Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: jSHGmCnIdjyA902zfEWU85/7ytbl1IgZhkYRPSJ1ebQ=
Subject key identifier: 19:A1:10:67:B7:1A:0A:07:A2:95:D7:E5:FA:23:DB:48:CC:15:AF:FC
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 01A0D5A71751EE83D2029AC31C8A50CA5878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 23:01:32 +0000
Manifest this update: Thu 24 Sep 2026 23:01:32 +0000
Manifest next update: Fri 25 Sep 2026 23:01:32 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: d5d073WRUd11qEuUM78QX6hs8Lgx6fe9hjNRl5I5wOo=)
2: GNmi18wQl4vtlo-9lVpDdUD44U8.roa (hash: PX3LxFRdOujIRS22JaSLS22PgqGNSnD4VtofU70m2Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:17:51:ee:83:d2:02:9a:c3:1c:8a:50:ca:58:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Sep 24 23:01:32 2026 GMT
Not After : Sep 25 23:01:32 2026 GMT
Subject: CN=19a11067b71a0a07a295d7e5fa23db48cc15affc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:eb:2a:6a:bf:48:34:27:d4:20:b4:70:98:
e4:6c:13:b1:e9:d2:31:6c:39:11:a9:05:0d:79:31:
bc:64:8a:01:fd:7d:b2:f5:12:6e:c2:f1:f8:38:bc:
df:38:0a:70:67:ba:f4:0c:17:1e:60:04:5f:43:33:
5c:ad:b6:26:b7:e7:96:8c:95:44:a5:cb:50:43:a8:
73:a3:e2:74:e2:24:da:fa:3a:57:48:10:06:60:94:
29:99:7d:5c:4e:b1:46:1d:8b:64:b5:bb:6b:98:c2:
20:ac:26:70:bd:9e:bc:6b:61:b1:68:45:d8:5d:6d:
2e:14:55:0e:f5:11:e3:ff:f5:f9:77:5d:6b:52:e2:
a1:76:64:c7:14:46:03:86:c2:80:e4:8c:0e:03:79:
bc:fa:93:15:5d:21:05:82:5a:fe:55:9a:82:1b:00:
87:44:31:e6:dd:1c:e2:84:7c:ff:a3:77:3a:88:df:
6a:65:5a:8e:8d:f9:be:f1:39:10:43:6c:6d:2b:86:
2c:5b:3b:b3:d8:c7:2a:1e:1d:f8:25:a0:ac:2d:c1:
6e:c8:83:82:3c:aa:33:de:42:1b:32:a7:5b:74:fb:
09:35:1c:17:b3:75:6d:56:78:44:6d:b1:fa:59:78:
06:cc:5b:c5:f2:93:6f:1f:74:28:aa:40:ec:1a:44:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A1:10:67:B7:1A:0A:07:A2:95:D7:E5:FA:23:DB:48:CC:15:AF:FC
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:7d:15:56:31:f5:7e:5f:aa:ae:e3:f5:43:e2:9d:cb:4b:ab:
13:9c:b4:21:36:a5:57:58:6e:80:9b:10:58:d7:d5:fc:aa:a8:
8c:35:a7:e1:5c:2e:36:17:71:c2:17:02:e1:ba:b0:9b:24:5b:
43:9b:39:c2:3a:0c:e9:e8:6e:53:0d:67:dc:fc:b5:2f:75:70:
c3:5e:7f:1c:77:0a:37:89:77:88:31:1b:d8:5b:e9:91:ce:e8:
7b:c5:ac:f1:b0:7f:91:37:4a:09:e6:b4:4f:41:e7:2e:4b:29:
9c:2d:05:f1:19:a9:91:0f:fb:87:15:f4:78:e7:a9:43:bf:cd:
95:0d:64:50:ff:80:35:65:58:82:c9:55:c6:ae:40:7e:df:aa:
2a:4d:22:09:d3:c2:bd:43:90:1b:8c:89:d5:bf:9e:cf:55:65:
c0:e7:6c:a5:96:97:ad:25:64:d8:80:e9:63:78:c1:7f:69:a7:
3b:1f:bf:58:4c:4a:0e:33:e0:e3:05:68:e3:ea:74:44:54:26:
88:3b:dc:66:16:b6:d6:d0:13:30:e4:30:b6:ac:b3:b0:fd:8a:
8b:05:9f:d2:9b:26:49:6a:ad:d6:93:e2:86:9a:0b:2b:a8:31:
70:65:d1:3b:ae:6d:c1:df:7e:4b:e2:33:e8:d3:57:13:a3:21:
d5:cf:ee:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:28:18 2026 by rpki-client