Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
File: 9RDHudzJJZg-WbWGzVmrVUviWYI.mft (raw, json)
Hash identifier: uyI98Z2vh91SehXM3LZNK4XebzyqUpW+t3b6AaSMMPQ=
Subject key identifier: A0:C4:57:79:B8:91:1E:02:13:D8:8A:F4:97:2D:9D:7C:17:A3:B7:A0
Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
Certificate issuer: /CN=f510c7b9dcc925983e59b586cd59ab554be25982
Certificate serial: 01A1250C6C3247BAB168EA9791CA0406CD8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
Manifest number: 0330
Signing time: Sat 10 Oct 2026 09:02:13 +0000
Manifest this update: Sat 10 Oct 2026 09:02:13 +0000
Manifest next update: Sun 11 Oct 2026 09:02:13 +0000
Files and hashes: 1: 9RDHudzJJZg-WbWGzVmrVUviWYI.crl (hash: Qi7zYE5mYCO7SU/rhFuR5cAsSlFee25o5ErHxvf+KZ0=)
2: wTA4ZoIz75kHn1WMirNEgMY65FE.roa (hash: ashXJm/A/tacrnrBady83etVIast6DpVJH2Dt/iNOM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0c:6c:32:47:ba:b1:68:ea:97:91:ca:04:06:cd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982
Validity
Not Before: Oct 10 09:02:13 2026 GMT
Not After : Oct 11 09:02:13 2026 GMT
Subject: CN=a0c45779b8911e0213d88af4972d9d7c17a3b7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:e9:4e:f9:60:2e:e2:53:eb:4e:1a:d5:26:
1c:35:17:13:74:c9:cd:44:9a:21:51:27:05:55:be:
4f:3d:b2:dd:77:4d:83:25:8c:31:ac:a0:8f:1b:6f:
ae:96:33:bc:4a:3e:24:ec:d1:67:de:4a:55:a2:82:
1f:48:0e:04:22:6c:47:5d:7f:e6:83:ea:cc:f1:d7:
9a:ce:69:10:c7:f5:51:f9:4b:64:42:59:88:90:6f:
5d:4d:05:08:f9:51:88:c3:7f:06:05:6b:14:39:36:
7a:3e:2a:52:a3:55:d8:4d:43:62:32:ea:f7:96:10:
c9:4a:ed:5c:7c:cf:da:33:f8:f4:a6:eb:87:3f:a1:
65:40:ac:84:32:51:85:35:38:af:eb:e7:a9:07:08:
fb:8d:7f:4d:1b:63:f9:3b:76:4c:90:aa:98:63:67:
39:d5:6e:c2:d3:ff:10:36:15:95:4a:7b:70:bd:f4:
43:24:5e:21:44:5d:2b:f7:41:d4:08:4d:33:a6:c7:
11:cb:70:73:3d:24:c0:fd:bf:be:e7:f3:20:dd:56:
ac:e1:43:6f:ee:3a:c0:af:b4:2b:fd:16:12:62:04:
bf:05:b3:d5:26:f5:4a:d0:45:fd:f3:e4:34:c0:da:
c8:0e:97:30:ea:32:05:a3:5e:81:df:b3:7a:a7:d8:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C4:57:79:B8:91:1E:02:13:D8:8A:F4:97:2D:9D:7C:17:A3:B7:A0
X509v3 Authority Key Identifier:
keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:56:1f:27:97:67:e2:23:18:ab:90:d0:89:31:ab:77:4a:d2:
71:02:1d:24:f6:c9:37:95:ce:58:ad:5d:73:f1:43:fa:9b:28:
d1:62:25:4e:f2:ce:43:98:95:64:cb:6e:dc:93:9e:28:b1:65:
02:d4:a1:96:0a:81:a6:17:38:03:eb:11:c5:3e:27:fb:ed:88:
4d:71:89:47:a2:12:a0:d1:37:8f:72:fb:c4:0b:d9:8c:fd:5b:
04:49:74:da:e4:eb:08:c0:5b:d3:b9:70:81:2b:fa:ff:91:2d:
8e:27:e4:0a:63:d6:76:2b:e4:a4:c8:34:13:de:d2:4b:46:ac:
9d:08:20:66:e9:8e:99:25:b9:2b:a4:3c:f8:29:81:79:02:89:
9b:32:c2:27:7b:f3:04:e0:ec:0d:09:c6:da:c4:8e:3e:f8:3b:
06:4f:cb:ce:aa:a7:07:b0:d7:af:9f:fb:18:df:f6:3d:b5:c2:
88:3e:c5:c1:8c:4a:17:7e:95:19:c6:3b:7e:6e:2e:a9:20:0a:
03:fa:b2:dc:d5:a0:90:d7:44:0c:da:e2:70:dc:c3:32:da:c0:
27:85:a3:5b:72:1f:39:92:3f:7b:54:a7:b5:e3:cf:d2:7c:b5:
07:c4:89:14:65:cb:68:7e:58:9e:7d:2e:a0:b0:93:d0:c5:ad:
a0:46:d9:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElDGwyR7qxaOqXkcoEBs2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTBjN2I5ZGNjOTI1OTgzZTU5YjU4NmNkNTlhYjU1NGJl
MjU5ODIwHhcNMjYxMDEwMDkwMjEzWhcNMjYxMDExMDkwMjEzWjAzMTEwLwYDVQQD
EyhhMGM0NTc3OWI4OTExZTAyMTNkODhhZjQ5NzJkOWQ3YzE3YTNiN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkafpTvlgLuJT604a1SYcNRcTdMnN
RJohUScFVb5PPbLdd02DJYwxrKCPG2+uljO8Sj4k7NFn3kpVooIfSA4EImxHXX/m
g+rM8deazmkQx/VR+UtkQlmIkG9dTQUI+VGIw38GBWsUOTZ6PipSo1XYTUNiMur3
lhDJSu1cfM/aM/j0puuHP6FlQKyEMlGFNTiv6+epBwj7jX9NG2P5O3ZMkKqYY2c5
1W7C0/8QNhWVSntwvfRDJF4hRF0r90HUCE0zpscRy3BzPSTA/b++5/Mg3Vas4UNv
7jrAr7Qr/RYSYgS/BbPVJvVK0EX98+Q0wNrIDpcw6jIFo16B37N6p9iqBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDEV3m4kR4CE9iK9JctnXwXo7egMB8GA1UdIwQY
MBaAFPUQx7ncySWYPlm1hs1Zq1VL4lmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYt
YTFiMmI2YTcwMjcyLzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYtYTFiMmI2YTcwMjcy
LzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1YfJ5dn
4iMYq5DQiTGrd0rScQIdJPbJN5XOWK1dc/FD+pso0WIlTvLOQ5iVZMtu3JOeKLFl
AtShlgqBphc4A+sRxT4n++2ITXGJR6ISoNE3j3L7xAvZjP1bBEl02uTrCMBb07lw
gSv6/5EtjifkCmPWdivkpMg0E97SS0asnQggZumOmSW5K6Q8+CmBeQKJmzLCJ3vz
BODsDQnG2sSOPvg7Bk/LzqqnB7DXr5/7GN/2PbXCiD7FwYxKF36VGcY7fm4uqSAK
A/qy3NWgkNdEDNricNzDMtrAJ4WjW3IfOZI/e1SntePP0ny1B8SJFGXLaH5Ynn0u
oLCT0MWtoEbZag==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:21:05 2026 by rpki-client