
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier: HttuQsy7BTiBgrDGig98xQkeeXzLRwllFKta0avaUB4=
Subject key identifier: 77:BA:65:26:34:E9:84:52:25:5E:FC:B6:30:24:A8:40:B8:C5:3E:46
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer: /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial: 01A0DF1787C47E54EED0513F1B1A6EBB3796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number: 1742
Signing time: Sat 26 Sep 2026 19:00:56 +0000
Manifest this update: Sat 26 Sep 2026 19:00:56 +0000
Manifest next update: Sun 27 Sep 2026 19:00:56 +0000
Files and hashes: 1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: 4ainZH5eJjyE6z9W/nMyj+/BFDNlPz3atZxPy2n7J+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:87:c4:7e:54:ee:d0:51:3f:1b:1a:6e:bb:37:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Validity
Not Before: Sep 26 19:00:56 2026 GMT
Not After : Sep 27 19:00:56 2026 GMT
Subject: CN=77ba652634e98452255efcb63024a840b8c53e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:10:1f:3c:31:02:2d:8b:86:63:dc:2e:97:
ce:c7:87:50:cd:d1:c6:85:52:86:13:cb:2e:bd:9e:
f6:41:a4:cc:98:24:57:f9:48:22:28:44:70:de:d8:
8f:bb:3e:dd:22:84:97:cb:fe:e4:fc:78:77:11:05:
6d:6a:a2:d7:d1:76:68:37:b2:6c:6c:a6:ae:bd:a5:
2b:40:4e:8c:a3:d8:c8:0f:61:65:63:e8:22:b1:8a:
2c:68:ed:75:e3:c2:be:fb:f2:99:7c:ea:bb:7a:f0:
82:43:5c:ab:05:e1:ff:26:51:d0:f0:7f:11:6d:cd:
67:c0:2a:23:c3:58:98:a6:34:4b:90:c2:d9:41:03:
c2:69:c2:9b:34:dc:1f:eb:b1:85:0c:0b:b0:2f:d1:
92:25:e5:2f:16:5c:79:57:b5:2d:33:4f:94:18:53:
9a:38:3e:af:08:d6:07:43:37:31:ab:bd:d5:c0:14:
2f:98:83:2b:59:f6:d5:60:24:0f:94:89:ee:98:04:
6e:ff:91:02:ff:39:c2:a3:7d:9f:aa:66:35:b3:4a:
bf:74:94:bc:49:9f:b3:48:c1:e6:18:7c:aa:97:55:
ca:c8:8e:3d:e8:a7:f8:ec:42:b1:39:b6:0b:79:0a:
62:5f:77:b8:8b:c2:7d:f9:0e:c4:ba:b6:2d:e2:84:
a9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BA:65:26:34:E9:84:52:25:5E:FC:B6:30:24:A8:40:B8:C5:3E:46
X509v3 Authority Key Identifier:
keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0c:55:20:52:b3:91:2d:e2:37:63:db:e6:97:64:e8:a1:35:
91:ac:26:57:bf:fa:6b:7a:72:35:9f:89:cd:d8:ee:ed:0b:b4:
14:53:4a:25:09:fb:2d:1f:39:9b:77:ff:a8:62:e8:68:9f:77:
0d:c2:ab:15:2d:a1:e2:2e:93:9e:77:fe:d7:af:09:8d:4b:2a:
40:3b:47:cf:19:0d:2d:e8:05:42:c6:bd:92:8c:99:cc:ed:51:
ee:a2:3f:17:ac:8b:1e:d3:a3:35:6f:b7:11:a1:8f:0a:26:07:
48:64:cb:78:54:0c:ba:c3:18:73:4f:41:97:8b:48:59:26:db:
bf:3c:f3:5e:e1:67:4b:ac:9a:9f:0b:b5:93:4d:ae:9b:93:c7:
8c:61:89:21:44:80:85:a8:40:94:ad:29:e2:e3:f2:2e:20:b7:
a1:f0:b7:47:dd:d9:06:6c:a9:b4:95:a1:27:4b:90:23:5f:93:
4c:5c:0d:72:6e:54:57:ac:73:83:fa:1d:23:5c:1a:d9:cf:2d:
57:8f:b9:dd:3b:bb:ce:21:85:ec:be:eb:f1:f2:4b:a9:f4:9c:
0d:6c:b6:85:65:94:69:31:e1:f9:ca:61:21:19:3b:04:70:4e:
fe:0a:80:25:26:3d:53:e7:6a:42:90:d0:03:81:25:ab:cc:f8:
92:62:d0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:54:24 2026 by rpki-client