
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
File: 9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json)
Hash identifier: Nqei/T+0LouwNfYjJPYmfzHkxMPT8GMkyvw159JrN1I=
Subject key identifier: 11:BA:6B:70:16:8A:F5:0D:E9:FD:0D:E4:4C:1A:F8:10:40:C7:F7:51
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Certificate issuer: /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial: 01A0D0493086052BC13B08A557B5570046F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
Manifest number: 1543
Signing time: Wed 23 Sep 2026 22:00:52 +0000
Manifest this update: Wed 23 Sep 2026 22:00:52 +0000
Manifest next update: Thu 24 Sep 2026 22:00:52 +0000
Files and hashes: 1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: gBy7parikMUmSY0YbNz6NGboFfrn4J/AQ6TLjOLaCS0=)
2: ueo3GEvAi3EUPHegDlQ1GPk4SCg.roa (hash: /54TVaQGpWQlA0th+KPLCMlkXLtNsFvetSrJmgBZFMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:30:86:05:2b:c1:3b:08:a5:57:b5:57:00:46:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Validity
Not Before: Sep 23 22:00:52 2026 GMT
Not After : Sep 24 22:00:52 2026 GMT
Subject: CN=11ba6b70168af50de9fd0de44c1af81040c7f751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:1a:44:2a:82:99:ca:97:44:97:ce:38:7e:
0d:67:df:21:8d:0a:8c:aa:20:00:c7:c9:73:26:a2:
34:82:2f:db:7b:48:7e:49:e4:c6:32:16:95:63:f6:
29:4d:65:bf:00:37:34:e0:b7:4f:76:3e:62:51:bf:
a1:6e:c7:12:b5:76:bd:b2:70:d4:52:3d:d8:33:79:
f4:bf:45:7a:6d:b6:29:e9:8b:a6:d9:5e:1f:d2:6a:
d1:cf:c0:2a:99:d7:d1:d0:a3:c4:cd:1c:90:e8:2a:
5d:5a:4c:1d:a0:5e:a2:7f:6d:7e:e4:1a:4c:4f:06:
ba:0e:d1:a2:51:a4:96:1a:87:ab:df:e4:6f:c5:e3:
3f:ef:8b:2b:e1:ed:00:3f:74:3d:c2:61:d1:11:1b:
db:9d:9a:1e:d6:0f:52:6e:7d:40:a7:cf:0a:a0:e3:
1d:54:a1:51:5e:86:0c:62:64:d5:f5:15:fc:4f:e5:
d8:1a:f7:d7:ad:ab:27:26:75:aa:05:1e:da:d0:c7:
40:8d:b0:7a:40:ca:45:fd:a0:a6:10:30:31:0b:3b:
46:e7:22:9a:16:81:20:7d:11:c5:c5:d6:12:c4:77:
74:e6:35:1b:8d:0d:83:19:3b:8e:49:50:cc:ac:1a:
3a:3e:36:ed:76:8f:00:a8:2a:3d:a2:4a:95:80:6b:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BA:6B:70:16:8A:F5:0D:E9:FD:0D:E4:4C:1A:F8:10:40:C7:F7:51
X509v3 Authority Key Identifier:
keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f7:fb:d8:25:eb:be:61:b0:ca:39:8a:b2:d4:34:1c:c8:eb:
9d:f2:4d:5c:43:d3:4e:c3:3d:a7:ad:c7:8c:27:51:d5:f1:86:
0a:d7:f3:fe:3e:8c:58:fa:23:10:dd:25:30:dd:c3:c5:d0:ee:
9f:f9:5c:2d:5b:5f:5d:57:4d:db:04:67:23:8d:47:fb:8f:5e:
b3:aa:cb:42:22:7c:22:e3:8c:c6:ce:15:ec:db:6b:a9:ed:e2:
45:e4:5f:b3:2e:ea:df:f7:a7:9d:c9:54:57:c5:19:a8:7c:4b:
1a:bc:1b:77:3a:3f:95:94:33:f5:5e:d4:15:a8:49:1c:1e:3d:
e6:f6:7c:02:bb:0f:a6:b0:48:cf:a5:1b:ef:b4:26:ee:7c:c4:
53:f4:f8:e9:87:b7:d8:69:45:b4:34:65:63:00:5d:a4:47:79:
91:2b:bb:2a:f4:40:96:a1:aa:77:87:13:e7:da:fb:dd:bd:2b:
37:ca:1b:1e:33:1a:f7:6b:74:72:6a:79:18:cb:ae:b8:c2:60:
7e:ce:ee:3a:f7:f7:2f:e8:6b:18:38:65:c9:e7:b8:9d:08:a9:
3d:21:fd:fa:46:8d:75:22:d4:88:04:2a:17:47:fd:af:b2:9d:
f9:a9:21:d6:0a:42:17:34:ef:5b:80:3f:85:89:09:37:d0:b5:
de:fa:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:49:36 2026 by rpki-client