Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: 0z2lJRqtYbc1Ol1De7u5qyqpcXl8WAhxeKfzhCw9QmQ=
Subject key identifier: 90:79:F5:EF:76:B4:A4:D6:68:E9:04:34:5B:2E:32:E3:D5:11:E5:3A
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 01A1DCB8EDDFB74CAAF565A84A3B07A02AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 01:01:09 +0000
Manifest this update: Sun 15 Nov 2026 01:01:09 +0000
Manifest next update: Mon 16 Nov 2026 01:01:09 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: pcmEeNjfOI1N6JScw3wNv7FvqzPgw8/JLQFZFvuB73w=)
2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:ed:df:b7:4c:aa:f5:65:a8:4a:3b:07:a0:2a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Nov 15 01:01:09 2026 GMT
Not After : Nov 16 01:01:09 2026 GMT
Subject: CN=9079f5ef76b4a4d668e904345b2e32e3d511e53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:9d:87:21:71:f3:13:a7:a0:2a:86:d0:d1:
23:52:2f:39:85:81:e9:f6:27:ec:d9:eb:b8:21:fd:
4e:f0:d0:ea:46:fe:f4:f4:80:92:36:51:65:13:68:
09:6b:5f:b2:3c:6b:a8:97:e0:ae:d1:c4:69:40:8e:
85:8c:3f:b6:1a:58:07:60:88:a2:41:37:73:62:85:
4a:67:fe:71:06:bb:fe:66:24:24:7d:36:ae:a3:8a:
e2:af:ed:1b:dc:b2:20:e4:05:14:db:85:6d:61:ab:
13:7d:0d:17:73:52:77:f1:e5:a8:76:29:c3:80:de:
5b:fb:04:ea:1d:93:1d:b1:02:40:d1:d3:0c:74:6e:
c3:3c:40:0e:e2:27:bd:72:1b:61:21:7e:b3:d6:4b:
07:8a:59:b2:51:ca:16:a4:18:a7:6e:c4:7d:89:ba:
9a:b6:a9:b0:bf:6f:fd:6c:83:4d:4c:66:27:ef:f1:
91:4c:61:a5:37:40:19:73:e2:88:92:c2:70:67:5f:
0f:15:4b:40:88:2b:3b:7d:86:d9:7b:64:c4:e6:c5:
39:25:30:7e:dd:8a:a4:28:06:5d:f9:f4:2e:64:90:
90:8d:d0:2b:3c:5d:81:c8:04:ac:2b:15:a7:ce:83:
fd:ff:c5:b3:a9:70:64:3d:70:74:0d:53:7a:40:99:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:79:F5:EF:76:B4:A4:D6:68:E9:04:34:5B:2E:32:E3:D5:11:E5:3A
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a6:d8:59:74:3d:37:36:c1:64:97:8e:bf:65:6c:af:74:a2:
61:e8:b3:bf:21:3c:08:13:d4:6b:8a:74:2c:62:b4:9b:2f:9f:
d0:f3:77:93:a0:6d:47:a9:ab:94:f3:35:16:aa:6b:df:f9:84:
90:93:c7:c7:de:8f:41:db:d6:ed:9b:6f:86:e1:b7:71:d4:e2:
37:d7:72:8f:46:98:42:fd:e1:a9:94:b2:4a:e3:b9:38:c4:26:
9a:01:05:e1:5d:da:6b:a0:2c:67:2d:b2:15:80:19:54:f0:77:
4e:2b:6d:0f:f2:28:d7:15:5e:f7:c2:8a:a0:aa:e5:99:d6:21:
66:6b:96:c3:13:1d:de:a0:86:02:f6:57:5f:f1:8a:ba:a8:11:
cd:cc:73:7b:28:15:d5:2f:24:ff:95:84:87:00:01:97:98:0e:
ad:be:ac:3a:c9:49:e8:4b:3e:b2:89:43:c4:42:b5:bf:59:88:
a7:7f:f5:d9:6e:cb:e3:0d:ba:0d:40:08:c8:f5:f9:9d:4b:70:
1f:4b:1c:0b:05:18:87:20:7b:6e:f0:1e:6f:2b:f8:4a:85:cb:
ff:49:d0:1b:63:90:67:ea:5f:e4:41:27:53:94:49:c2:fd:31:
83:c3:01:d6:5e:cb:8c:48:d3:ae:3d:11:39:7a:ce:8d:14:ae:
87:71:9e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:13:09 2026 by rpki-client