Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/9gLX8kGK50__FdL0nEdlvoSDBc8.mft
File: 9gLX8kGK50__FdL0nEdlvoSDBc8.mft (raw, json)
Hash identifier: lT0W2tWJLujH/p9n8/mVQwkLDH4PrHkMaBo5BsUVvSU=
Subject key identifier: E2:07:85:31:72:68:36:FE:71:0E:A9:42:89:7E:4C:B4:30:8E:69:16
Authority key identifier: F6:02:D7:F2:41:8A:E7:4F:FF:15:D2:F4:9C:47:65:BE:84:83:05:CF
Certificate issuer: /CN=f602d7f2418ae74fff15d2f49c4765be848305cf
Certificate serial: 01A0D15BA2308359ED06BDD91C8E5C3FFBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gLX8kGK50__FdL0nEdlvoSDBc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/9gLX8kGK50__FdL0nEdlvoSDBc8.mft
Manifest number: 41
Signing time: Thu 24 Sep 2026 03:00:38 +0000
Manifest this update: Thu 24 Sep 2026 03:00:38 +0000
Manifest next update: Fri 25 Sep 2026 03:00:38 +0000
Files and hashes: 1: 9gLX8kGK50__FdL0nEdlvoSDBc8.crl (hash: edDjBSxe/8iBcd+X0DHIOWazcYyosHITup2eEohxF9Y=)
2: Aj4yGccKYxmPnz1OvemeX_dzpL8.roa (hash: zSjpA7YXoTF8npOilyW1ra1bi1isDJneYVXWLE3M1nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/9gLX8kGK50__FdL0nEdlvoSDBc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/9gLX8kGK50__FdL0nEdlvoSDBc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gLX8kGK50__FdL0nEdlvoSDBc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:a2:30:83:59:ed:06:bd:d9:1c:8e:5c:3f:fb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f602d7f2418ae74fff15d2f49c4765be848305cf
Validity
Not Before: Sep 24 03:00:38 2026 GMT
Not After : Sep 25 03:00:38 2026 GMT
Subject: CN=e2078531726836fe710ea942897e4cb4308e6916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:90:7e:d7:a7:f7:50:fb:c3:09:ac:70:58:
6c:eb:a9:79:f7:6d:61:48:24:f0:d5:df:e0:d6:9d:
e7:1b:3e:25:11:8f:0d:1e:bb:36:80:36:a5:6c:8c:
10:0e:aa:fe:e8:59:03:20:49:96:a3:ee:0d:ee:f6:
ff:d5:7f:95:47:4c:04:70:e9:26:81:43:5e:cc:2f:
46:a0:3a:3a:83:bd:2d:e0:51:4a:b0:0f:93:b7:f6:
89:87:6c:76:bc:be:5c:69:2f:f2:5d:73:5a:55:68:
26:42:3f:2d:a4:44:f6:ab:3d:02:dc:78:77:e4:0c:
fe:eb:8c:87:7d:ee:78:8c:4f:83:f6:68:f7:e4:15:
94:06:40:2f:6b:e8:10:34:31:d9:3a:ef:36:8c:37:
14:e2:11:c7:a1:7a:72:56:01:05:56:db:64:dc:a0:
ae:73:29:c4:2f:0d:62:d6:d7:52:74:b6:bc:19:3c:
22:c6:66:59:d8:0c:37:18:8b:88:ad:97:44:43:b5:
74:e1:15:48:3e:8d:3f:31:a7:d1:98:75:15:89:30:
bc:a2:47:53:9f:97:d8:bd:ab:c1:c4:d9:56:8a:07:
01:29:ab:1a:5b:45:e1:0b:2b:f1:39:9e:41:c9:2d:
c2:29:9d:bd:c7:02:90:4e:6c:34:5d:88:d8:ab:a2:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:07:85:31:72:68:36:FE:71:0E:A9:42:89:7E:4C:B4:30:8E:69:16
X509v3 Authority Key Identifier:
keyid:F6:02:D7:F2:41:8A:E7:4F:FF:15:D2:F4:9C:47:65:BE:84:83:05:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gLX8kGK50__FdL0nEdlvoSDBc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/9gLX8kGK50__FdL0nEdlvoSDBc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/9gLX8kGK50__FdL0nEdlvoSDBc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5e:a8:4f:7c:a1:e8:6c:8a:9f:f0:64:31:f8:32:58:05:0b:
24:38:24:c8:75:51:9f:be:9e:38:78:10:4c:11:5f:a6:45:e6:
95:e5:e1:b3:6d:0a:a2:71:49:d0:92:d1:d3:89:3b:6c:79:29:
47:56:7b:0d:90:2e:5d:07:34:39:ee:e8:e7:ed:61:c9:fb:b7:
ab:c3:1a:71:38:69:00:b4:82:f5:c9:db:20:06:38:57:96:99:
e0:6d:bd:20:8b:d2:bf:6b:41:67:df:fe:8c:30:4e:bc:44:97:
1d:18:65:8f:e9:d7:49:6d:a4:eb:2e:7c:7d:4c:95:98:9f:9a:
ea:a4:57:a4:6e:03:a5:d8:92:18:f2:87:3d:8d:8e:a0:78:be:
8e:06:70:5e:cc:f9:ac:62:13:33:13:15:ef:5a:4b:3c:ff:4e:
ff:d3:b0:32:90:00:46:7a:f1:c9:ee:b4:ef:cc:51:20:8e:22:
0e:03:05:dd:08:53:ae:43:11:7b:85:0b:66:e6:ce:d5:73:2c:
32:e1:08:12:1f:f7:49:03:32:21:34:bc:47:22:31:74:a9:e5:
90:ca:a1:6a:52:ea:08:5d:4f:fc:20:99:7d:d2:3c:fc:3d:b9:
af:03:50:a3:48:ba:55:4a:b2:41:74:89:f4:a0:b9:5f:23:01:
c2:d5:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:25:09 2026 by rpki-client