 Authority Key Identifier:
keyid:F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:dd:6e:46:50:25:c6:4e:c9:b4:93:87:c1:92:42:70:87:6d:
9a:9e:e1:d4:21:ec:3b:69:b4:ea:0e:eb:75:16:d9:e3:d0:84:
db:72:79:38:e9:2f:ce:c5:a7:3d:5a:ae:48:ed:dc:f3:9f:bb:
d7:7f:e5:c3:90:94:fc:11:c8:07:81:7c:73:ba:a7:7a:6d:01:
95:91:4b:f7:dd:00:75:bc:0f:4e:04:fd:59:aa:ea:69:74:70:
13:87:ed:af:b5:ae:d2:57:84:1b:fa:6d:01:7e:1b:02:e2:72:
a7:8f:be:ee:61:a5:66:a1:96:b0:a3:e3:e0:49:bd:ae:c7:9f:
ba:c8:72:be:6c:fb:3e:47:84:f6:0a:1a:9e:41:83:9d:2e:fe:
e1:a5:1d:00:01:19:73:75:ac:2a:a3:08:fb:19:b1:a4:bd:d1:
3a:40:56:b1:25:f7:26:a3:8b:d8:56:26:a5:03:26:45:09:41:
2b:22:95:ce:17:a8:74:35:f8:d8:6c:8b:84:86:47:78:3b:64:
ce:cb:e7:00:5e:8c:10:ca:65:0b:0c:bf:09:57:58:8c:57:54:
43:96:57:bf:98:85:87:74:91:3d:c4:da:96:b6:67:81:62:8f:
2a:d9:2a:fc:3b:b7:de:40:08:81:19:75:42:9f:df:83:b1:40:
b9:02:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 11:49:02 2026 by rpki-client