Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: pgTvbdEGI3H9aRR1gWfbKHrEPbECE1fT9ZVaO8blbhk=
Subject key identifier: E7:7B:39:1E:22:C2:3B:C3:31:D3:71:C2:78:5D:52:6E:09:0B:29:B4
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 01A0CE91BD140B44E3785E1D4FF1C45FB260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 1352
Signing time: Wed 23 Sep 2026 14:00:52 +0000
Manifest this update: Wed 23 Sep 2026 14:00:52 +0000
Manifest next update: Thu 24 Sep 2026 14:00:52 +0000
Files and hashes: 1: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (hash: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8=)
2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: 2O90GEflKw2r0mRrPPdvPT1KjRGIq9jucx8wH2e1P8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:bd:14:0b:44:e3:78:5e:1d:4f:f1:c4:5f:b2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Sep 23 14:00:52 2026 GMT
Not After : Sep 24 14:00:52 2026 GMT
Subject: CN=e77b391e22c23bc331d371c2785d526e090b29b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:dc:3b:99:49:a9:e6:1b:6b:15:be:5d:96:
7e:7f:5b:1c:46:1d:9b:a3:00:88:ea:d8:be:5a:6d:
f5:04:e5:c7:dc:2d:b0:7c:5a:5b:21:29:a9:c4:e2:
4b:92:95:f7:67:02:bd:f0:b3:f4:55:aa:ca:1a:72:
8b:f8:53:95:94:7e:75:1f:92:e9:6a:72:9b:6a:65:
2a:06:2b:b8:f4:f5:3d:e7:54:1f:64:55:df:4a:64:
9f:d5:80:7b:7f:4a:ee:a8:8f:00:a5:c3:cd:9f:ac:
20:4e:d7:a2:83:d0:bd:8f:35:b3:1f:50:4d:32:50:
1a:5a:a3:bc:32:85:ce:47:60:01:29:fe:cc:f2:12:
23:59:92:07:d9:59:76:b0:71:76:3c:b7:9f:29:59:
78:c1:f0:ea:d1:51:c5:c7:44:0d:33:2e:71:ab:6e:
9f:73:6f:b0:45:5d:77:d8:19:3b:e2:e5:c0:19:9e:
f2:34:7e:e5:21:02:71:a0:ca:c0:b3:60:84:af:c9:
4b:79:47:be:df:7f:75:1e:a4:a7:dc:b3:71:53:23:
d1:27:00:6b:ed:8b:6c:1a:99:0d:dc:fc:da:54:9c:
2d:4f:8a:64:da:2a:81:3a:9e:3d:d3:7a:fe:49:79:
c2:09:e0:78:f4:45:cc:8b:f9:42:58:5f:ba:8e:c0:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7B:39:1E:22:C2:3B:C3:31:D3:71:C2:78:5D:52:6E:09:0B:29:B4
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f7:af:49:ca:e3:96:5c:8a:55:42:13:b4:4d:f5:d9:1c:b1:
0d:8e:98:b1:87:a9:9f:33:7b:73:58:28:74:29:93:f5:14:6e:
78:cc:be:d0:58:45:d8:02:bc:8a:7c:9b:34:b5:01:2a:ad:01:
82:b4:9d:5e:51:ae:85:ca:ba:4c:e0:f1:90:f3:62:28:7a:22:
b5:6f:ff:81:54:6a:7a:ce:86:2e:36:ab:60:0d:f7:dc:2b:df:
4f:10:36:73:a2:12:2e:3c:f6:42:71:ef:ab:14:06:db:29:4a:
56:6c:01:c9:26:82:5c:4a:e6:57:9f:ad:9c:57:6b:c5:ac:47:
6c:94:de:e8:1e:48:26:ae:ab:95:44:0a:7a:4a:f6:fb:c8:c5:
5c:80:54:04:a9:20:54:bf:10:19:74:87:54:f1:fd:18:24:e4:
bf:d6:e2:3c:c5:09:7c:01:38:45:c3:e2:f9:3e:0d:50:9e:25:
d7:18:03:de:b7:46:ba:78:7c:d1:99:5d:76:9d:eb:5e:3c:52:
1f:61:62:7b:5f:12:3b:72:43:e9:c2:ae:ae:f8:d3:df:96:ad:
c6:67:7d:b7:8d:7f:a0:ba:57:d0:3f:27:13:22:1e:94:4a:50:
63:78:54:f1:17:fc:25:36:d5:f5:90:25:60:e4:69:b5:2d:bc:
db:c6:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:43:58 2026 by rpki-client