Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: /iFvc+jDQ2NxJ2xLrJZt+aM6bpceJLAbIz6AfxYG3ng=
Subject key identifier: C0:59:FE:53:A2:BE:55:86:E8:A5:97:CD:65:0D:7B:92:AC:4B:4B:68
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 01A0DD9822AB897334EE8D587382A31ACEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0D71
Signing time: Sat 26 Sep 2026 12:02:09 +0000
Manifest this update: Sat 26 Sep 2026 12:02:09 +0000
Manifest next update: Sun 27 Sep 2026 12:02:09 +0000
Files and hashes: 1: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: uJ2iybjGe7d01XOjtGlHQ5oBB/vQFoeT4D0BA6NM/N8=)
2: QBd5Wpp5kWkoCSM4_95uiC5JDV0.roa (hash: flLVepDAjYfRnttnJvSS11YgDPxXUtJLpwyzAOjne3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:22:ab:89:73:34:ee:8d:58:73:82:a3:1a:ce:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Sep 26 12:02:09 2026 GMT
Not After : Sep 27 12:02:09 2026 GMT
Subject: CN=c059fe53a2be5586e8a597cd650d7b92ac4b4b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:97:0e:9c:a4:16:18:29:db:d2:66:08:28:
6a:a3:c6:ee:5f:c6:25:59:f3:68:51:ee:3c:46:6e:
14:78:5b:7a:f2:4e:60:45:ea:04:b4:ef:cd:ca:4f:
9d:42:51:1b:80:ab:9f:ab:63:bf:4c:6d:aa:4c:10:
2d:ba:16:a3:0b:f2:a4:d7:82:df:24:28:58:ff:71:
81:39:55:8d:b5:4c:19:3c:d8:d2:12:20:77:37:14:
5a:50:0e:dd:cf:b9:c2:b3:59:85:a9:1c:f2:d3:a5:
c8:e5:f7:77:5e:55:7e:6b:76:51:81:01:90:2c:1b:
95:f2:cc:70:23:0e:ad:2f:08:3a:fd:7b:83:82:bf:
30:80:7c:aa:7a:25:99:5e:42:6c:0c:e1:e8:b0:0b:
28:2a:23:cf:e8:2a:41:0c:26:0d:25:ce:f4:5d:74:
79:27:f9:90:a1:dd:da:67:8d:6d:b7:b1:8a:9b:cc:
9b:f0:30:83:4d:fa:9c:4c:2c:d5:4e:82:c7:45:9c:
e0:c1:76:73:fa:36:4f:a5:b4:15:95:31:89:86:f4:
84:21:3b:26:f8:ac:e4:02:3c:77:43:da:cf:be:c0:
87:e4:d2:8e:64:53:4b:cc:2f:b8:83:32:b8:5d:35:
7f:eb:3f:6d:01:8b:a5:60:76:f4:dd:bf:10:e4:f6:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:59:FE:53:A2:BE:55:86:E8:A5:97:CD:65:0D:7B:92:AC:4B:4B:68
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:61:94:53:9d:c2:c9:1d:40:db:59:25:ee:4c:a2:8e:15:4e:
ae:f1:27:67:4c:55:a2:f0:47:de:b5:d8:70:82:74:54:bf:54:
17:8f:4a:ad:b1:27:e3:d3:3c:da:16:ab:5c:0b:84:b9:a4:21:
37:56:46:4e:7d:75:ce:ad:6a:69:f0:dd:35:3c:c9:61:ae:0c:
cc:4a:a3:d8:98:f4:a6:44:95:d0:d5:63:2f:8e:96:02:23:eb:
e8:3b:1c:3e:6c:d5:ca:51:b2:5b:c3:64:e7:73:45:5f:33:29:
13:84:15:84:d7:d1:a2:7c:2f:7c:74:13:5f:8f:ab:c3:20:33:
81:74:91:2d:76:48:52:49:ee:88:52:85:b1:06:e7:9d:1c:06:
4c:d9:4b:b2:82:89:3d:55:e3:15:f9:8c:ef:fb:10:0f:b4:f6:
ba:ef:d8:41:18:42:07:bd:b1:01:35:37:1d:ad:2f:ab:a0:3a:
18:00:6d:b0:58:94:b0:ff:15:e0:29:fa:2f:1f:c1:98:2c:e6:
70:db:a4:63:43:3e:fd:0f:39:bc:b9:14:6d:b1:e4:9e:1d:c4:
80:f9:2c:90:38:e7:f0:93:26:51:c5:57:b0:24:e2:be:7e:ba:
09:9b:83:fd:ae:1c:bb:0d:13:fd:f8:2c:0d:56:63:e4:12:57:
19:57:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:20:12 2026 by rpki-client