Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: 3fJ3iYTLkJVW3NxMY1U+mPrUf5g+2PyWJ1SLnmdPgX4=
Subject key identifier: DA:FD:8D:E4:14:90:FE:3B:AB:1A:52:5B:89:93:C6:74:5E:42:0D:EF
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 01A0C4E93E943A41EAC8961D3393B8ACE212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 19F6
Signing time: Mon 21 Sep 2026 17:00:15 +0000
Manifest this update: Mon 21 Sep 2026 17:00:15 +0000
Manifest next update: Tue 22 Sep 2026 17:00:15 +0000
Files and hashes: 1: 7kGNbroThpMnN96LqRGM-Y-5t9Y.roa (hash: lxPWqX0/OpM/p7/y+8GA/oyT71oB2fzc6nqiYIWie7o=)
2: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: MBm7epB5meIMp+Int0+2oHzcMr4b2AD/EvOlX4vQZc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:3e:94:3a:41:ea:c8:96:1d:33:93:b8:ac:e2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Sep 21 17:00:15 2026 GMT
Not After : Sep 22 17:00:15 2026 GMT
Subject: CN=dafd8de41490fe3bab1a525b8993c6745e420def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:72:f0:57:70:68:76:6b:d0:6c:1f:d2:a5:
90:be:d5:6c:64:af:49:63:ee:9f:bb:72:fb:b3:49:
83:4e:3e:b4:83:58:93:c0:9b:3b:21:18:b8:90:6d:
a9:9c:0e:5f:45:81:ca:2c:9a:34:6f:5b:7d:99:53:
27:02:63:7b:61:01:7e:fd:9f:d5:23:07:f7:a2:27:
f2:51:af:b9:f8:f8:91:ab:1c:88:bc:f7:79:4b:1c:
e3:75:ae:e9:8b:04:40:a4:f4:e2:6e:ca:4b:2b:ab:
bf:4d:82:26:f4:4e:51:c4:e1:a3:4c:2a:80:7a:34:
fe:ec:cd:47:a5:2f:9a:ac:ea:06:33:85:69:9f:98:
86:c6:f8:1d:48:76:68:99:78:17:94:86:4c:5d:b5:
53:50:d1:42:e2:f2:e6:87:e9:f4:eb:ed:d6:28:88:
0a:d3:98:01:9c:3e:d5:68:f6:df:5c:a4:66:ee:88:
50:0e:8b:c2:78:bf:ea:42:93:23:e6:8a:0e:4c:84:
b6:1a:df:a8:31:df:95:38:af:84:e5:07:7a:41:37:
eb:12:41:b3:d9:65:4a:c2:a6:75:11:4a:e5:72:ed:
98:65:a7:eb:90:fa:06:58:47:71:d4:72:fe:96:f4:
8e:39:bb:fd:13:8b:8b:53:d4:0a:f8:3a:e5:d6:77:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FD:8D:E4:14:90:FE:3B:AB:1A:52:5B:89:93:C6:74:5E:42:0D:EF
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1f:44:58:5a:1b:87:c1:57:10:1c:e9:ba:cd:b5:69:fb:6e:
60:db:6d:09:e6:df:8d:90:5d:4b:95:87:17:fb:5c:c6:04:e2:
a2:4e:6e:c5:e4:be:1a:e7:f5:dd:6b:05:da:cf:c1:1b:29:68:
15:66:eb:33:11:7b:89:1b:b4:46:29:7c:71:62:db:9e:55:8e:
05:49:69:eb:e4:4a:6f:e0:33:a3:ec:c4:c8:86:ed:5a:c2:ac:
62:c2:73:c7:54:ba:40:3a:c2:a6:b4:f7:99:be:7b:1b:a1:fa:
de:6d:1b:bb:c2:2b:61:0a:6c:f8:cc:aa:04:f7:68:f9:1a:29:
42:51:64:b4:0e:96:d5:1d:a4:8e:93:bb:75:c1:72:bd:f7:be:
a5:22:96:3a:39:b5:d4:22:a4:c0:16:da:18:1b:58:48:af:2f:
74:08:60:08:47:7b:6b:3b:82:fe:08:09:c5:5d:11:fb:ee:52:
1a:0d:f1:04:0c:b1:57:6e:28:56:ab:1b:1e:74:57:1a:ae:93:
2d:f9:99:47:56:e2:5b:54:85:3a:2d:c1:62:d4:72:17:58:26:
7e:4c:fc:31:5e:6d:d2:34:3e:10:cb:b4:d7:a7:25:69:71:45:
22:a4:64:fd:1e:42:0e:d4:ec:49:63:79:c2:a0:38:90:aa:a3:
21:73:17:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:42:46 2026 by rpki-client