Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: 1QrfEaS4yM/5WBO+XLDzb95BUKmpXxgOrGBd0TcQ/74=
Subject key identifier: C0:DA:BC:42:F8:82:C0:F1:A9:82:6B:5D:DD:54:F4:E7:77:B5:00:51
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 01A0CB592DE8E4A924734591012718CF44D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0DD2
Signing time: Tue 22 Sep 2026 23:00:14 +0000
Manifest this update: Tue 22 Sep 2026 23:00:14 +0000
Manifest next update: Wed 23 Sep 2026 23:00:14 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: U+hQo1v3E+cV4OW3iCQiJvf+kxJ9TGsWfuGkKIDM55o=)
2: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (hash: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:2d:e8:e4:a9:24:73:45:91:01:27:18:cf:44:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Sep 22 23:00:14 2026 GMT
Not After : Sep 23 23:00:14 2026 GMT
Subject: CN=c0dabc42f882c0f1a9826b5ddd54f4e777b50051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:89:c7:94:eb:40:6d:2c:89:e0:1c:8f:e9:
20:66:0c:d4:de:2f:25:46:46:f4:34:53:a5:57:db:
8d:5d:50:14:c9:d0:05:f3:1d:18:78:ec:0f:a5:7a:
0a:60:3e:e2:f6:da:3c:2e:0a:15:15:85:a5:cf:09:
77:7b:c4:c2:f2:53:8e:18:63:98:b4:60:ea:8f:9c:
bb:53:46:e4:ba:f2:67:aa:f5:44:6b:bd:ce:80:6c:
f6:ec:9f:9f:26:41:e5:b5:d1:61:54:ea:88:ff:dc:
df:91:1d:43:25:5e:c2:b9:18:00:7b:2b:c2:e1:ed:
17:05:bf:3f:c2:96:0b:8d:da:81:22:7d:c9:96:b8:
71:75:ab:70:b0:0e:9a:ef:f9:8a:3c:c6:3a:e6:4b:
3d:28:ab:8f:d6:77:8e:d3:4e:cb:7d:50:15:87:2a:
6b:4f:0c:94:34:e3:c2:32:a9:88:7d:1c:15:1d:57:
fd:eb:50:db:2f:1f:93:08:df:82:a1:73:23:86:06:
cf:0f:13:c9:7f:6c:60:81:3f:e6:f1:e2:d6:8f:72:
36:e3:c2:3d:e6:6f:86:5b:28:e7:66:09:40:1c:41:
c6:78:56:1e:71:fc:3e:7c:e5:b1:8e:6d:a2:cf:7d:
35:f5:e5:26:e9:33:a4:59:49:05:65:95:45:d2:f4:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DA:BC:42:F8:82:C0:F1:A9:82:6B:5D:DD:54:F4:E7:77:B5:00:51
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:50:3c:bc:04:71:e3:26:6e:63:89:b5:cb:a0:3e:11:c0:aa:
1c:06:ec:35:e0:c1:91:66:72:af:a2:bf:df:ec:9f:6b:04:49:
c8:b0:bd:a9:36:45:0c:6d:da:0c:6e:f6:33:c8:d9:13:14:6a:
4b:cc:9a:7f:f0:59:9e:35:20:4c:90:10:34:1c:59:84:da:4b:
0a:67:5a:f8:f6:e8:86:05:07:27:a2:37:c2:40:27:67:83:93:
9e:d5:06:69:fd:eb:0d:01:24:31:87:5d:20:23:ce:7d:c3:d4:
74:84:e4:5b:b9:fe:c6:d1:ec:77:40:11:a3:75:f1:9c:d3:69:
9a:87:1e:90:bc:60:30:fa:71:9e:86:ca:c5:77:a5:c9:63:eb:
29:5a:e5:f0:4c:4c:9f:4f:4d:c4:58:33:e6:7e:9c:5e:85:0f:
0f:fd:a0:c0:8f:a5:b4:8a:aa:36:40:93:7c:56:c2:c5:b4:4f:
ac:ee:6d:e7:e5:4e:3f:39:67:44:16:b5:2b:df:de:ac:87:dc:
8b:aa:18:0d:d6:22:69:c3:3c:01:53:a8:1d:81:3e:1c:23:71:
e5:7c:d4:ae:d7:65:b4:2f:21:d1:87:66:74:8f:86:30:38:44:
c0:90:9b:79:27:ee:61:e7:74:8d:58:13:42:bd:c6:a1:5b:1f:
a5:87:3f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:06:03 2026 by rpki-client