Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.mft
File: nXkeE9wEYAP1t-JhT84opb3qOgI.mft (raw, json)
Hash identifier: mP5kf5MjqKbTv81tL2QsyJ2GssMLdDuov5Fz+GWs45E=
Subject key identifier: D3:13:F7:2A:2B:6C:F9:1F:2F:C2:97:26:24:BA:9A:13:D9:E7:7A:6D
Authority key identifier: 9D:79:1E:13:DC:04:60:03:F5:B7:E2:61:4F:CE:28:A5:BD:EA:3A:02
Certificate issuer: /CN=9d791e13dc046003f5b7e2614fce28a5bdea3a02
Certificate serial: 01A0D7281052026F31B0C06FB3561EDFFFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXkeE9wEYAP1t-JhT84opb3qOgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.mft
Manifest number: A9
Signing time: Fri 25 Sep 2026 06:02:02 +0000
Manifest this update: Fri 25 Sep 2026 06:02:02 +0000
Manifest next update: Sat 26 Sep 2026 06:02:02 +0000
Files and hashes: 1: nXkeE9wEYAP1t-JhT84opb3qOgI.crl (hash: V941Ycs//B7GHB6qulQuWKaAN+xhn2zzLn+rXHOO8e0=)
2: z28nNIIRJ-I33jkHuAcL9epzObs.roa (hash: uoiQ0ENy0WWHs/rpsks+l1eZR/y5bsE8FwsAwqAEXbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXkeE9wEYAP1t-JhT84opb3qOgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:28:10:52:02:6f:31:b0:c0:6f:b3:56:1e:df:ff:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d791e13dc046003f5b7e2614fce28a5bdea3a02
Validity
Not Before: Sep 25 06:02:02 2026 GMT
Not After : Sep 26 06:02:02 2026 GMT
Subject: CN=d313f72a2b6cf91f2fc2972624ba9a13d9e77a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:25:fc:76:e9:b3:cb:d2:1f:fb:66:7c:5a:
b1:8e:86:08:33:20:35:4c:07:f9:9a:94:f9:d5:6e:
6b:6e:90:a1:81:d8:6b:ff:6d:81:f5:5b:7a:94:24:
38:7f:f0:a2:26:d7:6c:33:2d:76:88:37:d8:e5:cb:
ba:d2:16:e4:e4:04:e7:0c:04:9d:dc:ef:ed:e2:bb:
9b:08:b5:40:30:4d:f4:95:b7:4e:a7:6b:0e:58:90:
86:64:51:80:80:af:04:c8:b6:7e:2f:4d:2f:12:04:
a3:f4:ec:35:8a:77:31:78:ad:81:30:2a:7d:88:50:
45:f3:65:09:ab:f6:9d:1f:c9:59:9d:73:73:12:18:
48:1a:85:b3:51:d1:34:ca:a7:fe:da:00:bf:92:f4:
d6:e5:1e:6b:44:06:05:61:e0:e3:1c:e0:58:9f:68:
d3:8f:f4:09:c4:f5:8c:41:4f:6d:98:41:c7:b5:b1:
f3:4c:9b:32:a6:ce:e2:44:68:6b:1b:69:ac:9a:3d:
f0:91:eb:1c:b0:26:49:46:f4:27:4b:4e:40:a4:c8:
58:64:e7:ba:38:fd:35:09:7c:03:e4:a5:75:ce:a5:
43:27:bc:78:c7:8a:85:3f:fb:f3:44:63:2f:a7:64:
c9:e0:6d:11:b9:ae:e8:b2:c8:d6:2e:38:af:76:d0:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:13:F7:2A:2B:6C:F9:1F:2F:C2:97:26:24:BA:9A:13:D9:E7:7A:6D
X509v3 Authority Key Identifier:
keyid:9D:79:1E:13:DC:04:60:03:F5:B7:E2:61:4F:CE:28:A5:BD:EA:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXkeE9wEYAP1t-JhT84opb3qOgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:54:c8:86:fe:ec:89:98:f0:5b:57:e8:b0:7c:4d:6e:81:e7:
71:55:65:ce:7a:93:16:df:cc:37:fa:65:11:dc:ba:1c:64:7a:
4d:ef:0f:bb:53:75:e9:bc:e4:09:f4:64:a3:54:be:1f:02:fd:
90:8f:00:18:0e:39:0c:64:6b:7f:14:2e:db:44:1c:76:70:9d:
df:fd:a2:67:59:bc:8d:91:6b:96:da:8a:da:0e:01:b1:ae:07:
4e:b1:21:38:95:7d:50:3f:8f:ec:ed:29:b1:bf:36:90:85:69:
a5:28:7b:6a:3d:bd:18:95:0f:14:79:33:7b:26:0e:5b:ac:e3:
61:91:53:f8:86:16:67:bd:99:92:10:5f:cb:93:43:13:b2:69:
c6:d7:01:b8:ae:8e:45:ff:fe:fe:00:9d:97:a4:f0:e3:1f:11:
fc:0e:7d:30:bf:31:09:57:3d:ca:03:61:e5:0a:86:30:40:d8:
29:8c:2f:b0:de:30:00:ac:72:c7:d8:78:8f:47:b9:02:0b:0e:
a0:e5:8d:02:a3:39:9d:0d:81:74:90:5a:27:bc:fa:29:13:94:
88:16:94:79:a8:be:46:80:d1:21:ae:25:f6:8e:8a:9c:8e:62:
4d:7d:bb:bc:43:cf:18:35:d8:9a:27:bb:35:42:cb:52:b1:5e:
2c:2e:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:03:08 2026 by rpki-client