
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: QpX4duW8c9HJYwCbU0KiuN7jaeGkSIlzz6xN7DxIUZ0=
Subject key identifier: EC:41:29:FE:CD:00:B8:8C:84:11:A1:A5:CC:56:02:A7:A1:42:96:D6
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 01A0E1E221B3E88D051EFBE7C6D10916CFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 0D8B
Signing time: Sun 27 Sep 2026 08:01:28 +0000
Manifest this update: Sun 27 Sep 2026 08:01:28 +0000
Manifest next update: Mon 28 Sep 2026 08:01:28 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: OI9quxyH+RlZgBnYRvmDhgSvKYyHJBBVeNjIxyE2goM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:21:b3:e8:8d:05:1e:fb:e7:c6:d1:09:16:cf:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Sep 27 08:01:28 2026 GMT
Not After : Sep 28 08:01:28 2026 GMT
Subject: CN=ec4129fecd00b88c8411a1a5cc5602a7a14296d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:c6:21:06:1c:63:b5:46:55:89:62:67:14:
88:26:99:57:de:73:6b:36:35:66:05:af:7d:a5:84:
b1:8f:50:a3:73:6c:bb:5a:fc:3d:2d:08:60:0e:b4:
6d:b5:28:01:f0:db:32:b7:b0:de:1c:48:5f:89:e9:
9d:04:d5:78:99:30:ef:2e:12:b7:1b:e3:7b:8a:e9:
04:62:42:17:41:fa:3e:7b:3f:4b:c9:78:c4:03:ee:
4c:cc:9a:49:f5:d1:29:d4:60:5e:bf:f9:1d:e0:58:
54:e3:b4:ec:3c:c7:52:9e:29:9d:70:fb:c9:06:7e:
f1:8a:70:fd:16:f8:cd:e3:13:3d:a6:09:ac:f3:fe:
02:a4:1a:50:ce:52:3d:da:6f:6e:e2:a6:ae:b7:34:
91:df:73:9c:40:e5:1c:d1:bb:35:b9:0f:d4:3d:04:
d1:e2:6d:8e:cb:20:72:d0:72:69:a9:0d:28:2e:f9:
76:34:db:07:50:28:04:d8:2d:e5:17:78:1f:11:c8:
8c:ae:77:4d:11:8f:9f:bd:fe:82:7e:00:b2:e5:9e:
ec:43:97:82:e0:28:87:b3:71:dc:fe:30:07:d2:d4:
65:31:53:73:57:2b:fe:39:01:9f:48:a4:b5:13:d4:
8c:d1:ed:2b:89:68:02:15:6e:a5:29:d1:3e:eb:60:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:41:29:FE:CD:00:B8:8C:84:11:A1:A5:CC:56:02:A7:A1:42:96:D6
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:77:df:4f:37:46:70:8a:1d:08:26:a7:a6:0b:c5:af:48:ac:
55:0d:04:a0:07:61:e9:d4:e2:85:9e:36:f2:08:bd:fa:97:be:
e3:af:78:34:a8:6c:b8:a4:c7:95:8a:ef:b8:86:31:57:51:6a:
38:f3:6c:04:bf:e4:8f:16:64:25:3b:77:5d:ab:9d:50:8b:24:
08:a0:14:de:91:37:51:70:6f:26:0e:a0:bf:28:60:99:6b:d8:
b8:73:cc:8d:d6:26:12:d6:22:78:e5:32:24:9c:e3:99:f9:fd:
ce:e0:de:3c:7b:f9:f2:13:04:0f:64:c1:e2:c3:ba:32:84:53:
56:1c:c6:b2:26:e7:67:ec:9d:cd:f8:27:58:01:bc:08:62:37:
a9:21:e9:9a:9c:e2:1e:67:76:a5:8f:9a:a9:ce:57:9a:4e:82:
30:a4:76:e4:ad:63:03:8b:28:50:71:22:df:ea:e5:41:bf:5a:
c9:a2:2a:9f:f0:d3:50:04:e3:9d:10:fb:69:00:a3:bf:e8:16:
db:0f:dd:f0:00:76:f3:f2:02:d2:50:29:67:1c:45:a5:84:54:
e3:08:07:0c:71:ee:f5:76:0f:61:c5:54:c2:13:94:21:97:bf:
8a:79:57:11:44:0c:8d:3d:fe:72:f0:d7:01:0b:dc:c3:c5:85:
90:1e:96:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:52:53 2026 by rpki-client