
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
File: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json)
Hash identifier: +jjOlF4e8zkU0s5DcIfQnJvNatlIyjwo6MVvy+f5Uek=
Subject key identifier: E4:C7:68:B7:6A:ED:D5:29:50:6F:AB:AB:10:2F:3B:70:2B:0F:10:88
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial: 01A0C143F36F6537CDF3DF2BD2877814CF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
Manifest number: 1A61
Signing time: Mon 21 Sep 2026 00:00:50 +0000
Manifest this update: Mon 21 Sep 2026 00:00:50 +0000
Manifest next update: Tue 22 Sep 2026 00:00:50 +0000
Files and hashes: 1: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: BiPHYEGOXbnS2Xp+7kz2blUzMiJFzOWuLiRxIRrxBpA=)
2: PTV1hUcFPrtTj8H3jV-0PBWi2aA.roa (hash: LVcltXxTmaC1wumCr9KKXzHWOb4BW8vwqUzLL/KaVfw=)
3: TCIlW-BlRgj9qm8sFvnqA1D_U0w.roa (hash: 3xQeUcgzW7NvDJ0rSLhKBh5bLuiyyVyOLX9rka6WNDc=)
4: pt0vpyYLtzmKEkPORjUEbfLrK04.roa (hash: aNfm1fqgMjkcUsOwar3uLSqc/xreSHXCvlrwdm4pI3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:f3:6f:65:37:cd:f3:df:2b:d2:87:78:14:cf:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Validity
Not Before: Sep 21 00:00:50 2026 GMT
Not After : Sep 22 00:00:50 2026 GMT
Subject: CN=e4c768b76aedd529506fabab102f3b702b0f1088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:93:a1:2f:a0:bc:eb:a2:bf:4e:42:0d:96:
36:f9:ea:b9:75:17:84:0c:06:48:19:28:ff:7d:dc:
ce:7a:d5:34:5d:42:7d:97:5c:9f:27:aa:b6:dd:74:
50:03:91:75:95:63:1a:df:49:c5:dd:18:04:2d:39:
a3:f2:31:0d:92:a6:66:b5:dc:b8:a5:86:dd:66:ae:
99:32:26:97:30:88:f4:af:3f:50:86:e6:9f:46:8b:
48:de:3c:e8:bd:a6:5f:7f:5f:13:0b:19:2d:2c:40:
0f:8b:89:4f:7f:69:71:95:d7:bf:c6:a2:56:e7:26:
eb:55:c9:61:4e:48:d9:3a:91:c5:b6:93:66:4f:4e:
5e:70:4f:ab:ea:95:66:98:5e:7f:51:62:01:e1:16:
27:5f:92:14:e7:60:31:63:41:19:a5:f7:31:9f:34:
73:81:82:73:ff:e2:ea:80:ca:7e:a7:54:eb:37:c0:
65:58:8c:0a:8d:60:2e:46:f0:74:93:37:12:69:d1:
03:f9:ad:de:fc:73:08:19:b2:e2:2d:87:88:59:1e:
2f:82:53:cc:83:4d:51:2e:ec:1f:96:9f:df:cf:35:
a3:c2:f7:1d:72:f1:87:d4:5c:f2:58:c3:53:fa:3c:
d8:b3:e7:a6:9d:25:ef:bb:58:11:ab:f4:d8:be:e7:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C7:68:B7:6A:ED:D5:29:50:6F:AB:AB:10:2F:3B:70:2B:0F:10:88
X509v3 Authority Key Identifier:
keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:50:d2:0f:e4:aa:3f:de:11:72:98:a6:49:55:58:5c:ab:9a:
4b:ab:fc:47:e7:33:53:e5:75:dd:2c:6e:6c:a0:ab:ab:32:87:
e6:ca:d8:e2:8f:9f:0c:6d:09:5b:37:bf:01:85:a2:ae:58:7e:
72:8d:a2:be:9a:78:f6:37:31:c0:58:85:20:0f:8a:01:f9:d2:
eb:f8:53:d9:73:f8:2c:73:13:33:d8:0d:fd:8f:04:f7:f3:53:
5b:53:b8:a1:c7:15:6e:a4:fe:1e:7d:b6:3b:2d:97:2c:a2:33:
40:07:17:48:ab:e3:a2:28:ce:7c:77:0c:b7:ad:ad:99:d2:2e:
d9:3f:06:e7:93:6a:3b:83:73:fd:17:08:06:9a:be:2e:e0:4e:
d5:35:6f:7a:5b:e6:fe:1b:de:c9:1e:90:12:f0:19:34:77:12:
a0:24:f7:ea:75:db:ae:51:30:b5:22:0d:71:8a:e6:ad:2d:59:
e6:b8:2a:be:e8:1a:b3:13:e2:3c:57:4c:74:2c:3e:50:f9:43:
c6:0a:68:f4:22:d2:6d:09:53:60:03:da:e3:27:5e:73:10:c8:
27:32:4d:84:e9:72:3d:e7:c7:b1:5c:1a:d8:60:fb:96:51:5b:
66:c7:7a:5d:63:43:2e:64:55:4a:fc:22:11:1a:ae:df:91:be:
62:2c:c5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:43:52 2026 by rpki-client