Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
File: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json)
Hash identifier: 7oJI0PvmgDjuDDItZw9vOAF82Aj4q/SjDuc0AdmtZDI=
Subject key identifier: A2:0A:EC:EF:C2:4A:37:DC:03:E9:F9:34:C9:4B:58:C2:57:62:DB:8A
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial: 01A0C3690190031C1EB87CA65623F96E6BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
Manifest number: 1A71
Signing time: Mon 21 Sep 2026 10:00:33 +0000
Manifest this update: Mon 21 Sep 2026 10:00:33 +0000
Manifest next update: Tue 22 Sep 2026 10:00:33 +0000
Files and hashes: 1: 3hmmFfAkaIr3Xc9gq50WV7B77zQ.roa (hash: TgVTzYdGFCqlHMqgg6AtuqEuLwbjRjyy8jaNrkkXEao=)
2: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: jqDGdh0u+0mYJOzXqBstQy68kaSaHYCsXwr8Hz9gdjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:01:90:03:1c:1e:b8:7c:a6:56:23:f9:6e:6b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Validity
Not Before: Sep 21 10:00:33 2026 GMT
Not After : Sep 22 10:00:33 2026 GMT
Subject: CN=a20aecefc24a37dc03e9f934c94b58c25762db8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:f6:b8:bd:b9:9e:3e:6d:c2:18:59:a1:fd:
f7:09:1f:d5:a8:6e:fb:1d:9a:65:98:cd:fb:ea:da:
1f:0c:7c:57:d7:cb:2e:65:b0:02:d4:10:6c:b8:27:
4a:a3:40:1c:30:11:ab:54:71:9d:e9:c4:85:8a:e2:
17:41:f6:cb:05:84:f8:25:26:47:c6:e1:f6:e2:86:
ca:ce:aa:a7:48:e0:8a:e3:ee:0c:c1:e0:f3:44:25:
36:be:27:c3:57:ef:0b:09:a3:09:2c:57:cb:e2:6c:
11:9b:51:98:3e:a0:e1:93:f6:35:96:b4:01:74:e5:
19:2e:1b:7a:ac:b7:96:32:cf:a4:45:a4:c2:06:8a:
2c:a5:ce:5c:ad:c4:8a:e3:5e:b0:03:ca:1a:05:0a:
36:66:39:cf:84:85:4a:45:90:ff:9a:9b:6a:0c:70:
73:0b:81:26:58:ba:fc:a2:ff:8f:d7:0f:d4:32:92:
54:28:1c:71:eb:af:73:7c:26:8e:c8:8c:9f:1d:0f:
1f:42:04:9b:1e:f4:80:87:1c:14:26:e3:b9:bf:91:
7d:86:72:3c:c0:86:ff:cb:0c:da:1f:84:c9:ee:01:
32:b3:92:db:81:b2:5e:cd:85:b0:52:44:e5:07:ab:
5e:a3:0f:75:79:29:5a:c3:31:0d:10:19:de:64:95:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:EC:EF:C2:4A:37:DC:03:E9:F9:34:C9:4B:58:C2:57:62:DB:8A
X509v3 Authority Key Identifier:
keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a1:91:6b:85:bb:e6:78:61:26:a1:45:78:d9:79:75:38:80:
b7:fb:c6:2a:98:76:89:e1:80:bd:19:94:f4:4b:fc:e7:66:4c:
cb:1f:3d:00:aa:a1:04:1c:26:0b:c4:37:db:48:c6:b8:9d:c3:
69:a5:ce:99:7b:7f:5c:01:13:01:8b:ed:e7:81:e7:b3:e3:5a:
2b:f2:db:3f:df:44:33:f4:59:3c:93:e6:0e:71:9c:8c:b4:98:
9a:13:1d:77:0d:6e:c8:07:4c:01:07:55:f4:fe:32:07:df:d8:
1b:1d:7d:1d:18:bb:19:67:81:fb:1d:4c:37:c7:62:6b:ce:7f:
9b:f2:75:94:fd:d1:82:0d:0d:98:db:7e:14:77:64:25:a9:ba:
28:86:8a:56:9c:27:ab:9c:09:bd:3f:ab:31:e3:68:91:27:94:
05:23:6e:e1:a5:3e:6d:4e:34:16:d3:e2:f2:3c:2a:c2:f6:43:
48:15:74:6a:76:a0:cf:a8:e6:4a:4e:e6:b1:88:49:3c:9e:47:
0c:e9:e9:31:2d:43:07:c4:cb:ab:b9:68:e2:54:1e:d9:db:17:
f3:d4:f0:04:6a:32:47:8e:f3:68:35:28:6d:30:0a:b9:b9:8f:
11:af:ce:6c:d0:da:8f:59:30:1d:e4:aa:5b:a5:bd:59:fe:cb:
22:57:72:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:46 2026 by rpki-client