
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
File: 9vqbUoZNztDV7ON-dDciSyVCJIs.mft (raw, json)
Hash identifier: atS7kVxik0uHgb7eAvHkt6u40ek6GfUI7zx+yP6PgeI=
Subject key identifier: 0A:7D:B2:ED:41:B0:52:05:AB:EB:72:69:A2:AB:D4:B6:F6:9B:03:11
Authority key identifier: F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
Certificate issuer: /CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Certificate serial: 01A0CBFDE231FF16DEE15D9AA28EF20BB35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
Manifest number: 03C5
Signing time: Wed 23 Sep 2026 02:00:08 +0000
Manifest this update: Wed 23 Sep 2026 02:00:08 +0000
Manifest next update: Thu 24 Sep 2026 02:00:08 +0000
Files and hashes: 1: 9vqbUoZNztDV7ON-dDciSyVCJIs.crl (hash: kcRod1Z0pXJUYe2/1087lrp6dt92wQgqJVIqKB8DDHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fd:e2:31:ff:16:de:e1:5d:9a:a2:8e:f2:0b:b3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Validity
Not Before: Sep 23 02:00:08 2026 GMT
Not After : Sep 24 02:00:08 2026 GMT
Subject: CN=0a7db2ed41b05205abeb7269a2abd4b6f69b0311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e5:c5:be:80:ec:10:6c:a7:a2:99:c3:92:02:
7e:7c:f8:7b:9b:43:07:46:6a:df:e4:08:34:81:a6:
67:a2:6f:5f:9e:b9:eb:de:ad:f7:b4:d6:4f:66:a4:
7f:e9:8c:43:44:34:86:47:5b:5f:6c:f3:ce:1f:50:
32:3d:e9:b0:91:b4:97:03:0c:9b:55:74:bd:72:65:
ff:58:2e:e4:8a:f8:47:1e:cf:65:8a:53:fa:87:ae:
41:cd:ea:85:6b:02:19:0a:86:d5:31:57:92:b8:63:
4e:76:87:ed:bb:6a:9f:c9:7e:95:0d:62:1b:55:8f:
22:46:72:ff:52:14:24:3c:e2:01:cb:e8:53:7e:d2:
52:b2:fe:be:8d:ac:de:d9:3b:8a:d1:f1:8d:5d:e5:
d8:e5:98:e1:73:fb:a1:6b:79:8e:3b:d3:64:02:21:
1b:66:d2:00:c0:79:51:a9:77:43:81:80:69:d8:8a:
49:bc:1c:88:69:cc:99:ee:8e:2e:57:96:cb:fb:bd:
c2:d9:e6:79:46:87:bf:84:7f:52:9e:3b:03:c0:3e:
ea:5a:8d:90:a3:c6:67:aa:da:ec:e3:ab:a1:47:8f:
a1:d0:23:50:a9:c5:4a:00:71:db:54:5b:0f:b0:cc:
84:31:ef:34:fc:2f:a9:ea:8d:3a:4d:37:bb:9d:d1:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7D:B2:ED:41:B0:52:05:AB:EB:72:69:A2:AB:D4:B6:F6:9B:03:11
X509v3 Authority Key Identifier:
keyid:F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:66:d7:5d:74:15:24:e6:7b:03:a5:52:a9:50:9e:68:56:5b:
85:01:e1:89:82:bc:07:b3:ff:2e:a8:d8:87:f3:92:63:30:d6:
52:07:16:af:0c:ed:d4:d3:21:4a:e5:06:60:bb:9d:aa:cb:8f:
4b:82:ba:0b:4c:0b:a1:6a:e0:bd:0b:43:18:dc:71:d7:46:bc:
d1:f9:00:e4:5a:60:69:40:82:cf:73:48:84:c5:7f:5a:8f:24:
50:c0:26:f8:fe:c8:5c:df:0a:3c:d4:19:53:dc:04:73:5d:b3:
13:eb:53:0b:63:9b:df:99:a8:7e:b4:6b:2c:7e:7d:55:36:7a:
e6:c0:a5:5c:02:65:f4:c1:a5:98:f0:46:c7:91:71:44:69:14:
e4:bf:7d:80:9c:e2:8e:71:80:8d:61:31:a9:13:c0:df:2f:72:
c6:45:65:4c:ef:82:d9:72:2a:05:d8:1b:5e:bc:86:a4:4c:80:
b0:20:9b:6b:e7:85:53:f8:c8:00:f2:52:3a:f3:be:b3:e3:f6:
42:c0:9e:14:73:02:fe:4c:89:f4:a8:d3:ba:64:3d:a2:02:1e:
0a:14:34:e5:3a:81:dd:5d:ac:d6:7f:b5:50:a5:97:1e:2d:48:
a5:74:de:41:47:be:21:4c:57:a9:54:48:15:3c:e7:aa:70:28:
5d:0f:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:18:59 2026 by rpki-client