Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
File: 249r9UNKqjLT5fETsAxbsUAvZ_Y.mft (raw, json)
Hash identifier: oHPvFZEN5bASVkBw48oaThf4bLoq2cK7bQC7ITjn7b4=
Subject key identifier: 0F:2D:A5:6C:29:FD:A1:7D:2A:29:CE:3D:3B:68:FA:EC:B9:62:6A:58
Authority key identifier: DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
Certificate issuer: /CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Certificate serial: 01A0D2DE38E654A4B4D9AFEA856FF92757A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
Manifest number: 0B61
Signing time: Thu 24 Sep 2026 10:02:53 +0000
Manifest this update: Thu 24 Sep 2026 10:02:53 +0000
Manifest next update: Fri 25 Sep 2026 10:02:53 +0000
Files and hashes: 1: 249r9UNKqjLT5fETsAxbsUAvZ_Y.crl (hash: LEAUSIGJPXo9q5RNoXX/dggacsF8JOWNDkysbYy2fdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:38:e6:54:a4:b4:d9:af:ea:85:6f:f9:27:57:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Validity
Not Before: Sep 24 10:02:53 2026 GMT
Not After : Sep 25 10:02:53 2026 GMT
Subject: CN=0f2da56c29fda17d2a29ce3d3b68faecb9626a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9b:58:24:6c:9f:7e:75:26:dc:9a:b9:ee:ef:
38:e0:59:14:75:a9:f8:ac:94:79:b4:6c:0b:27:61:
1a:49:ad:b4:89:9f:6b:c3:d5:2c:e2:44:f2:17:33:
c8:19:d0:76:1a:5d:a5:db:c5:0a:ea:6a:20:b5:e8:
e5:f5:f1:e7:43:ce:4c:96:e4:32:02:38:93:42:ba:
07:b2:2a:92:69:9c:61:4a:34:91:3a:64:5f:40:a1:
e9:6f:1d:25:f1:b2:03:31:10:52:e3:00:30:ba:2c:
b9:2d:f2:43:f2:0c:22:07:76:e7:3d:82:9f:fb:06:
a1:fb:95:1e:19:e6:bd:17:02:e8:87:f7:43:d6:b7:
ec:63:67:44:e9:a5:18:90:7f:05:22:54:62:ed:81:
55:ae:24:df:c1:31:44:80:b4:19:c8:f9:13:f5:bc:
9c:77:5f:34:58:d5:7a:24:80:1f:2e:71:11:71:89:
d4:cf:25:58:95:3d:a9:1b:89:b2:94:eb:f3:0a:b3:
0e:5b:e6:5f:f8:a8:0b:c2:e7:fe:0a:b8:f6:fa:0f:
0f:8a:73:9d:28:06:1f:d6:28:d0:86:b3:52:e5:7d:
63:f2:fd:bf:3e:03:e8:04:d4:3d:e5:6e:21:f2:fe:
15:fc:c9:15:92:3b:6b:46:31:3f:58:ea:ca:e1:09:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2D:A5:6C:29:FD:A1:7D:2A:29:CE:3D:3B:68:FA:EC:B9:62:6A:58
X509v3 Authority Key Identifier:
keyid:DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1c:c4:4c:e7:17:e8:a2:d3:7d:0d:a5:33:b9:48:d4:7e:f5:
74:6d:d4:32:b3:36:da:83:68:a9:e4:87:80:a4:68:28:77:ca:
fb:bf:8e:eb:d8:bf:f8:71:15:03:e6:30:13:64:d5:d4:51:24:
28:ee:d7:55:8a:43:92:06:c4:7f:21:76:6d:33:e9:2a:57:f7:
4c:55:90:66:3d:9c:0b:8b:10:18:c2:ab:f0:a5:0f:ad:21:3a:
f8:1e:80:84:3d:58:e9:10:d6:30:5b:0b:2e:99:d2:f8:63:04:
9a:c4:39:90:cd:81:92:37:32:6d:52:78:ad:aa:ac:b8:ab:aa:
56:26:30:48:12:5c:ba:4c:c8:22:fc:d3:9b:e9:36:c0:54:b7:
45:97:b9:75:94:8b:de:38:d2:0e:44:00:61:ed:ae:e6:60:48:
e5:28:b3:12:64:08:fb:bb:bf:55:82:a3:43:16:16:77:42:fc:
eb:d6:35:44:18:22:8b:59:bf:86:33:12:2b:9c:05:4b:53:66:
7e:4c:68:2e:9c:01:10:94:8b:8c:d9:9b:49:a7:d9:b3:99:82:
ad:e2:d3:a5:cf:47:6e:ab:70:cd:1d:d6:fa:56:62:a9:e6:2b:
7a:1d:db:fd:4d:58:63:94:7e:ba:0e:5e:e3:45:43:01:ab:31:
ed:39:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:01:39 2026 by rpki-client