Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: BQFhZdbEwJuYXVYeOwaY2Nr/Um3kZA3Ne3N3bUwIzrA=
Subject key identifier: 38:E1:AE:32:15:E5:42:F1:40:86:D9:B1:B5:CB:23:8C:F6:2F:0B:58
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 01A0C3325827759DA58C84FF69AA02F346AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 09:00:51 +0000
Manifest this update: Mon 21 Sep 2026 09:00:51 +0000
Manifest next update: Tue 22 Sep 2026 09:00:51 +0000
Files and hashes: 1: 4seyTDBe9bL2x8Z_6sMBSrOYvgM.roa (hash: Ld+vj6OA1gKqESzL9huJc2LDFrgP5kvfK/8UeR3bm/4=)
2: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: Qm2CwyXq2GSXjAZFpuLq4SJ/A2nVqkPD9bmZVs2xers=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:58:27:75:9d:a5:8c:84:ff:69:aa:02:f3:46:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Sep 21 09:00:51 2026 GMT
Not After : Sep 22 09:00:51 2026 GMT
Subject: CN=38e1ae3215e542f14086d9b1b5cb238cf62f0b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:d8:65:b2:db:fa:ff:f2:56:d5:4c:2e:76:
27:7b:f9:ef:26:d8:59:4d:2d:1c:12:55:f1:4d:3d:
40:7a:04:b4:a5:68:2a:25:58:00:d6:9e:82:3c:bc:
9f:90:c4:f5:57:dd:41:f0:77:43:86:83:fe:ee:20:
fa:79:d8:f1:fe:66:dc:5b:de:66:ea:cd:06:d0:6f:
fd:b7:e3:6a:9f:7e:07:87:1b:ac:1d:d7:e8:27:5b:
c6:d2:1b:87:0c:77:81:da:15:14:77:c6:c9:91:f5:
c6:91:23:4e:d7:9d:b1:b9:9e:3f:e9:f9:02:10:0e:
70:69:02:57:77:5d:77:86:1d:4c:e8:52:eb:fd:95:
95:5a:b5:5d:7a:59:d4:d6:8c:d6:4f:74:fe:7b:a2:
2f:08:72:87:4c:18:c1:1c:bf:be:9c:11:1f:5a:f4:
fa:3f:c0:b1:29:6a:19:c1:c1:ba:16:a9:ba:f4:cf:
ab:35:bb:00:8b:fd:05:66:fd:ac:d9:32:06:0e:32:
78:e8:db:6b:0e:8f:b5:a6:16:10:13:42:74:e5:37:
5d:4e:65:8a:dd:a9:8e:77:3b:5a:7f:09:75:46:e8:
25:49:d6:10:6f:9f:d9:e5:01:d1:0e:3f:e8:12:0f:
69:02:92:f2:5f:eb:6f:9a:9c:d2:8b:ca:63:e9:72:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E1:AE:32:15:E5:42:F1:40:86:D9:B1:B5:CB:23:8C:F6:2F:0B:58
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e3:cc:23:0b:e0:15:52:89:2f:f8:80:77:4b:04:72:92:0c:
83:a5:29:f1:98:97:d5:0b:fb:c5:88:57:26:0c:39:ae:e8:42:
ea:f3:df:09:2f:cb:f8:f3:bc:72:e8:8d:37:3e:5f:06:72:53:
aa:27:42:d4:39:67:27:7c:08:28:0d:9f:73:a9:f7:d0:6e:f1:
b9:25:fc:f0:5d:da:fd:53:e7:b1:6a:73:81:b0:6b:56:75:6b:
df:2f:e4:ba:03:83:c1:30:e0:04:92:c8:f2:d7:82:0a:d7:97:
1b:9d:d1:d5:df:1d:de:30:fe:22:43:e5:2a:3e:79:05:65:70:
cd:14:f9:54:80:4d:bb:b0:89:fb:f3:60:d8:f6:1b:cb:ae:e3:
45:91:51:50:3e:9b:3d:9d:96:6d:e2:59:83:67:8d:57:64:a5:
f9:47:b5:0f:da:57:f5:8f:db:ed:13:4d:da:33:d6:63:d3:37:
67:7a:f3:f2:bb:dc:31:b8:41:00:9f:a0:b8:0a:e8:ce:08:67:
2c:fc:30:a3:c3:ba:90:e0:1d:55:d6:fe:6c:64:6a:48:26:f5:
0c:b0:67:46:f9:ae:3e:d9:76:f2:59:87:b6:14:83:70:45:95:
47:2e:63:69:52:b4:46:34:a1:a9:9c:9a:27:cd:af:7b:98:c5:
fa:d5:14:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:58:39 2026 by rpki-client