Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
File: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json)
Hash identifier: rJsjz9E0HIWhJttYSROYz8EKA86cdOuHSzcv8SlLems=
Subject key identifier: DB:46:53:F2:A0:43:51:3A:95:4B:9A:6C:A2:89:92:6B:F4:27:95:2E
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial: 01A1DD26A9F768FE976C412CD33449EDCC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
Manifest number: 1AF4
Signing time: Sun 15 Nov 2026 03:01:00 +0000
Manifest this update: Sun 15 Nov 2026 03:01:00 +0000
Manifest next update: Mon 16 Nov 2026 03:01:00 +0000
Files and hashes: 1: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: uVzi/+KurNlKK6JnSNCxweN6BRBAMO0f/lT22/NbKk0=)
2: PTV1hUcFPrtTj8H3jV-0PBWi2aA.roa (hash: LVcltXxTmaC1wumCr9KKXzHWOb4BW8vwqUzLL/KaVfw=)
3: TCIlW-BlRgj9qm8sFvnqA1D_U0w.roa (hash: 3xQeUcgzW7NvDJ0rSLhKBh5bLuiyyVyOLX9rka6WNDc=)
4: pt0vpyYLtzmKEkPORjUEbfLrK04.roa (hash: aNfm1fqgMjkcUsOwar3uLSqc/xreSHXCvlrwdm4pI3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:a9:f7:68:fe:97:6c:41:2c:d3:34:49:ed:cc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Validity
Not Before: Nov 15 03:01:00 2026 GMT
Not After : Nov 16 03:01:00 2026 GMT
Subject: CN=db4653f2a043513a954b9a6ca289926bf427952e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:73:ec:6e:c5:ab:74:6d:35:9f:c2:dc:d1:
ca:3e:e0:32:f0:b3:ab:86:27:2d:2a:2a:4d:9f:96:
0c:e8:f3:e7:18:0c:3b:d9:5d:30:4e:de:5e:58:79:
c6:02:96:31:57:52:c8:60:68:32:41:bb:4c:79:db:
c8:4f:35:17:c9:e2:37:71:f9:e1:09:3a:c6:5a:d2:
ab:c8:56:9a:9b:34:1c:db:ee:e7:bd:af:68:9b:1c:
a8:44:b5:ac:df:04:fb:e7:cf:07:88:5b:bb:95:71:
d2:77:3d:56:e6:f6:7b:23:dc:3c:cf:fe:6e:1e:a9:
e6:e2:fa:f1:02:d2:2e:e6:36:d0:06:32:2e:f0:85:
91:8d:83:79:0e:2b:e7:a6:4c:89:bb:97:24:58:0e:
68:8c:69:28:36:1d:49:a4:aa:f4:b8:2b:b1:2b:39:
eb:55:34:b4:c4:3f:93:20:f2:f3:11:5f:29:e7:95:
81:34:a0:9a:73:01:63:ce:b9:d7:a6:29:aa:a3:1d:
6c:f6:ac:3a:45:16:a2:38:31:84:30:e5:0d:2c:2d:
61:4b:9b:aa:58:0e:df:7d:6b:52:c8:ce:1c:25:09:
0a:dd:a2:50:7c:02:c2:38:fa:3f:fc:da:c1:bf:68:
63:10:1e:9c:19:eb:c8:a3:8c:69:3a:7e:21:73:b4:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:46:53:F2:A0:43:51:3A:95:4B:9A:6C:A2:89:92:6B:F4:27:95:2E
X509v3 Authority Key Identifier:
keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:16:01:a6:d6:a7:10:70:2c:36:dd:86:a6:88:0e:d2:d2:ed:
84:27:12:89:24:8e:ad:00:46:f3:be:5d:6e:ad:e6:cb:11:d7:
85:53:74:4a:ba:83:5d:6c:e4:a4:a1:3b:24:06:db:ab:13:c2:
e2:27:4d:6d:76:b9:b6:14:54:6c:fd:34:b4:14:71:5d:f1:a0:
cd:d9:ea:91:27:a2:24:ba:b2:42:63:a7:7f:2b:df:98:f2:38:
ac:98:5c:e4:86:9e:ca:c7:f0:30:64:73:f4:c6:56:bd:fb:fa:
0c:7d:77:b1:d7:99:a0:a0:96:a2:39:68:9f:5a:7f:2e:19:df:
8a:4d:b3:0e:3d:94:98:40:2d:01:0a:34:13:31:2d:0e:08:c8:
fb:3d:1c:b0:43:9e:c7:25:36:e5:96:73:e5:3a:5c:ac:20:37:
2b:6f:49:74:84:35:d1:96:8d:45:ef:c1:5d:66:13:67:ee:c1:
2d:b0:83:57:2f:8c:31:8c:70:76:58:dc:e8:bf:05:cd:ee:1b:
c6:31:62:3e:7a:ae:0d:53:89:1e:59:d7:3f:4e:22:63:a0:bc:
9f:69:40:75:0a:cb:e4:27:fa:29:b4:68:28:8c:41:b8:61:1a:
97:83:47:84:c0:3a:da:21:d0:5a:1b:da:b7:09:5f:3c:06:77:
96:dd:a8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:11:35 2026 by rpki-client