Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier: 45/KUjlt5mC9IqvgRxjh87gp4nj//ArdvHOHhoXlHC4=
Subject key identifier: 1B:EE:C6:8F:F2:57:4B:7F:F3:0F:F3:48:06:A1:2D:20:C8:35:C9:6B
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 01A140BA23BA531B2F19734410D9B33F467A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 18:01:42 +0000
Manifest this update: Thu 15 Oct 2026 18:01:42 +0000
Manifest next update: Fri 16 Oct 2026 18:01:42 +0000
Files and hashes: 1: 5Gr2q7ZQUry_6juJo6TbPmIZ_GI.roa (hash: CLid1uYJD/tWmQGqtEiBJvjm9/bPdenK+e3VYv871Vk=)
2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: Wnxz7OikIq2fDjllhNhT+xY7UZnYgSm7PX0uVl8E7Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:ba:23:ba:53:1b:2f:19:73:44:10:d9:b3:3f:46:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Oct 15 18:01:42 2026 GMT
Not After : Oct 16 18:01:42 2026 GMT
Subject: CN=1beec68ff2574b7ff30ff34806a12d20c835c96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:c1:f9:f2:de:3b:aa:eb:9a:9f:f0:28:64:
4f:0f:8d:de:a1:d9:f7:70:28:6a:70:24:f2:5b:00:
83:37:a8:c4:20:77:48:1c:0c:07:91:14:b4:76:2e:
b7:f9:c0:57:55:1e:67:71:4a:07:96:58:a1:d2:25:
11:e1:f5:5f:7c:98:6a:36:d9:49:43:ae:ed:c4:35:
62:b2:85:7e:00:66:fa:da:34:a3:83:63:f5:5e:dc:
5d:4a:da:35:d1:42:c0:2c:5b:3f:14:7d:63:a0:95:
50:20:73:87:52:d6:f4:91:9a:ac:cf:10:aa:42:91:
83:f9:38:ad:fd:a3:ff:d4:9e:33:6d:e7:27:df:31:
5d:3c:97:8b:3e:1c:3b:64:34:e6:44:52:e1:77:99:
bc:1a:1c:db:c8:36:f5:3b:84:39:7b:da:29:5c:59:
48:69:45:de:fd:ea:c9:c6:46:5b:e9:ba:61:60:72:
2b:ab:a9:fe:04:23:87:79:24:3f:2d:79:e9:52:e8:
09:20:3c:6f:a1:3f:c8:a8:fd:71:77:aa:80:09:e5:
83:d3:51:de:c1:05:a4:b0:45:82:68:22:bd:30:15:
27:3c:77:4e:99:f0:69:89:32:d7:1a:94:db:5d:48:
bb:8c:98:d3:8b:30:92:98:86:60:c2:24:70:d8:d2:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EE:C6:8F:F2:57:4B:7F:F3:0F:F3:48:06:A1:2D:20:C8:35:C9:6B
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9e:92:99:34:a8:dd:45:f6:c6:71:28:da:68:78:3e:ce:63:
22:e1:2f:9b:e7:29:36:3e:57:40:5d:6d:cc:d3:ee:f3:f5:73:
b2:38:38:d5:2f:3f:79:bd:3b:4a:43:63:88:31:2f:1f:f2:55:
25:43:c3:f4:db:de:8a:f3:11:51:33:80:ab:f3:f9:d4:be:65:
a2:03:31:cf:e3:04:06:e4:d2:64:a3:7f:ab:37:b9:9d:53:be:
cf:a2:df:b0:1d:37:ff:25:36:68:e3:03:ce:87:d8:cf:dc:b8:
37:09:1f:9f:e7:4f:64:c7:45:03:c9:d7:d5:52:f3:7c:8c:a0:
c5:a9:7f:67:f3:5f:e1:88:18:9a:13:11:32:8a:1d:ae:bf:e7:
6b:98:5c:61:c0:1c:ac:57:52:8d:e1:75:73:a1:0a:6b:7a:20:
34:57:5c:3a:4d:d4:15:96:ad:af:77:f9:10:e1:c0:c2:73:bf:
d2:1f:1c:b8:0f:91:9e:40:56:4e:4e:19:20:bd:fd:42:ce:56:
00:f0:a2:4d:ca:03:e4:68:36:f3:95:0e:a0:e6:fa:b7:a7:13:
42:c0:fe:7b:eb:20:88:35:00:c1:91:46:a5:e3:5f:0b:e2:a2:
c9:b0:c2:a5:19:98:17:49:86:33:2f:e8:ad:9b:aa:e1:8b:6f:
c8:f1:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:16:25 2026 by rpki-client