Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
File: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft (raw, json)
Hash identifier: GLIqJm5WYmS1TgyS2h0qn767KKQDWJwUKl6pK78AwAE=
Subject key identifier: 3C:47:78:AA:ED:E5:3C:87:C5:27:50:AD:D8:DB:97:8D:95:AE:B5:50
Authority key identifier: F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
Certificate issuer: /CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Certificate serial: 01A0CDB6163C85F2AF0E3A91E8F6581763E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
Manifest number: 0615
Signing time: Wed 23 Sep 2026 10:00:57 +0000
Manifest this update: Wed 23 Sep 2026 10:00:57 +0000
Manifest next update: Thu 24 Sep 2026 10:00:57 +0000
Files and hashes: 1: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl (hash: P9EwsLAVKK4GK1i39qZekyCp7R4JpwYZ2EL1Cq1oKz4=)
2: JXm4LWXIpBMGqgHbvgoYihKzBVk.roa (hash: 5kQxFCRpZBFMUqQXhqZK+G8qNHh71Y8GlKTBlJe50XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:16:3c:85:f2:af:0e:3a:91:e8:f6:58:17:63:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Validity
Not Before: Sep 23 10:00:57 2026 GMT
Not After : Sep 24 10:00:57 2026 GMT
Subject: CN=3c4778aaede53c87c52750add8db978d95aeb550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:d3:30:41:37:7d:91:e7:6d:74:2c:f6:d0:
45:6d:f1:1d:6a:c6:76:24:00:10:fb:68:13:12:a5:
99:b3:66:b2:74:ff:3b:da:90:e1:2c:15:ab:bb:27:
d0:36:b6:03:d7:b6:ac:c3:80:dd:07:52:0c:49:bc:
26:94:0e:f5:bb:e6:28:88:08:ca:16:cf:e7:bd:8a:
64:1d:07:ad:32:9a:93:79:52:50:d5:01:cb:b9:7e:
8b:ee:3f:61:ea:24:e3:2a:2e:c3:a6:2e:13:84:9e:
f2:52:e8:16:9f:c1:b7:73:28:4d:fd:62:fd:97:bc:
c0:91:8e:5c:4c:a0:9e:07:6f:11:62:71:fe:03:3c:
d7:9c:95:1d:9f:10:f9:1a:c0:72:91:ca:62:77:59:
6c:ad:7d:ee:19:cc:7c:3c:cd:99:28:1c:f5:5a:87:
e5:f8:27:17:d7:5a:e7:61:5c:75:e5:8f:f8:e9:d7:
72:ae:c0:99:e8:13:8a:44:20:36:21:31:2b:df:76:
fb:88:1c:dd:2c:72:36:07:6f:6e:b3:d5:eb:9c:6a:
77:8a:68:2e:20:24:ce:82:a6:83:7b:60:bf:69:3d:
30:62:74:d5:f8:92:57:a3:30:8b:1a:15:82:90:2f:
f3:81:9f:0a:44:1b:2f:df:f5:1a:53:7c:eb:47:51:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:47:78:AA:ED:E5:3C:87:C5:27:50:AD:D8:DB:97:8D:95:AE:B5:50
X509v3 Authority Key Identifier:
keyid:F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:41:7c:7b:65:35:2e:ce:c7:c1:9b:32:a4:44:4d:d8:70:df:
91:ef:02:4a:4e:f4:1d:b4:20:1f:3b:81:05:b8:24:62:79:dc:
35:5f:87:56:4d:b5:f9:2e:35:ac:7d:6b:6e:cc:d2:36:fd:db:
8c:8d:d5:b1:72:ed:e7:80:ef:15:65:9d:b0:a3:44:3f:65:bb:
d2:75:43:16:58:f5:7b:4d:2b:e3:52:dd:d4:58:cc:76:25:02:
43:c0:0d:7d:82:ef:d8:27:d8:a3:6a:6e:4d:a5:3d:12:b3:32:
17:41:97:b5:76:b3:b3:28:10:08:00:f0:10:e9:35:0b:16:34:
89:2f:dc:e5:d4:70:9b:0d:45:ac:18:87:03:f2:fe:f3:15:05:
5b:44:f6:ad:70:88:2b:7e:c6:6f:8d:f0:5f:b1:cc:d3:85:24:
ef:d6:98:e2:23:f2:bf:70:a9:66:b6:29:f5:dd:66:95:d9:1f:
12:13:f2:5c:54:aa:61:62:73:50:b2:6c:b0:95:5a:be:00:a9:
a5:d4:03:41:e3:66:b0:ef:d1:9e:f8:17:94:a6:58:30:07:a3:
d4:4f:35:93:a9:e5:b3:0e:2f:a5:76:0a:61:7f:0c:28:18:87:
63:75:49:3a:9c:b9:ef:a9:d7:3d:a5:df:ff:e9:57:48:fc:c6:
ff:bb:11:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:48:25 2026 by rpki-client