Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: kOxqk4IWZPWxm+u99GiCsYvANOM80QJuEHC1d0dmOQo=
Subject key identifier: 11:E3:58:DB:FD:14:7B:8A:F7:66:02:A1:BD:10:65:96:0A:29:69:B4
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 01A0DDCE5AAF9991AE2DE483AE3EDF92501F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 0A57
Signing time: Sat 26 Sep 2026 13:01:23 +0000
Manifest this update: Sat 26 Sep 2026 13:01:23 +0000
Manifest next update: Sun 27 Sep 2026 13:01:23 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: hsMIWQycCRGBax27YDQfSDHVtg0/QPqiD0/FGMnvgU8=)
2: rHQdQwrAVRUi1O-wNwGNXoOAwg0.roa (hash: 99E6Pbyu+albbhKOZ1Sk3PoNSHlEGTIbABGjf0VzSBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:5a:af:99:91:ae:2d:e4:83:ae:3e:df:92:50:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Sep 26 13:01:23 2026 GMT
Not After : Sep 27 13:01:23 2026 GMT
Subject: CN=11e358dbfd147b8af76602a1bd1065960a2969b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:c9:37:a7:0b:ea:37:a0:5d:69:70:be:c3:
c4:82:54:7f:54:e5:d1:d4:81:4f:a3:29:e2:73:27:
4a:c8:cf:68:9e:f6:4b:0a:7f:ea:76:c4:86:d9:a9:
04:4b:54:87:2e:cd:92:b0:2b:63:ca:68:c2:2e:a7:
40:fb:6a:c4:dc:0f:25:6e:c2:b9:65:61:fb:bc:50:
19:65:92:4a:36:0d:db:5a:42:ca:ae:f1:40:c0:75:
94:5b:79:ec:ac:e8:ba:b9:57:c1:bd:b1:64:5d:6a:
b8:64:62:97:6a:d7:ae:c7:84:2c:eb:ac:9f:ca:77:
a6:b0:0d:6b:b9:19:00:84:90:70:c8:f5:0f:45:54:
86:ff:3d:ea:9a:86:6c:b5:f4:2d:f0:b2:4f:a3:b2:
10:45:5f:af:c6:16:72:2a:ed:42:74:97:16:6c:a2:
e7:ee:b1:21:93:35:f9:da:3b:45:54:23:30:96:c9:
98:85:b0:07:01:31:e7:bc:24:9f:b0:34:81:e8:fd:
84:67:18:77:cc:b0:ca:85:71:4a:86:cd:06:94:a6:
ea:82:79:36:1b:1d:45:c1:d4:c2:1b:94:92:f5:fa:
f3:df:b2:3e:32:75:ef:82:22:72:e6:81:5b:9b:93:
34:6e:77:52:d4:6f:9d:e4:1b:3e:95:5d:4b:9f:46:
77:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:58:DB:FD:14:7B:8A:F7:66:02:A1:BD:10:65:96:0A:29:69:B4
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:58:df:72:31:d0:1f:77:32:12:81:1e:02:44:06:a0:93:84:
d1:34:0e:a6:52:d3:98:0e:b1:64:be:cf:d8:09:cf:46:a0:23:
25:a5:1e:43:07:02:7f:75:a6:1f:43:28:d0:11:dd:45:86:39:
86:76:a9:7d:2c:2c:82:15:67:87:71:c7:8a:85:66:cb:17:42:
7e:b7:98:93:6f:8c:67:2e:32:fe:0a:a1:51:1f:31:e7:a0:a7:
1a:ec:20:90:88:5e:8d:48:f7:60:35:55:c7:64:92:35:6d:cb:
18:a6:3f:e0:d7:04:09:e8:ab:59:ba:f6:7b:72:65:22:58:ff:
af:af:e3:f9:77:57:6f:fc:a2:f7:ec:41:0e:2c:2b:a1:59:ec:
6f:95:76:22:7b:c9:2b:ca:7f:b9:41:a8:64:8d:c5:72:44:37:
d6:02:70:2b:93:74:a6:8d:e1:e9:19:13:43:78:9f:d7:0c:b2:
a0:a7:17:0c:31:3c:d5:27:70:db:c6:65:38:b1:09:54:76:cf:
2a:82:c2:7e:dd:9f:2e:85:e3:be:53:bd:2b:cd:e7:05:db:64:
72:3d:79:d2:1b:2d:d8:00:59:9b:8c:71:ed:ed:24:a5:b3:f4:
26:36:74:9a:8c:c1:db:14:8b:ce:32:51:53:88:48:32:ea:fc:
52:45:6d:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdzlqvmZGuLeSDrj7fklAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MDk1MjhiODgyOGI0ZDgyNjM1NWUyYzUyMjM3ZDY0MjA3
MWNkNTQwHhcNMjYwOTI2MTMwMTIzWhcNMjYwOTI3MTMwMTIzWjAzMTEwLwYDVQQD
EygxMWUzNThkYmZkMTQ3YjhhZjc2NjAyYTFiZDEwNjU5NjBhMjk2OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVLJN6cL6jegXWlwvsPEglR/VOXR
1IFPoynicydKyM9onvZLCn/qdsSG2akES1SHLs2SsCtjymjCLqdA+2rE3A8lbsK5
ZWH7vFAZZZJKNg3bWkLKrvFAwHWUW3nsrOi6uVfBvbFkXWq4ZGKXateux4Qs66yf
ynemsA1ruRkAhJBwyPUPRVSG/z3qmoZstfQt8LJPo7IQRV+vxhZyKu1CdJcWbKLn
7rEhkzX52jtFVCMwlsmYhbAHATHnvCSfsDSB6P2EZxh3zLDKhXFKhs0GlKbqgnk2
Gx1FwdTCG5SS9frz37I+MnXvgiJy5oFbm5M0bndS1G+d5Bs+lV1Ln0Z3JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHjWNv9FHuK92YCob0QZZYKKWm0MB8GA1UdIwQY
MBaAFPcJUouIKLTYJjVeLFIjfWQgcc1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEt
OWY3NGZhY2FlOGYxLzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEtOWY3NGZhY2FlOGYx
LzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1jfcjHQ
H3cyEoEeAkQGoJOE0TQOplLTmA6xZL7P2AnPRqAjJaUeQwcCf3WmH0Mo0BHdRYY5
hnapfSwsghVnh3HHioVmyxdCfreYk2+MZy4y/gqhUR8x56CnGuwgkIhejUj3YDVV
x2SSNW3LGKY/4NcECeirWbr2e3JlIlj/r6/j+XdXb/yi9+xBDiwroVnsb5V2InvJ
K8p/uUGoZI3FckQ31gJwK5N0po3h6RkTQ3if1wyyoKcXDDE81Sdw28ZlOLEJVHbP
KoLCft2fLoXjvlO9K83nBdtkcj150hst2ABZm4xx7e0kpbP0JjZ0mozB2xSLzjJR
U4hIMur8UkVtEQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:35:30 2026 by rpki-client