Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File: B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier: QBVO2J85WTpykwLOK+SVKquAp1IwAzkjv9M7VY6c+Lg=
Subject key identifier: FD:65:C9:7F:BD:57:54:E9:D0:95:37:24:02:03:1D:A8:D2:3F:85:48
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 01A0C2FAF54B14BD8C48A52C515FA4EA0564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 08:00:21 +0000
Manifest this update: Mon 21 Sep 2026 08:00:21 +0000
Manifest next update: Tue 22 Sep 2026 08:00:21 +0000
Files and hashes: 1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: Cy4QjhmdF4PtGEkR6TreLW7K5vrNCa4pTqm9/PzSaFQ=)
2: VuZOG8s543NfcGdXf57yIIrySJ8.roa (hash: Z7XKmPS1GYE3f8Q+rg/H8yChwaPlHaJspMgwTyoFFv0=)
3: sZxFDMEjV4E6bBsRgrZxjoy7_tk.roa (hash: zq0CNZddr6RR3XPpn+vNQeYgJJau/bg5D4OmfDaVY/s=)
4: tdeCucXFWGUBsGHwqe6hB6aeUEQ.roa (hash: enVyFjAXmV6jKlcwgcqYoRWX2/X4d1HEfq19dhiH9Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:f5:4b:14:bd:8c:48:a5:2c:51:5f:a4:ea:05:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Sep 21 08:00:21 2026 GMT
Not After : Sep 22 08:00:21 2026 GMT
Subject: CN=fd65c97fbd5754e9d095372402031da8d23f8548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:6d:f6:44:b5:c3:a4:33:84:ca:49:5d:6b:
cd:3b:3b:b7:90:f0:89:7c:00:c3:70:ca:c8:c1:d6:
ec:6a:a0:9d:ab:dd:7c:b6:1a:6d:f3:69:bb:e1:ae:
f5:1b:ac:06:fa:70:60:94:23:48:98:4e:cf:21:55:
29:4b:2c:76:b8:95:0d:e0:15:75:1d:27:3e:51:b2:
27:3f:9d:26:6e:4c:8a:67:c7:bb:57:3b:da:fe:05:
47:a9:60:86:ba:b1:c3:d1:6c:4e:d7:fe:cc:a1:50:
e1:d7:1b:2f:71:cc:28:20:5e:67:0e:6b:09:24:11:
3a:67:d2:90:0b:d9:3a:88:89:94:0f:b4:3f:76:25:
92:98:e8:94:f5:f8:eb:5f:b2:57:25:dd:a0:60:eb:
f1:63:14:83:61:c5:29:53:a1:c3:c3:fe:09:cb:bb:
a4:08:b7:bc:55:2a:17:74:2a:b1:69:5e:bf:b0:c5:
cc:66:90:80:53:7a:c5:2c:4b:d0:c1:ac:39:f1:2f:
6c:b2:f0:f6:5a:ca:e0:ec:03:4e:98:06:4a:80:7f:
82:e6:54:68:90:8c:51:29:6b:e5:96:7a:9a:3a:ce:
fa:eb:e5:c1:29:1e:83:5a:9f:ca:87:4b:a4:3c:53:
47:d2:bc:ca:f7:9b:2b:5c:f2:3e:d9:0d:ad:5c:ee:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:C9:7F:BD:57:54:E9:D0:95:37:24:02:03:1D:A8:D2:3F:85:48
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9f:47:24:35:da:ff:51:b7:0e:b9:f3:b6:36:41:3b:ca:7f:
89:25:29:5e:c9:c3:06:7d:a2:cb:31:c2:65:4d:81:83:c1:b7:
d8:58:dd:b6:0d:3a:75:4a:92:5d:9c:16:af:ed:9a:47:0a:bd:
67:88:76:ab:2f:71:0e:27:15:9d:4a:a2:37:4c:71:db:47:d2:
ad:8b:e5:7e:ad:b1:3d:9d:96:21:25:43:e3:88:04:a2:0c:72:
8d:2c:6b:2c:87:25:ec:45:a1:3e:66:e3:49:a4:0b:a3:85:18:
5e:fe:dd:92:5e:f1:ee:7a:ae:22:1f:91:55:f6:89:8c:cc:3d:
9f:49:00:c6:4b:fe:4c:68:ad:a6:51:bc:5c:50:dd:ab:5a:a8:
ae:35:98:01:84:0a:12:e2:26:2f:bb:98:5d:ed:40:59:b6:01:
f8:60:c6:e5:e2:33:e6:b5:61:20:b5:3e:2b:4b:e0:6d:84:d0:
af:57:c7:5f:48:4d:ca:48:d1:39:f4:fa:04:d0:0c:53:89:d2:
30:a7:5a:14:d3:bc:17:a2:f3:7c:da:ab:56:5e:2c:8d:d3:de:
11:f7:ae:07:16:bf:66:e2:8d:15:47:5b:6a:1d:85:ae:03:cf:
8c:52:e5:c6:8a:12:17:59:82:23:2f:60:91:81:2f:e5:79:e9:
73:92:30:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:00:21 2026 by rpki-client