
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: pMSMCUTz4E+Bx+BpNp2e42b1bAUNQmgxBiwqpd14f9Y=
Subject key identifier: 08:E8:1E:E3:16:34:8E:9D:C6:43:F8:A1:D3:18:C8:63:77:C2:36:02
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 01A0CB2251BD4F1E4308F72DA4F828F3D2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 19B8
Signing time: Tue 22 Sep 2026 22:00:18 +0000
Manifest this update: Tue 22 Sep 2026 22:00:18 +0000
Manifest next update: Wed 23 Sep 2026 22:00:18 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: 0wz7Sr7eND+2gaQzj8WhMUb/pWQ6MCizR/2VCtoaZ30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:51:bd:4f:1e:43:08:f7:2d:a4:f8:28:f3:d2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Sep 22 22:00:18 2026 GMT
Not After : Sep 23 22:00:18 2026 GMT
Subject: CN=08e81ee316348e9dc643f8a1d318c86377c23602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:07:68:af:16:40:6b:f1:cc:3f:d8:68:f9:
8d:e6:57:07:cb:55:34:05:67:df:e4:6f:f5:9f:19:
19:ec:6d:db:e7:6b:a3:76:5c:23:84:b2:a1:01:56:
da:0a:f8:09:bb:fa:54:74:85:91:72:5c:ef:01:42:
84:a0:bf:02:b3:95:2c:c8:4a:52:ef:58:51:2e:c8:
01:d7:63:2a:cb:26:c2:92:8d:4e:b4:10:6b:9c:36:
9c:fb:f3:8e:76:dd:63:42:f8:67:4f:cc:47:07:e4:
c3:44:e9:1a:e1:40:dc:76:ba:ef:3c:1f:68:69:17:
f7:d7:44:9e:93:cd:ff:52:90:b2:88:a0:4f:0b:84:
12:af:78:36:a5:f8:07:17:04:63:9c:5b:e8:77:c7:
28:bd:f8:48:f2:e2:1f:56:b0:3f:6d:96:7f:d4:cf:
68:89:3c:4a:38:7e:93:96:d4:0b:a1:f2:3c:b1:77:
f6:66:84:d5:23:2d:a4:d3:0c:2d:9b:07:c1:61:79:
bd:d1:32:d4:88:41:25:23:2d:4a:58:7c:96:cd:6c:
61:fc:eb:d6:69:f0:fc:02:d1:17:67:32:58:69:cf:
ac:de:43:18:62:98:d8:cb:8e:8f:23:29:36:3f:2c:
63:00:df:09:7d:4d:00:cd:c2:ea:dc:8d:9f:b3:c1:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E8:1E:E3:16:34:8E:9D:C6:43:F8:A1:D3:18:C8:63:77:C2:36:02
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:17:5e:32:2a:fb:da:11:86:82:a3:09:d3:27:31:0e:1b:a7:
9e:89:f0:8e:dd:b5:2f:e0:6c:75:a7:40:c3:9e:82:a1:2c:96:
11:69:36:24:9c:f0:13:be:04:33:11:52:11:90:98:ff:4f:a0:
8e:9e:1a:ae:8c:9c:35:17:bc:56:b8:1e:61:a8:aa:22:17:dd:
07:52:d6:b9:6d:2b:b9:94:0f:51:92:d8:9e:62:72:bd:09:b5:
c6:95:3c:42:43:ac:f0:ca:a8:7a:19:34:8d:db:88:df:5b:32:
96:77:27:bf:a4:9c:a3:45:69:9f:13:ae:ce:12:ce:69:14:6e:
50:37:33:f0:3d:09:79:0c:6f:50:9d:03:73:63:f4:42:25:41:
a5:d6:ba:e1:be:3a:ec:23:81:5b:2d:02:d3:f1:65:b1:b0:d1:
ee:ac:2c:85:27:e0:be:4d:8a:ca:e0:a3:41:e0:ab:af:66:f5:
d9:eb:22:d6:1d:62:5b:3c:71:5d:07:17:41:7a:75:4a:8a:d0:
4c:2c:b2:23:8f:16:2c:b4:01:5e:a2:e5:25:e5:5a:39:c4:b8:
5d:3a:8a:9c:ad:25:4e:bc:6c:ea:aa:0f:29:69:8d:45:80:b3:
6b:0a:8e:fb:7c:4e:98:51:5b:f1:b8:91:12:c8:f5:d7:8c:24:
d0:e3:2c:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLIlG9Tx5DCPctpPgo89LgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjExMmQ0YmVkYmE2ZjM1ODUyOGE4MzcxNDFiNzRiMDky
OTg1OTMwHhcNMjYwOTIyMjIwMDE4WhcNMjYwOTIzMjIwMDE4WjAzMTEwLwYDVQQD
EygwOGU4MWVlMzE2MzQ4ZTlkYzY0M2Y4YTFkMzE4Yzg2Mzc3YzIzNjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1AHaK8WQGvxzD/YaPmN5lcHy1U0
BWff5G/1nxkZ7G3b52ujdlwjhLKhAVbaCvgJu/pUdIWRclzvAUKEoL8Cs5UsyEpS
71hRLsgB12MqyybCko1OtBBrnDac+/OOdt1jQvhnT8xHB+TDROka4UDcdrrvPB9o
aRf310Sek83/UpCyiKBPC4QSr3g2pfgHFwRjnFvod8covfhI8uIfVrA/bZZ/1M9o
iTxKOH6TltQLofI8sXf2ZoTVIy2k0wwtmwfBYXm90TLUiEElIy1KWHyWzWxh/OvW
afD8AtEXZzJYac+s3kMYYpjYy46PIyk2PyxjAN8JfU0AzcLq3I2fs8H0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjoHuMWNI6dxkP4odMYyGN3wjYCMB8GA1UdIwQY
MBaAFPaxEtS+26bzWFKKg3FBt0sJKYWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAt
NGMzZWY0MWFlZDdmLzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAtNGMzZWY0MWFlZDdm
LzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBdeMir7
2hGGgqMJ0ycxDhunnonwjt21L+BsdadAw56CoSyWEWk2JJzwE74EMxFSEZCY/0+g
jp4aroycNRe8VrgeYaiqIhfdB1LWuW0ruZQPUZLYnmJyvQm1xpU8QkOs8Mqoehk0
jduI31sylncnv6Sco0VpnxOuzhLOaRRuUDcz8D0JeQxvUJ0Dc2P0QiVBpda64b46
7COBWy0C0/FlsbDR7qwshSfgvk2KyuCjQeCrr2b12esi1h1iWzxxXQcXQXp1SorQ
TCyyI48WLLQBXqLlJeVaOcS4XTqKnK0lTrxs6qoPKWmNRYCzawqO+3xOmFFb8biR
Esj114wk0OMsRw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:00:25 2026 by rpki-client