Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: qebX9prpEfnfsEFQ/5AFANffiVoEamsj/FgaJ0fAM2s=
Subject key identifier: 06:1F:94:3F:DC:18:1D:C4:38:26:D2:90:C6:97:31:33:A9:CF:C5:77
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 01A10580F9675F1339F9E35ED2DFE2562EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 1378
Signing time: Sun 04 Oct 2026 06:01:40 +0000
Manifest this update: Sun 04 Oct 2026 06:01:40 +0000
Manifest next update: Mon 05 Oct 2026 06:01:40 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: ZhJF6bcDKd8u7dPuRj/jtXhjf3iILu5HKIpBestMVSw=)
2: lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa (hash: GeIEq9ieMXhGCkHBVtks0M5q4Jm8CcNNhR3YdczhVxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 06:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:80:f9:67:5f:13:39:f9:e3:5e:d2:df:e2:56:2e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Oct 4 06:01:40 2026 GMT
Not After : Oct 5 06:01:40 2026 GMT
Subject: CN=061f943fdc181dc43826d290c6973133a9cfc577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:62:d3:20:72:26:06:5e:41:0f:ec:2f:00:76:
87:3a:64:8e:9a:6d:07:a8:2d:74:10:ec:dc:6d:b0:
be:5c:4c:2c:15:0e:4e:44:6d:84:ab:60:e9:39:d3:
ce:b3:19:a4:11:6a:1f:e5:5a:eb:08:2c:7a:08:3c:
d0:ef:03:e5:30:78:b0:f5:c3:08:d6:46:15:e7:e3:
08:00:67:d1:be:56:14:c8:35:b7:67:07:a2:8b:7e:
be:47:c2:af:20:62:d1:7d:75:70:97:bd:53:d5:e9:
9d:d2:de:7a:b6:f7:2f:ba:4d:ab:13:be:71:7e:f7:
16:60:c0:d7:8d:e9:4b:df:d2:10:bd:92:50:a3:27:
38:19:1b:9b:79:85:8a:93:5b:69:fa:ee:88:b5:3a:
e2:0d:6b:75:84:a0:e8:7e:91:48:a3:70:6e:db:42:
8c:88:6f:40:60:b8:b5:2f:e5:1f:a2:d7:0e:87:a8:
c1:90:7a:ee:c9:cc:7e:2e:d1:ff:5e:99:e7:ac:40:
c0:3b:23:da:33:e5:e7:af:0c:67:82:83:45:22:43:
24:b6:bf:fc:e5:a5:49:cb:6f:81:75:e9:a2:de:94:
7a:d0:71:44:6a:e8:33:fb:f0:13:91:5b:9c:e2:47:
4f:c9:f7:dc:6f:0f:3f:54:4e:c7:17:64:2a:67:6b:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1F:94:3F:DC:18:1D:C4:38:26:D2:90:C6:97:31:33:A9:CF:C5:77
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d9:74:70:bf:20:d5:a5:f6:8f:de:8a:60:51:04:49:c2:68:
86:6f:9a:4f:70:ae:68:f3:c3:8d:1d:c5:55:0d:14:f6:1c:e9:
3d:eb:a4:66:1b:c4:ed:cf:e2:f8:90:0f:65:bb:e2:8f:f5:3e:
49:13:fe:ea:28:7f:15:50:5f:32:13:c7:f8:e2:ce:58:4c:c9:
01:96:f4:33:70:37:4c:91:8e:a8:a4:26:7c:57:88:8d:46:37:
ee:2f:5e:7d:b0:d7:18:9e:0f:2a:28:62:fd:95:55:7c:5f:fb:
36:90:d3:89:d2:87:49:c2:ec:51:6c:ee:a9:da:2e:af:4a:49:
97:c1:57:5c:6b:3d:b1:14:f3:85:67:78:dc:af:f8:05:04:32:
cb:35:1d:ed:12:2c:43:00:7d:89:eb:b7:d8:b9:0c:96:44:6d:
7e:56:fb:0d:ae:30:9e:46:d8:0c:58:c7:ff:8b:f3:a2:21:0b:
0a:78:5d:0c:76:9f:22:77:8e:c5:37:a7:cd:a9:dc:7e:05:de:
c2:ee:9f:e4:28:57:84:f1:32:24:ce:a4:d5:94:f6:7f:37:14:
51:9c:d7:d0:a6:f7:e5:41:2b:58:a4:46:9b:3e:ba:27:44:3f:
bb:66:51:c0:72:f6:ab:91:46:af:64:7e:a2:a4:33:2b:d3:32:
65:e3:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:54:13 2026 by rpki-client