Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: I6AJhPe/yt5cfT99S1cCAv5DzYvtLJZ2SRbxL9GpfcI=
Subject key identifier: AC:85:A5:CF:A8:F0:E7:28:92:D4:4B:9A:A9:EE:57:9A:BB:F8:3A:88
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 01A0D8DF5C21B990BC1C5D95A2A1C90A8C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 14:01:51 +0000
Manifest this update: Fri 25 Sep 2026 14:01:51 +0000
Manifest next update: Sat 26 Sep 2026 14:01:51 +0000
Files and hashes: 1: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: YpKMkX8pbmnqfx0AeSXeQ6lOyGV+nDoZV1lj3qEEXyA=)
2: ZEzLOpu5XtR6NBna_6IDb8EqXXs.roa (hash: 3osUcSjQKH0ELMcPBLnQ81viVvl9FJ67k0/UaKaDqp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:5c:21:b9:90:bc:1c:5d:95:a2:a1:c9:0a:8c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Sep 25 14:01:51 2026 GMT
Not After : Sep 26 14:01:51 2026 GMT
Subject: CN=ac85a5cfa8f0e72892d44b9aa9ee579abbf83a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:99:fc:f5:89:f8:8f:4f:7c:a5:ab:df:73:
d4:7e:01:d9:8c:2e:bd:cb:ee:57:0d:28:af:16:0b:
f2:ba:98:77:7a:30:4a:9e:82:7a:49:d7:c1:48:d2:
9f:38:9c:a1:99:b9:dc:2f:f9:83:b4:c1:5f:6f:0e:
95:8b:6f:de:16:2a:ec:35:57:50:ef:e9:37:de:a0:
a0:68:0d:6e:40:92:51:67:ec:d1:f8:8f:34:2d:4f:
8a:0a:af:b7:70:32:63:1b:75:88:18:a4:5b:94:b2:
e5:c0:c9:89:19:c2:cc:e8:4e:f1:c0:fe:e1:b9:51:
5f:35:49:19:de:7e:e8:70:48:94:77:d2:f2:cb:51:
e3:19:21:c9:e1:ef:04:fa:33:d4:53:d7:65:c5:c3:
00:86:f7:fe:70:55:7f:9e:6a:42:0c:d9:b5:74:df:
cd:fe:91:a8:34:73:a7:86:00:f3:da:32:ba:0f:32:
0c:3c:b1:8b:c3:ae:ad:dd:50:69:48:38:43:5e:82:
fa:81:8a:0c:e8:04:1a:dd:5c:dc:e7:b8:3e:a4:17:
32:8b:1d:13:61:d3:e8:7b:e2:ba:2c:89:82:8d:a0:
97:0a:5e:81:7b:3e:7b:d5:a8:8a:09:4e:3b:e9:99:
ac:a4:51:2d:0d:d6:0c:f0:49:d6:b0:33:15:e4:ce:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:85:A5:CF:A8:F0:E7:28:92:D4:4B:9A:A9:EE:57:9A:BB:F8:3A:88
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:26:c2:be:42:d7:36:8e:2c:c5:a4:8d:5f:da:a5:b0:16:9b:
23:be:31:43:ad:79:de:b9:e8:7a:75:4a:96:53:95:f9:94:74:
07:6e:11:69:a7:c3:83:a0:f8:c0:b6:02:84:22:7e:9d:dc:27:
15:f8:37:b9:ec:30:d1:bc:87:33:8e:f7:c5:a4:bf:92:77:2f:
cf:a9:89:5f:56:87:4d:1b:0a:ea:ea:aa:fb:1d:0e:08:48:a6:
4f:0c:16:ab:6e:75:3f:5f:18:47:f9:60:da:73:9d:57:44:7f:
45:f0:e6:b9:0d:c5:f2:6c:9b:26:f8:24:99:53:b7:5e:47:82:
4d:cc:ba:9f:94:9b:bd:c6:84:94:d1:74:cd:55:60:d5:71:f7:
6c:ab:29:b7:0e:be:24:ec:be:b0:3d:25:33:4d:46:9d:20:d5:
bb:9a:6b:a1:f7:35:a1:75:45:37:30:6b:a0:28:df:b2:fb:fe:
0c:b9:84:bf:f8:df:40:5b:a0:e2:ac:21:32:fd:e8:0b:9a:80:
19:61:75:d4:37:3d:81:f4:81:50:53:fb:1a:a4:a2:d2:8c:8d:
f2:29:43:fc:38:5e:5a:0f:96:b7:6d:71:d5:b6:d7:f8:0a:40:
51:00:fc:f6:2e:05:03:bc:d4:72:61:cd:25:8a:e0:cd:b9:4b:
fa:09:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:26:06 2026 by rpki-client