Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: 0MiVyaliY5DyKEMwO0DlvmSUuY9CXKaEkOS70pndMHY=
Subject key identifier: 5A:0F:58:F5:C5:5D:12:D9:59:51:32:97:9B:7D:A6:BD:42:22:F8:2F
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 01A0D872728F39E56E65F775ADFD9A487629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 0F11
Signing time: Fri 25 Sep 2026 12:02:54 +0000
Manifest this update: Fri 25 Sep 2026 12:02:54 +0000
Manifest next update: Sat 26 Sep 2026 12:02:54 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: 47N3P+XVbOuAwdkRvA9/NSTatr0rg3aY5JWM9r+dV5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:72:8f:39:e5:6e:65:f7:75:ad:fd:9a:48:76:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Sep 25 12:02:54 2026 GMT
Not After : Sep 26 12:02:54 2026 GMT
Subject: CN=5a0f58f5c55d12d9595132979b7da6bd4222f82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:cf:71:70:e7:14:16:48:29:eb:72:43:02:
73:da:44:cf:bb:ca:82:19:2c:3b:2d:50:2a:11:9e:
38:b8:63:d3:eb:38:0f:b2:f6:13:d3:6f:f5:bc:93:
4f:2b:1a:3f:c0:c4:ce:7b:77:c0:e6:87:d6:fa:e5:
94:96:84:79:23:dd:6a:43:e5:7d:66:4e:15:db:9e:
de:cc:44:97:0a:84:5f:70:32:e0:95:e3:9e:31:16:
39:6f:dc:ef:f2:d3:e4:4c:90:be:5f:ad:19:4f:2f:
99:24:2c:8c:be:e1:82:25:17:1a:fd:e5:55:76:3a:
f4:2e:56:f7:a9:12:18:b5:21:69:a8:d4:32:60:e0:
06:3b:59:48:4a:54:83:a8:77:2b:65:fe:c7:6c:d9:
b0:cb:b4:29:ad:41:24:aa:84:b0:b8:b2:a3:05:e0:
b6:21:1e:c7:0d:41:94:cd:56:99:f4:61:cf:a9:cb:
d6:1f:7f:ef:51:81:09:e5:7d:f6:11:4b:05:a6:66:
5a:f3:96:ae:72:2b:cf:34:6e:b7:13:32:b5:24:c6:
3a:64:68:13:e5:be:08:df:4f:72:93:a6:65:14:45:
02:92:bf:7a:b9:ba:78:3a:7f:20:53:0f:f7:cb:59:
19:5b:77:14:be:b4:b8:72:2b:27:13:df:8d:61:6c:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0F:58:F5:C5:5D:12:D9:59:51:32:97:9B:7D:A6:BD:42:22:F8:2F
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:42:23:ac:4b:81:f4:63:b5:b1:f1:8f:f4:96:f8:fa:70:26:
09:28:d8:01:86:09:ed:73:7f:04:fb:ea:2c:0c:eb:f0:c0:a9:
5c:b4:d4:81:81:0f:5d:d7:fc:f3:89:e6:04:40:fc:17:be:15:
25:e1:e9:63:09:cb:61:1f:91:66:af:34:6c:af:b7:b0:63:2c:
3e:c4:e9:45:a3:64:9f:de:07:9c:f6:e0:89:c2:91:97:2b:04:
60:0f:78:5d:81:46:39:ee:28:0d:fe:6f:8c:9f:5a:51:6c:c5:
59:cb:e8:b0:25:a7:9d:d8:0b:51:9a:cb:70:ea:36:30:ea:37:
a8:db:ad:29:20:8a:e3:cd:2c:35:08:89:58:73:6f:ff:73:35:
c2:32:07:79:7c:c1:50:c9:c7:f9:c5:e4:61:92:d9:4c:80:7b:
82:2e:3e:86:3e:45:00:9b:be:d8:82:ec:d6:81:f3:9d:c6:d0:
19:a1:a6:d4:48:52:c3:cf:17:32:91:a5:df:80:f8:db:ce:7d:
90:9e:69:24:74:f5:d1:b6:aa:dd:77:47:14:13:03:6b:68:66:
91:20:d5:50:51:ea:ac:36:12:07:90:d2:9c:71:40:d4:cd:e6:
5b:7d:cb:83:d4:b6:0e:92:fe:f2:3a:58:78:a7:ab:ec:74:79:
e5:62:97:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcnKPOeVuZfd1rf2aSHYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MWQyYmVlZTc1NDNhNDFhOTA4YTFhMDFlY2ZjMGE4NzI2
YTNhZTIwHhcNMjYwOTI1MTIwMjU0WhcNMjYwOTI2MTIwMjU0WjAzMTEwLwYDVQQD
Eyg1YTBmNThmNWM1NWQxMmQ5NTk1MTMyOTc5YjdkYTZiZDQyMjJmODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQbPcXDnFBZIKetyQwJz2kTPu8qC
GSw7LVAqEZ44uGPT6zgPsvYT02/1vJNPKxo/wMTOe3fA5ofW+uWUloR5I91qQ+V9
Zk4V257ezESXCoRfcDLgleOeMRY5b9zv8tPkTJC+X60ZTy+ZJCyMvuGCJRca/eVV
djr0Llb3qRIYtSFpqNQyYOAGO1lISlSDqHcrZf7HbNmwy7QprUEkqoSwuLKjBeC2
IR7HDUGUzVaZ9GHPqcvWH3/vUYEJ5X32EUsFpmZa85aucivPNG63EzK1JMY6ZGgT
5b4I309yk6ZlFEUCkr96ubp4On8gUw/3y1kZW3cUvrS4cisnE9+NYWzuPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoPWPXFXRLZWVEyl5t9pr1CIvgvMB8GA1UdIwQY
MBaAFPYdK+7nVDpBqQihoB7PwKhyajriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWgwcjd1ZFVPa0dwQ0tHZ0hzX0FxSEpxT3VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xZWRmMTAtZDNkZi00MGY1LWI0YTMt
YTczMWU5ZTFlNTMzLzEvOWgwcjd1ZFVPa0dwQ0tHZ0hzX0FxSEpxT3VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8xZWRmMTAtZDNkZi00MGY1LWI0YTMtYTczMWU5ZTFlNTMz
LzEvOWgwcjd1ZFVPa0dwQ0tHZ0hzX0FxSEpxT3VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkIjrEuB
9GO1sfGP9Jb4+nAmCSjYAYYJ7XN/BPvqLAzr8MCpXLTUgYEPXdf884nmBED8F74V
JeHpYwnLYR+RZq80bK+3sGMsPsTpRaNkn94HnPbgicKRlysEYA94XYFGOe4oDf5v
jJ9aUWzFWcvosCWnndgLUZrLcOo2MOo3qNutKSCK480sNQiJWHNv/3M1wjIHeXzB
UMnH+cXkYZLZTIB7gi4+hj5FAJu+2ILs1oHzncbQGaGm1EhSw88XMpGl34D42859
kJ5pJHT10baq3XdHFBMDa2hmkSDVUFHqrDYSB5DSnHFA1M3mW33Lg9S2DpL+8jpY
eKer7HR55WKX1A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:56:05 2026 by rpki-client