Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.mft
File: 9IK65Y63RVQ61RlngQKBCKcHXsM.mft (raw, json)
Hash identifier: qtmb497t6p9kWpY2YAVMDR0m/Aoz7v1V6BuC4M56lNo=
Subject key identifier: 20:7D:F4:E0:BA:6F:7E:BE:01:86:CC:50:B5:06:65:F7:5D:53:BC:55
Authority key identifier: F4:82:BA:E5:8E:B7:45:54:3A:D5:19:67:81:02:81:08:A7:07:5E:C3
Certificate issuer: /CN=f482bae58eb745543ad5196781028108a7075ec3
Certificate serial: 01A0DD97A839E10D17A816FC14A34DBC52C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IK65Y63RVQ61RlngQKBCKcHXsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:38 +0000
Manifest this update: Sat 26 Sep 2026 12:01:38 +0000
Manifest next update: Sun 27 Sep 2026 12:01:38 +0000
Files and hashes: 1: 9IK65Y63RVQ61RlngQKBCKcHXsM.crl (hash: kiDEReQcOR3UDyRC/fBS3yy7wtGjBkTgBgt4wNqlaEU=)
2: WqvF3xaAU5g9ZqYeaGr7TNyDSPg.roa (hash: 8K9lIrtuYoWxMoTshzYwykTSdth4hFzLqIUp7nfiqiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IK65Y63RVQ61RlngQKBCKcHXsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:a8:39:e1:0d:17:a8:16:fc:14:a3:4d:bc:52:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f482bae58eb745543ad5196781028108a7075ec3
Validity
Not Before: Sep 26 12:01:38 2026 GMT
Not After : Sep 27 12:01:38 2026 GMT
Subject: CN=207df4e0ba6f7ebe0186cc50b50665f75d53bc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8e:f7:cb:4a:e5:67:23:62:21:fa:5e:e5:82:
c7:96:e5:6d:20:9d:a3:c3:5f:35:0e:e8:c2:df:7b:
8c:5a:37:75:ff:3f:db:01:a5:c0:57:7f:e3:6f:60:
be:3a:9c:0f:d1:49:ea:0d:fe:f0:21:e5:8c:54:76:
a9:59:6a:a6:53:28:0c:97:4f:5a:ab:f8:de:7b:4b:
47:c1:3d:df:07:e4:94:37:aa:79:b8:ba:55:3f:6c:
6c:67:05:ff:84:3b:0e:c5:30:ef:b5:a7:46:a7:6d:
4b:d8:af:81:2e:84:4d:6e:44:c9:e7:45:be:bf:d2:
ca:49:82:f9:fe:51:07:f6:5b:e6:b7:10:51:e5:6e:
6a:30:fe:13:bb:b7:b2:f4:d3:3c:a5:ab:75:49:f3:
fa:b0:24:00:db:ad:0b:53:c2:29:99:2c:10:f2:cb:
07:10:a3:b2:59:f6:03:79:56:32:d7:04:40:97:5f:
15:ee:5f:f8:b7:f5:69:cf:05:f7:9a:ac:54:a1:e7:
58:0d:c3:15:90:d9:b0:93:5d:d0:71:83:d6:b6:a6:
e7:f4:65:0d:6e:b0:e4:60:95:a4:73:c3:03:34:b0:
92:31:0b:57:73:cd:59:97:05:1d:2d:2f:f3:1e:92:
9c:26:c7:93:00:5a:97:82:d4:c7:12:b0:58:8e:d8:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7D:F4:E0:BA:6F:7E:BE:01:86:CC:50:B5:06:65:F7:5D:53:BC:55
X509v3 Authority Key Identifier:
keyid:F4:82:BA:E5:8E:B7:45:54:3A:D5:19:67:81:02:81:08:A7:07:5E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IK65Y63RVQ61RlngQKBCKcHXsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cb:82:34:f9:94:15:fb:9e:fc:72:16:10:94:8e:72:e6:36:
