Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
File: 9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft (raw, json)
Hash identifier: U9hPsya2OLqmzJYxAgOrSrTzz41LjbruHQMkLaQBH4U=
Subject key identifier: 38:E5:7C:A3:6F:98:D1:6D:7A:94:13:3A:45:6B:AD:C2:D4:08:33:F8
Authority key identifier: F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
Certificate issuer: /CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Certificate serial: 01A1212F564B58ECDCDB8A67EAFB09EC8FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
Manifest number: 010F
Signing time: Fri 09 Oct 2026 15:01:52 +0000
Manifest this update: Fri 09 Oct 2026 15:01:52 +0000
Manifest next update: Sat 10 Oct 2026 15:01:52 +0000
Files and hashes: 1: 9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl (hash: vNzdXUYXP+sC+g5CXOT8mQRD+R9WGOBox4czAw+8U2M=)
2: aNi0svyCpgLR9qbr5slNhqZZui4.roa (hash: sxaVc5dUd3tQBZrO+xETdU+soa2Zm49R0p3UmVfLY2A=)
3: r95ZVjX56jJiWkYQMRKyYv04zAk.roa (hash: atQuuUOVhYvlzY/3e8Hwna49gvmMP2+CuoGawCgA1Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:56:4b:58:ec:dc:db:8a:67:ea:fb:09:ec:8f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Validity
Not Before: Oct 9 15:01:52 2026 GMT
Not After : Oct 10 15:01:52 2026 GMT
Subject: CN=38e57ca36f98d16d7a94133a456badc2d40833f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:a3:f1:2e:6a:63:c7:2a:41:fb:49:44:16:
24:2a:9e:91:0b:b3:00:d6:fa:a9:51:37:2f:e5:b5:
38:93:1b:fa:5b:ce:ac:59:73:db:4b:69:b0:98:6f:
65:d5:4a:e4:67:33:b7:cc:74:b4:45:e4:6c:68:37:
c7:54:f7:c7:7a:2e:a3:c6:b4:42:3b:3d:dc:a5:98:
57:f1:fc:7e:28:36:b7:6e:59:24:23:14:41:c9:82:
87:e3:ba:7a:26:85:44:d2:0d:4d:7e:20:e2:b8:bc:
48:36:13:fc:3e:e4:85:89:9a:cc:8b:38:48:98:51:
39:a4:2c:8b:54:32:3e:4c:50:d3:9c:27:8d:b3:d5:
64:e2:b2:2b:cf:ab:f3:33:b6:c6:b5:7b:9e:42:a9:
c7:dd:30:19:ac:2e:51:16:6b:f2:77:28:90:b7:f4:
42:67:3e:3a:35:29:a7:1f:2e:70:47:da:c3:52:67:
4c:18:74:3d:84:6a:38:92:3d:c8:a5:fe:4e:08:8d:
ea:43:49:6d:e5:ba:1b:a4:43:23:5d:e0:cd:96:ba:
0d:1f:e4:13:20:22:88:f7:ca:e8:a7:87:96:6c:32:
f6:f4:7b:df:24:67:1b:25:4a:ff:32:ba:28:76:34:
73:04:0a:9b:1b:74:3a:62:77:4d:7d:3d:4d:90:16:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E5:7C:A3:6F:98:D1:6D:7A:94:13:3A:45:6B:AD:C2:D4:08:33:F8
X509v3 Authority Key Identifier:
keyid:F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:00:a9:a2:6f:bb:71:71:5e:ed:58:52:18:05:60:22:c8:9c:
aa:76:97:a4:f4:39:68:79:65:ca:6d:ef:87:44:68:8a:db:95:
69:0b:0e:09:0e:04:cc:51:d8:1a:22:11:2d:df:ed:a1:24:30:
5e:e0:7a:91:dc:06:14:87:d4:25:98:35:82:49:4f:80:c4:8e:
b4:d1:2c:ee:6d:4b:8d:15:77:31:47:37:59:85:8b:5c:f2:87:
40:12:e8:00:96:f7:ac:2c:aa:b8:da:8d:95:65:95:70:6f:c9:
f5:4b:e3:2e:d9:ad:9d:4a:33:85:45:74:96:00:4d:58:2d:f6:
60:cd:aa:c2:6d:7c:8d:5b:45:66:24:5f:fc:d6:7d:56:ed:de:
c9:f1:f7:03:98:06:8f:05:b6:b4:fa:15:a5:be:4c:34:75:ea:
f0:f4:06:c9:c5:3d:49:ff:0c:08:12:3b:93:4c:f3:66:7d:bf:
0c:52:9c:e3:d8:54:18:3c:ba:8f:14:26:6c:bb:62:5e:0f:5c:
0d:89:dd:78:a4:7a:33:75:1d:dc:c4:89:5f:8a:13:25:8e:8f:
ce:8e:4a:c6:5a:2e:41:31:75:83:8d:bf:90:d0:bd:b9:20:57:
c4:26:90:0a:f2:0c:f6:ea:f3:90:d2:93:a1:7a:45:75:4b:c7:
b1:78:4f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:37:16 2026 by rpki-client