Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
File: 9FT4T3gIX46gOklonL43LnSsFTw.mft (raw, json)
Hash identifier: I0yXH8MNJkWXzWXoykR/PsYMSh9V7wd4tqJjPJIUwWs=
Subject key identifier: B2:A7:FB:30:57:F1:57:B9:04:AE:97:14:65:71:C5:D0:79:4A:35:DF
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 01A1DCF072FC4000EECB1EBCEF53C6267540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 02:01:47 +0000
Manifest this update: Sun 15 Nov 2026 02:01:47 +0000
Manifest next update: Mon 16 Nov 2026 02:01:47 +0000
Files and hashes: 1: 9FT4T3gIX46gOklonL43LnSsFTw.crl (hash: HbGCO2BZHh7WkKNd7Sjm/h17fQ1DxQ7s9ixkwL5oizQ=)
2: Y6ybWhEjwuda51l0uiaZjIT-fg8.roa (hash: 8LGe+xcRdI8B6zAIoBChynO4rGVdoYzlhKSA0vPLuGw=)
3: aEVMMMA5f1UmRI8NYOUQQuTtgsQ.roa (hash: pdfghptkrLhCdjHFzkd4R/q6hTlSpA/AvR6T+/fF+rc=)
4: sbz6OVH06vkYwN8qjWyWv5JQ98I.roa (hash: mqPWKkpNLvEdA2xxPfKh+1E+EB8NghsX64s1n44EHeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:72:fc:40:00:ee:cb:1e:bc:ef:53:c6:26:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: Nov 15 02:01:47 2026 GMT
Not After : Nov 16 02:01:47 2026 GMT
Subject: CN=b2a7fb3057f157b904ae97146571c5d0794a35df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:15:60:53:d2:ca:db:0c:27:10:49:a5:ed:
41:ca:25:a1:e2:39:af:99:55:38:da:c0:b3:c4:5d:
b2:be:b5:eb:2c:bf:f9:2a:c8:3a:df:27:86:cc:2e:
a5:05:54:5b:41:68:58:e8:b2:b2:fa:d2:09:5a:f3:
10:32:2f:6e:ef:1b:30:cf:82:22:15:1c:fb:c2:73:
80:6f:94:19:9f:d9:a8:76:51:fc:f4:88:08:38:95:
f7:81:ce:b9:64:47:8e:aa:b3:e4:98:b6:dc:c7:07:
ae:53:e7:c2:68:74:3f:8a:e0:e3:b6:32:dd:77:06:
55:bd:c7:08:5c:7b:6b:78:17:a6:da:db:6c:02:e9:
a8:72:b7:07:a1:65:a4:5d:12:e1:8e:f9:6e:60:eb:
d1:2a:04:42:54:a6:d0:d1:d8:06:97:7d:76:62:d9:
e8:7a:b4:03:a6:2d:42:4c:95:0d:3f:21:a2:5b:03:
f7:a9:6c:f1:c6:fa:8c:5a:7f:76:6d:12:c1:93:8e:
51:b5:a5:0e:7b:08:55:d8:8d:e2:9b:00:65:73:6e:
36:ca:fa:94:7e:23:f7:cd:8a:46:a8:17:ac:7e:71:
0a:31:83:34:93:b2:e7:28:ce:f4:f0:b0:60:08:f8:
18:e1:fc:41:a9:18:a1:fd:c3:35:14:73:a9:5b:08:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A7:FB:30:57:F1:57:B9:04:AE:97:14:65:71:C5:D0:79:4A:35:DF
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cc:d3:cc:5a:48:7c:c9:dc:89:bb:b5:d9:8c:29:12:cd:5e:
b3:52:21:28:f9:a9:74:97:8a:84:ed:a2:77:b6:bd:b0:e1:88:
f9:59:37:3b:d0:15:6b:e1:43:d6:2c:5f:2d:dd:c8:36:30:33:
91:97:a1:f1:6b:13:8d:d0:8a:6b:15:72:65:46:ea:d1:80:42:
65:1e:46:88:54:f4:1d:d4:b4:b4:2d:1d:b2:f4:9c:ff:d3:f6:
53:89:97:5c:7a:9d:78:43:3a:2b:70:2f:f3:b9:4a:ab:ac:fb:
7d:67:d3:c0:83:d3:99:ed:e7:a2:37:27:5f:50:3f:47:bd:36:
e6:25:cf:91:f3:a9:4a:22:6e:79:80:8f:60:8b:f7:13:52:c8:
d4:bf:3a:10:cc:3a:17:9c:27:05:b0:6c:fb:08:cd:94:59:28:
e9:ef:81:7b:3b:52:fe:aa:67:3a:f8:81:19:b1:9e:f6:41:03:
38:da:f0:19:f2:ad:af:40:48:2e:d4:70:1f:03:47:66:90:56:
78:d9:6a:a1:a3:9d:a0:f4:30:cb:82:a1:49:f0:f9:0e:0d:02:
38:56:9b:6d:fa:a3:d9:59:3f:2e:9a:71:9f:76:4b:a8:9a:a9:
d8:25:9e:ba:e6:6c:f4:54:e8:41:eb:bd:5f:01:8a:d1:05:32:
d9:a5:a8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:33 2026 by rpki-client