Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier: co4EMPOqCzmZaiMVeleGhoioKYSoYdbmV7cxtXAs+eA=
Subject key identifier: 32:D0:18:2E:8E:7D:31:96:8A:E4:53:29:0D:D3:86:16:25:37:1E:68
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial: 01A0D1931D436B775B0815EDA4D99435AD7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number: 0EA5
Signing time: Thu 24 Sep 2026 04:01:14 +0000
Manifest this update: Thu 24 Sep 2026 04:01:14 +0000
Manifest next update: Fri 25 Sep 2026 04:01:14 +0000
Files and hashes: 1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: kAzAA6ZFaDFWGyHjJsvl0HKn9zUVPXUIJx8gvayPJNo=)
2: d5odnptrjJaW4wbv5e-w-InznHA.roa (hash: HdS9hjcjd6FA7NCMLYoBnDJO3cACO6YPZ4nZtli4PVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:1d:43:6b:77:5b:08:15:ed:a4:d9:94:35:ad:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
Validity
Not Before: Sep 24 04:01:14 2026 GMT
Not After : Sep 25 04:01:14 2026 GMT
Subject: CN=32d0182e8e7d31968ae453290dd3861625371e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:c4:31:a0:2f:e6:e1:1c:04:3b:fc:cd:a9:
00:b6:0d:8a:ec:4d:37:97:ab:24:4c:99:63:30:98:
ec:c8:61:d1:d0:64:42:34:09:f1:58:2d:c3:8e:6b:
73:b9:48:6d:93:91:5a:72:dc:1b:3b:5c:77:f2:a5:
3d:b4:ff:79:bc:4d:33:9a:a4:7f:79:b7:8d:8e:41:
78:08:06:fa:e4:73:6e:eb:f5:d9:31:08:c1:95:78:
52:03:a9:21:84:26:04:e7:49:d9:26:ca:91:28:88:
eb:a4:6f:95:94:e1:73:c9:f4:8b:7e:4a:72:34:4a:
26:38:0b:bc:56:3b:27:18:c6:8d:9d:ac:3e:3d:b6:
6e:ad:56:c2:41:99:3c:9a:3c:ef:04:36:0e:58:27:
0a:c2:20:eb:44:e8:d4:77:61:90:04:4d:25:a0:56:
b2:c9:d3:18:4c:ad:8a:d7:ae:e3:19:cd:08:7d:bf:
bc:de:16:ba:e0:fb:cd:34:aa:a0:81:13:96:75:d1:
6d:7e:fb:25:a5:55:69:20:b8:0e:76:a5:44:5d:3a:
79:59:63:97:6a:79:5e:05:a5:90:50:66:c4:26:f3:
b4:5a:e8:e6:b3:b8:a2:55:4a:85:90:fc:0e:0d:a7:
ba:c7:3d:1e:5c:26:71:77:76:13:e2:96:47:a3:85:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D0:18:2E:8E:7D:31:96:8A:E4:53:29:0D:D3:86:16:25:37:1E:68
X509v3 Authority Key Identifier:
keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7c:65:1b:39:49:2e:14:a7:52:a7:28:72:22:d9:06:81:96:
dc:e0:29:61:a5:73:fd:bc:51:c7:79:4c:7b:5d:f8:2a:99:13:
eb:0d:4d:37:b2:ee:44:84:07:68:f9:08:4d:f4:76:1c:a3:2d:
0e:b6:c6:2a:b3:77:e4:df:b4:ae:94:4b:50:7f:ba:d5:76:08:
46:76:b6:c6:f3:56:62:d6:6f:64:05:3f:43:5f:93:b0:18:37:
a1:51:78:ab:73:a3:c7:35:1c:22:c1:83:71:6d:66:9a:6c:14:
10:c3:7b:c9:be:e1:b1:35:ba:6f:ae:36:64:90:fb:8e:ed:ca:
9b:52:b9:54:ca:9a:8a:e9:3f:78:6d:35:38:62:a5:ff:0e:26:
b3:a9:bc:4f:72:fa:bc:31:33:3d:bf:b0:03:a4:35:cb:c5:76:
bb:d2:c3:8c:33:9a:9d:be:31:82:c4:4e:a2:05:3a:61:b2:44:
55:dd:8f:67:33:44:59:17:1b:b9:e4:fa:df:44:6c:a0:98:2a:
f2:19:b5:b5:20:51:54:ab:75:1f:5f:4b:51:90:2a:e8:ed:98:
2c:ed:99:82:29:af:e1:ca:5e:75:bf:4c:19:6a:79:53:86:3f:
76:13:ae:a8:e0:6b:b4:c6:42:a8:a1:73:24:5f:76:0c:1c:6a:
c5:b2:f1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:34:43 2026 by rpki-client