Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json)
Hash identifier: h03GWbFF8hTF1OgXKTIKYx77XkS7RwhJNmhueOcIMMI=
Subject key identifier: 4E:D9:2B:E1:88:F9:2B:84:79:D2:AB:8C:60:22:0E:06:E9:32:1D:F0
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial: 01A0DC84BB1484ACB5A24F9375460AFCD79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
Manifest number: 0941
Signing time: Sat 26 Sep 2026 07:01:20 +0000
Manifest this update: Sat 26 Sep 2026 07:01:20 +0000
Manifest next update: Sun 27 Sep 2026 07:01:20 +0000
Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: wTiC+bYSBdkocQsvc/vZCqRFyaLaBAtQnUZGTdjJbNA=)
2: fBJnMHALZfcjzCrh2ePgybbFbm0.roa (hash: O2YCNOyi52ka2IOCrOYs4Cry49I7H3lrzo66p5voKNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:bb:14:84:ac:b5:a2:4f:93:75:46:0a:fc:d7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
Validity
Not Before: Sep 26 07:01:20 2026 GMT
Not After : Sep 27 07:01:20 2026 GMT
Subject: CN=4ed92be188f92b8479d2ab8c60220e06e9321df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:45:8d:81:c2:c7:71:eb:a2:5e:55:b5:c9:
0f:6a:8e:75:f9:6d:ef:1f:6a:b4:1f:22:0a:a4:0b:
62:2e:3d:5f:b6:49:a5:3b:e6:9a:f6:77:cd:c5:90:
58:73:2a:25:6f:b0:ac:03:a6:dd:63:72:05:22:84:
ba:30:94:bb:96:f6:38:3e:e8:14:a6:81:8c:63:5b:
d5:ac:37:53:72:26:75:44:9b:6c:24:01:c5:97:d9:
84:4b:4a:41:00:7d:67:78:ca:45:8d:52:fa:a8:e5:
49:a7:66:b1:d0:4d:7b:6a:11:07:84:e9:a1:b7:dc:
94:37:63:ac:aa:3d:b8:28:31:73:06:bf:13:00:c9:
3f:99:6b:d3:0e:11:6a:d5:d6:e2:f3:34:09:5e:9f:
4e:69:d8:05:8b:28:19:e6:77:d0:1f:9d:1a:2c:fa:
3a:39:7b:9a:b5:1c:8c:4d:f3:18:20:78:22:f5:a5:
75:8f:6d:f4:51:91:11:f2:04:87:4f:80:4e:8a:d9:
48:f9:25:b0:6d:ec:e0:30:35:f2:4d:d5:fd:25:35:
84:54:e8:4f:c9:85:c6:54:75:04:91:3d:7f:13:ae:
68:3d:35:98:fe:eb:a8:c5:db:f1:fb:cf:d5:e7:35:
d7:56:3a:f6:db:cc:af:7d:c0:e0:35:87:44:21:82:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D9:2B:E1:88:F9:2B:84:79:D2:AB:8C:60:22:0E:06:E9:32:1D:F0
X509v3 Authority Key Identifier:
keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c2:1d:d2:bb:02:01:8b:af:58:47:bd:47:97:8d:65:3c:71:
58:1c:d5:c8:39:a1:a7:1b:2d:4b:85:4e:93:80:f0:70:6f:c0:
52:db:61:72:f3:f3:d8:da:96:bc:7c:38:5d:21:35:cf:c8:98:
10:cf:24:9a:04:f8:3e:aa:41:81:a1:22:3d:b0:71:f6:46:49:
e0:4b:1c:5f:fc:d4:c6:f5:56:e7:57:21:c0:f0:06:2c:93:95:
a1:eb:53:ff:07:f6:e6:ee:26:76:b1:b8:28:b8:f9:6d:73:51:
0b:00:9f:e3:d5:a4:f2:89:81:be:6d:ed:86:94:dd:60:3f:cd:
7a:52:04:a0:7b:9f:31:a0:be:d9:f2:33:cd:0d:f6:bc:4e:b1:
25:91:f8:24:f5:7f:70:3f:2c:2e:2b:32:fe:9c:19:68:c6:0f:
e5:e9:ae:35:5c:61:46:6b:51:04:63:96:6d:9a:b6:c4:54:74:
22:1e:32:43:49:12:59:13:33:c4:f4:3e:65:7a:d5:16:25:a0:
8e:ba:d9:f3:88:8a:35:a6:eb:9b:b2:c4:fa:90:66:75:05:de:
b3:3a:ed:da:8b:bc:22:34:a4:eb:58:1f:b2:38:c5:fb:82:f9:
20:08:08:49:00:a7:16:b1:35:19:c2:d2:6a:7d:8f:2e:af:a0:
7e:db:33:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDchLsUhKy1ok+TdUYK/NeeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NTdiYzE5M2E1OTU5NDhhN2I3YTA5NmI3MTBiYjUyNjI4
MzBmNDEwHhcNMjYwOTI2MDcwMTIwWhcNMjYwOTI3MDcwMTIwWjAzMTEwLwYDVQQD
Eyg0ZWQ5MmJlMTg4ZjkyYjg0NzlkMmFiOGM2MDIyMGUwNmU5MzIxZGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCFFjYHCx3Hrol5VtckPao51+W3v
H2q0HyIKpAtiLj1ftkmlO+aa9nfNxZBYcyolb7CsA6bdY3IFIoS6MJS7lvY4PugU
poGMY1vVrDdTciZ1RJtsJAHFl9mES0pBAH1neMpFjVL6qOVJp2ax0E17ahEHhOmh
t9yUN2Osqj24KDFzBr8TAMk/mWvTDhFq1dbi8zQJXp9OadgFiygZ5nfQH50aLPo6
OXuatRyMTfMYIHgi9aV1j230UZER8gSHT4BOitlI+SWwbezgMDXyTdX9JTWEVOhP
yYXGVHUEkT1/E65oPTWY/uuoxdvx+8/V5zXXVjr228yvfcDgNYdEIYLrxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7ZK+GI+SuEedKrjGAiDgbpMh3wMB8GA1UdIwQY
MBaAFPRXvBk6WVlIp7eglrcQu1Jigw9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjct
NDM2YjNlZTdlZDM1LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjctNDM2YjNlZTdlZDM1
LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsId0rsC
AYuvWEe9R5eNZTxxWBzVyDmhpxstS4VOk4DwcG/AUtthcvPz2NqWvHw4XSE1z8iY
EM8kmgT4PqpBgaEiPbBx9kZJ4EscX/zUxvVW51chwPAGLJOVoetT/wf25u4mdrG4
KLj5bXNRCwCf49Wk8omBvm3thpTdYD/NelIEoHufMaC+2fIzzQ32vE6xJZH4JPV/
cD8sLisy/pwZaMYP5emuNVxhRmtRBGOWbZq2xFR0Ih4yQ0kSWRMzxPQ+ZXrVFiWg
jrrZ84iKNabrm7LE+pBmdQXeszrt2ou8IjSk61gfsjjF+4L5IAgISQCnFrE1GcLS
an2PLq+gftszNw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:41:47 2026 by rpki-client