Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier: lc0qqGe/QAViEYbhnW7RGMg1RsKPpwgd36v6/1np9Tw=
Subject key identifier: 18:A4:54:E8:A4:51:B2:2F:D6:DA:24:CA:2C:9B:5F:96:19:1E:C5:40
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer: /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial: 01A0D570A69C990AB9D09DE912C04F6147BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number: 08DB
Signing time: Thu 24 Sep 2026 22:02:04 +0000
Manifest this update: Thu 24 Sep 2026 22:02:04 +0000
Manifest next update: Fri 25 Sep 2026 22:02:04 +0000
Files and hashes: 1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: o7raoF1F+sHt5fA8yH/5M8z7TBoq11anI1pvNPEND1I=)
2: b1tEVuM57ah52OvUq3Fvdd-4XkA.roa (hash: Odyf//1QBuLxW+qHnAmLWghjISD9y11hRldd+HjGtOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:a6:9c:99:0a:b9:d0:9d:e9:12:c0:4f:61:47:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Validity
Not Before: Sep 24 22:02:04 2026 GMT
Not After : Sep 25 22:02:04 2026 GMT
Subject: CN=18a454e8a451b22fd6da24ca2c9b5f96191ec540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:54:0a:8f:48:40:b1:40:05:d9:ec:be:a8:
e1:58:8d:36:d0:ce:6c:7e:5b:e3:21:e5:71:b2:e0:
91:8d:6c:b5:01:ad:11:97:8c:64:b1:43:07:80:dd:
e6:29:59:6b:22:2a:b3:e0:24:c1:ea:c1:b4:f0:02:
d9:f0:2d:d7:e4:d1:55:a8:34:cf:3e:04:25:28:32:
fc:d6:58:96:f1:47:2b:1d:98:f0:ee:ce:39:b9:64:
9f:f5:13:2e:1b:96:b7:d0:96:77:61:8a:c1:67:f3:
42:0e:e8:55:96:81:c3:35:68:35:19:fa:c7:c7:aa:
a6:8d:75:32:f1:05:5b:11:c0:dd:0f:af:50:ea:c2:
cd:77:71:99:67:6e:11:f3:8c:4a:2d:66:c6:06:cb:
e0:b0:df:ab:e7:a8:ff:a3:6f:23:d3:97:55:b1:c4:
d0:c5:c7:7d:41:c4:80:c0:93:24:81:e8:4b:c6:cf:
a3:38:df:43:cb:92:52:5c:76:82:8c:6b:d2:c4:22:
97:b3:5a:a7:77:fa:7d:af:96:28:8b:5e:df:a2:a4:
1a:94:5e:b1:76:c0:c8:ff:e1:32:33:59:e8:8b:4d:
67:12:28:c8:e6:9c:a3:ba:67:2e:0f:c1:c1:fb:9a:
09:5c:85:2e:33:e7:9f:c5:48:6b:9e:9f:b9:4b:f4:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A4:54:E8:A4:51:B2:2F:D6:DA:24:CA:2C:9B:5F:96:19:1E:C5:40
X509v3 Authority Key Identifier:
keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bc:03:9a:1c:09:d9:bb:c7:74:d7:56:4a:a1:b9:b1:63:38:
b7:3c:c2:0b:f5:7c:b8:8e:9a:63:dc:0b:b6:0d:03:6e:8a:96:
1c:3a:16:83:aa:95:f6:37:02:c1:2c:21:5b:a3:b1:48:23:6c:
2e:7a:0f:e7:1e:07:b9:51:97:1b:ef:9b:1d:f1:40:6b:a7:4e:
3c:3b:bf:e4:76:54:d2:97:43:76:80:6e:60:2a:91:16:85:f2:
66:45:18:65:7b:40:20:0c:44:87:d2:95:1c:34:4b:2f:90:e6:
6d:bb:be:15:16:99:c0:36:bf:72:17:13:8e:8f:a5:a8:35:7a:
f1:00:cc:ef:e5:d1:9f:f5:ad:15:05:28:eb:a4:72:e5:ac:4a:
1b:75:a2:7e:1f:68:ff:9f:fd:a5:52:18:27:40:ec:a6:ae:36:
b2:1c:18:98:35:8a:4d:da:9f:86:51:f7:e1:59:11:9c:d5:39:
8c:5e:2c:03:7b:c3:3b:32:cf:92:ca:a6:54:7e:5c:9c:1d:96:
55:b4:ab:ca:74:44:04:0c:5d:53:ed:31:fe:cc:6d:01:1e:28:
5b:f3:2a:71:06:65:8f:d8:42:25:6f:71:7f:1e:ed:3d:f2:d7:
91:43:ee:e0:30:e3:cd:20:91:bd:e0:dc:83:b8:4e:e5:67:7e:
a6:dc:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:26:26 2026 by rpki-client