Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
File: 9bMQ6dROhHDWzYAJWQZssA8pHvo.mft (raw, json)
Hash identifier: suQ835qirGlUFfBxBFLosk/ruKZrXdqcPvo3Xd/Fo00=
Subject key identifier: 2C:E5:60:B6:63:0D:10:38:B1:5D:33:57:D8:4B:FF:D9:36:1B:3F:DC
Authority key identifier: F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
Certificate issuer: /CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Certificate serial: 01A0CDB606FB5DD6F1E1BD3D43F5E4D93941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
Manifest number: 14CE
Signing time: Wed 23 Sep 2026 10:00:53 +0000
Manifest this update: Wed 23 Sep 2026 10:00:53 +0000
Manifest next update: Thu 24 Sep 2026 10:00:53 +0000
Files and hashes: 1: 9bMQ6dROhHDWzYAJWQZssA8pHvo.crl (hash: RFRGdJ47fT/8d4vdU0nMknl7Lx8BP+CZ5ok5zsGiPvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:06:fb:5d:d6:f1:e1:bd:3d:43:f5:e4:d9:39:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Validity
Not Before: Sep 23 10:00:53 2026 GMT
Not After : Sep 24 10:00:53 2026 GMT
Subject: CN=2ce560b6630d1038b15d3357d84bffd9361b3fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:ca:7e:d4:34:f8:a9:33:ec:d7:3d:dd:9e:
7e:08:8f:bb:38:34:54:34:d7:7b:8a:e1:63:14:3a:
b3:82:ab:dc:42:ca:bf:83:6e:e6:47:ea:88:7f:09:
21:9a:eb:cb:e6:5f:38:5d:6e:0a:71:c7:62:bb:94:
b5:34:a7:66:d2:96:10:f2:97:0f:27:94:c4:68:2e:
09:ed:46:f3:4a:96:c6:f5:c2:cb:b7:a2:bc:1d:a2:
74:c5:91:b6:f4:f4:49:14:34:ac:84:49:8d:f0:ec:
bb:84:14:21:ba:f9:37:37:c5:c0:cb:c1:4f:b2:35:
bb:ee:af:03:42:de:17:49:7d:e7:48:94:64:25:e6:
44:10:98:27:56:34:49:c9:a2:4b:22:cd:46:a9:f1:
21:01:70:4e:f6:68:9c:b2:5b:b0:f8:77:ec:a5:cb:
e9:df:2e:56:09:da:3e:e5:b1:a8:68:6e:c4:11:fc:
3f:12:14:51:bc:c4:d6:2a:03:d9:00:9d:b4:2a:6a:
be:47:a1:97:f9:61:94:43:56:21:92:f5:f8:de:39:
db:7f:4b:95:4e:9b:74:c9:5b:08:26:7a:cd:20:c5:
20:08:a1:94:1a:32:d8:47:8d:12:a8:f1:93:7d:9c:
62:a7:17:16:9e:14:0a:58:7e:94:19:a8:de:c4:db:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E5:60:B6:63:0D:10:38:B1:5D:33:57:D8:4B:FF:D9:36:1B:3F:DC
X509v3 Authority Key Identifier:
keyid:F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b6:19:e0:c4:dd:57:47:64:06:3c:5a:e3:a3:9e:ff:99:ee:
aa:b7:e3:6e:f8:22:a3:2e:8e:60:59:5d:83:b5:ec:1f:9b:68:
47:99:1e:15:ec:be:3d:97:a1:62:ed:3b:f8:77:1e:fb:98:d9:
32:19:f6:04:29:ab:3c:30:6b:2b:ce:64:0b:5c:63:6b:74:7e:
21:88:4a:38:b8:9f:f6:81:c3:cb:ca:ec:a8:34:04:ff:87:cb:
4a:d1:ac:4a:79:b4:3c:19:85:57:ca:77:aa:63:76:94:cc:ed:
fc:b7:59:dc:34:8c:72:ea:1c:a2:fe:a3:1e:a4:69:fb:84:a6:
d5:2f:d6:59:36:1b:2f:10:8e:ff:13:1a:93:af:56:3b:a1:07:
24:a0:7e:1b:2c:f0:c4:46:b6:ab:75:86:49:2d:a7:d6:70:8b:
fc:85:d6:91:d2:3b:41:9a:47:42:48:34:1e:e9:97:c2:e1:6b:
d9:f5:01:8e:45:3b:85:75:f8:02:5c:2f:bb:97:ab:94:17:18:
ba:f1:df:cf:c0:c0:4f:7c:be:c3:79:12:db:01:ed:ab:1a:9e:
29:fe:23:e2:ce:75:e1:bb:9d:11:0c:60:c6:d6:3e:0a:f5:65:
82:21:c6:fa:d5:d4:a9:5a:ec:20:b0:31:3b:b2:a9:b4:aa:02:
ee:2c:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:38:32 2026 by rpki-client