Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
File: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json)
Hash identifier: LSrhw1F965ilwENxfTcVA4WH1lrUu5jOdC269YNN0ns=
Subject key identifier: 96:6B:AD:14:8F:C5:1B:E1:A8:28:E4:20:12:EB:0D:30:D3:FC:D6:27
Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
Certificate issuer: /CN=f539a07ef47f805cca07c10ae187c93968808c47
Certificate serial: 01A0D3154F5B804E5FA19B6F9DEF7B1481F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
Manifest number: 0843
Signing time: Thu 24 Sep 2026 11:03:04 +0000
Manifest this update: Thu 24 Sep 2026 11:03:04 +0000
Manifest next update: Fri 25 Sep 2026 11:03:04 +0000
Files and hashes: 1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: qOQYeWsIkeosWxUZ8V9MMNj+Van0LRG86Jn9BQYNBDQ=)
2: e6cQAttr2HmbOlTBbjKV_2JWo0Y.roa (hash: m4yGQd55Wkn8/VNQHSMkT2U4sSayeuVDo4mzhAL262I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:4f:5b:80:4e:5f:a1:9b:6f:9d:ef:7b:14:81:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47
Validity
Not Before: Sep 24 11:03:04 2026 GMT
Not After : Sep 25 11:03:04 2026 GMT
Subject: CN=966bad148fc51be1a828e42012eb0d30d3fcd627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:dc:d1:0f:5a:40:e1:4a:8d:cb:c2:5a:4d:
85:53:7e:6f:90:65:7d:5e:6b:e3:ff:a2:fc:23:01:
a2:a2:88:26:72:a1:4d:da:e0:89:48:26:76:ca:8d:
95:1e:6a:19:d3:e6:6a:25:b4:ce:62:03:d3:13:0c:
32:f3:3b:88:a9:5e:07:eb:1c:32:f2:1a:4b:a5:93:
5f:77:3a:c7:37:c6:9c:e6:2e:a3:ad:bc:e3:6d:4b:
78:27:40:74:bf:b7:d8:39:6f:7d:70:8d:d2:6a:8a:
d9:75:2e:be:74:0d:91:c7:1e:3c:5a:b7:ab:a0:10:
1a:4c:74:39:12:53:a5:53:30:30:95:29:8d:21:3b:
db:8b:ab:4f:cd:c4:9c:f5:32:cb:37:3e:9f:88:58:
ac:d4:30:a1:69:97:be:40:2f:85:62:11:cd:1b:b7:
a5:9a:4a:1e:17:5e:9e:e7:86:39:26:86:67:e4:71:
a0:c1:1e:84:9f:c0:0b:af:9e:ee:06:47:b0:7f:36:
8b:0b:fb:e9:67:dd:c1:25:53:30:c7:20:ed:a7:b1:
86:fa:69:76:56:b3:68:ef:7e:12:55:38:63:2c:54:
4b:93:1c:31:8b:a6:32:87:85:d9:71:6f:63:3e:aa:
f2:4e:0f:53:d5:e8:9b:b3:e7:f9:57:11:a8:5f:c0:
e8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6B:AD:14:8F:C5:1B:E1:A8:28:E4:20:12:EB:0D:30:D3:FC:D6:27
X509v3 Authority Key Identifier:
keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:62:36:78:ae:49:f6:88:67:65:97:07:bd:b7:3f:e0:7f:36:
74:d4:84:10:86:e5:89:be:e7:05:a9:61:f7:94:d4:3b:f8:02:
47:fb:fb:b6:d0:37:e4:35:c1:05:55:91:c9:3a:77:98:ab:81:
fb:89:32:95:94:2c:fe:f9:b8:a0:50:f2:86:be:e3:e7:a4:37:
70:2d:9d:e6:30:63:cf:fb:b2:30:83:fe:0e:86:22:1c:e5:c9:
dc:85:a0:39:bc:bd:24:d6:7e:e3:eb:98:29:15:01:d6:92:db:
65:e5:20:e5:ef:2d:e6:de:9d:68:86:ba:5e:0c:76:b8:23:e0:
38:d9:9d:31:36:f9:9a:de:44:b6:03:07:df:46:bf:f6:04:37:
31:5b:db:75:4f:77:1c:90:ac:7f:02:20:aa:c4:51:28:aa:a9:
33:96:64:6a:fe:22:aa:f2:aa:c4:06:29:d1:d0:ab:ae:ba:2a:
c1:e7:37:6d:a7:91:4f:6a:6c:4e:9a:32:3a:21:fa:a6:1e:f6:
6e:6e:95:32:83:4c:d8:9c:54:d0:6b:14:94:64:f5:66:88:2c:
e3:9d:80:e5:4d:52:df:a1:5a:e5:ca:de:0c:6d:0f:8c:ff:0a:
1f:76:6f:ec:d6:ea:6f:7f:d5:68:a1:d8:3f:71:0d:13:8a:dd:
0a:c5:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:32:55 2026 by rpki-client