81:87:6e:0a:52:21:56:eb:9e:8f:1b:50:15:09:15:7f:06:bb:
38:e8:ed:9e:54:9c:67:da:39:4f:a1:9e:48:4d:af:5d:b9:7e:
4b:84:03:2a:af:b2:eb:d0:55:d5:bf:17:a8:46:86:87:7a:c9:
6d:15:48:0d:33:e4:e9:0c:57:3f:2d:eb:30:97:21:08:7e:29:
da:8a:49:94:fe:c2:90:80:27:a9:fc:81:96:8e:8d:7b:2c:d4:
78:70:b5:4c:e5:ab:8f:20:9a:04:bc:6d:93:4c:7c:80:3a:d4:
ce:72:53:50:b3:70:c7:4c:22:f4:72:ca:19:2d:97:26:dd:9c:
5f:1f:16:de:cb:bd:db:78:8b:28:b2:a0:83:ec:b2:60:b9:7f:
75:eb:4e:fd:41:51:33:a1:3c:50:2c:c2:f0:91:0c:12:c4:8d:
6f:64:73:20:e8:72:51:7d:96:19:93:0e:a3:17:02:8d:56:68:
ee:9f:18:b6:a6:8d:5c:f1:1e:27:e2:f8:df:d9:e5:e1:68:92:
2b:b4:c0:0e:13:6e:10:32:50:f9:20:00:d5:31:9b:a2:41:a9:
88:ac:da:4f:83:c3:5f:04:0a:dd:33:86:52:17:3c:2b:4b:11:
7a:1f:df:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdl6g54Q0XqBb8FKNNvFLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODJiYWU1OGViNzQ1NTQzYWQ1MTk2NzgxMDI4MTA4YTcw
NzVlYzMwHhcNMjYwOTI2MTIwMTM4WhcNMjYwOTI3MTIwMTM4WjAzMTEwLwYDVQQD
EygyMDdkZjRlMGJhNmY3ZWJlMDE4NmNjNTBiNTA2NjVmNzVkNTNiYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno73y0rlZyNiIfpe5YLHluVtIJ2j
w181DujC33uMWjd1/z/bAaXAV3/jb2C+OpwP0UnqDf7wIeWMVHapWWqmUygMl09a
q/jee0tHwT3fB+SUN6p5uLpVP2xsZwX/hDsOxTDvtadGp21L2K+BLoRNbkTJ50W+
v9LKSYL5/lEH9lvmtxBR5W5qMP4Tu7ey9NM8pat1SfP6sCQA260LU8IpmSwQ8ssH
EKOyWfYDeVYy1wRAl18V7l/4t/VpzwX3mqxUoedYDcMVkNmwk13QcYPWtqbn9GUN
brDkYJWkc8MDNLCSMQtXc81ZlwUdLS/zHpKcJseTAFqXgtTHErBYjthyUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCB99OC6b36+AYbMULUGZfddU7xVMB8GA1UdIwQY
MBaAFPSCuuWOt0VUOtUZZ4ECgQinB17DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlLNjVZNjNSVlE2MVJsbmdRS0JDS2NIWHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMmI3ZDYtMjY5Yi00YmIyLWI0NTUt
MzkxNzY4NTczNDk2LzEvOUlLNjVZNjNSVlE2MVJsbmdRS0JDS2NIWHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wMmI3ZDYtMjY5Yi00YmIyLWI0NTUtMzkxNzY4NTczNDk2
LzEvOUlLNjVZNjNSVlE2MVJsbmdRS0JDS2NIWHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsuCNPmU
Ffue/HIWEJSOcuY2gYduClIhVuuejxtQFQkVfwa7OOjtnlScZ9o5T6GeSE2vXbl+
S4QDKq+y69BV1b8XqEaGh3rJbRVIDTPk6QxXPy3rMJchCH4p2opJlP7CkIAnqfyB
lo6NeyzUeHC1TOWrjyCaBLxtk0x8gDrUznJTULNwx0wi9HLKGS2XJt2cXx8W3su9
23iLKLKgg+yyYLl/detO/UFRM6E8UCzC8JEMEsSNb2RzIOhyUX2WGZMOoxcCjVZo
7p8YtqaNXPEeJ+L439nl4WiSK7TADhNuEDJQ+SAA1TGbokGpiKzaT4PDXwQK3TOG
Uhc8K0sReh/fMA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:12:17 2026 by rpki-client