Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: YU+o1KMmqrvK6kbr4W0K1bblFlmj96K6yiUa7a+liKs=
Subject key identifier: 6C:92:86:D7:38:D2:83:48:4F:61:76:3E:2F:6A:FF:0C:EF:C4:5C:B3
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 01A0D0B6B61D4B732D27067CD9A57FD75C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 09ED
Signing time: Thu 24 Sep 2026 00:00:30 +0000
Manifest this update: Thu 24 Sep 2026 00:00:30 +0000
Manifest next update: Fri 25 Sep 2026 00:00:30 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: NOiMD18vbfsE9FF7WzPE+/qWEEh0ZIrlxeBAz2h92Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:b6:1d:4b:73:2d:27:06:7c:d9:a5:7f:d7:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Sep 24 00:00:30 2026 GMT
Not After : Sep 25 00:00:30 2026 GMT
Subject: CN=6c9286d738d283484f61763e2f6aff0cefc45cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:ed:95:45:31:20:72:56:6d:8d:38:b7:b3:
7c:5f:1c:fc:91:f6:82:57:44:3f:24:72:5a:f3:56:
b1:e3:ba:ae:1e:4a:4b:31:1d:e7:76:5c:47:75:ef:
b1:4e:f0:c0:95:ba:fa:51:48:aa:40:fb:79:63:ff:
ec:56:f5:68:c1:e4:33:9f:f9:bb:df:5f:17:d8:4a:
2c:f8:51:e8:b0:f4:42:37:64:7a:11:6e:6c:5f:da:
f2:19:73:dd:f4:b6:b8:9c:81:96:47:81:b4:33:13:
bf:be:bc:65:8d:ac:71:0d:4a:2f:87:00:5f:1a:f5:
50:29:40:bf:46:bc:0c:4a:5a:ae:ec:c8:7c:5f:da:
1e:17:cf:4d:86:6d:e1:09:28:fc:19:98:de:c9:e0:
6d:0f:ea:d3:4b:e9:d6:78:3b:67:df:8b:19:f2:b6:
dc:f1:c0:61:a9:1a:a3:d4:2f:ee:22:37:e0:ea:94:
b7:61:42:d4:e6:93:ca:b5:74:33:18:82:57:53:d0:
6a:65:b2:b5:c7:74:ed:bd:0e:76:36:88:c6:2e:46:
40:8a:c1:96:c4:5b:a2:3b:b9:f3:0c:92:33:4d:d6:
f4:81:ad:b9:94:72:21:b3:17:e1:ad:1a:ea:f8:e5:
0b:ff:22:ab:63:09:84:9a:78:82:d5:4b:ff:6d:6c:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:92:86:D7:38:D2:83:48:4F:61:76:3E:2F:6A:FF:0C:EF:C4:5C:B3
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7e:b7:66:a8:49:5b:db:ad:80:4e:a0:96:29:0c:68:f0:c8:
ed:c7:f2:ee:17:e7:a7:8a:04:f1:26:02:be:74:92:59:89:ce:
bc:d1:65:b3:e8:7c:79:04:20:b8:27:99:c9:61:0b:ec:3b:81:
77:db:bb:ce:d6:a1:72:29:9d:bb:9a:18:aa:c0:7d:73:99:c9:
f8:68:8b:e1:c0:90:91:8e:4a:0d:ac:3b:9a:14:fb:f5:f1:22:
cc:7b:9a:02:c5:bc:45:36:3c:98:8c:e5:1d:f9:a2:15:6a:72:
08:d3:2d:1f:b2:3c:a1:d4:fa:aa:4f:48:2f:8a:a1:6d:40:c9:
2f:fa:d0:e0:5d:0a:e8:99:28:77:22:3e:cc:47:b9:d7:5a:5d:
34:88:27:3f:66:65:6a:1d:94:9c:c4:cc:11:e7:19:aa:b9:93:
eb:c5:5b:20:60:33:e8:6d:3c:cc:47:0b:cf:8a:2b:0b:46:95:
b1:ec:46:22:8c:83:78:c5:41:98:d6:7c:05:12:55:a0:0a:e1:
18:de:27:8e:3c:90:a2:46:8b:ad:ac:8d:c0:48:77:fc:a6:55:
b2:bb:1c:6e:49:b6:56:a7:2c:5e:e7:c4:65:3f:d1:f2:34:b0:
45:56:18:e7:11:82:8b:eb:2c:85:37:62:68:db:17:27:ca:b1:
f5:36:ad:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:01:42 2026 by rpki-client