
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
File: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json)
Hash identifier: zFbjctEvyx33dbpEXS/NCLFGiIO3vwSt4dQeyhiMhRg=
Subject key identifier: 5D:A4:22:65:13:AB:F1:11:C0:37:2A:6A:E8:C1:E7:1D:D9:1E:59:45
Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Certificate issuer: /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Certificate serial: 01A0CFA474E465C8500B059844F2950C7746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
Manifest number: 0626
Signing time: Wed 23 Sep 2026 19:00:56 +0000
Manifest this update: Wed 23 Sep 2026 19:00:56 +0000
Manifest next update: Thu 24 Sep 2026 19:00:56 +0000
Files and hashes: 1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: +XpyLCjStQuaHMRE2ClqA61tVq9BOeRHqJxCbkVTXuc=)
2: cfgUMJjPHo2HMTWogKTOZFoNb44.roa (hash: 6T+E0hhZ0PL+MJOi66ClH6FGS34xdrKxtztKFTXuFcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:74:e4:65:c8:50:0b:05:98:44:f2:95:0c:77:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Validity
Not Before: Sep 23 19:00:56 2026 GMT
Not After : Sep 24 19:00:56 2026 GMT
Subject: CN=5da4226513abf111c0372a6ae8c1e71dd91e5945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:2a:b6:dc:d6:e5:08:6d:d0:2f:00:b5:6c:
38:a7:94:2f:68:11:4a:99:76:0e:fe:39:bc:eb:da:
0a:6b:f8:47:27:30:bb:81:9d:d8:7e:4c:c7:75:64:
22:73:2b:63:ce:d6:65:8e:3d:de:0d:73:55:35:cf:
cb:50:10:f0:bd:51:e8:8a:2b:48:c5:76:66:d4:8a:
0b:54:b1:52:ee:99:ea:71:0c:e8:c2:2b:7d:e9:79:
8c:2d:a1:0a:e0:45:a1:c9:c0:36:3a:4f:68:aa:a6:
79:50:42:7e:ab:bf:53:24:53:6c:e4:5d:e6:6c:1c:
43:b4:21:a9:32:9a:a1:c0:14:84:ef:7e:4d:5c:4b:
3f:51:c7:f1:46:61:aa:25:3c:42:da:7d:53:a3:6d:
4b:07:61:97:43:7b:d4:21:1e:da:7b:c3:c7:b6:ad:
b3:48:e9:e5:49:a9:9f:55:1a:cd:08:4b:1d:41:bb:
ff:db:44:ab:51:47:cd:8c:9a:c7:cf:b6:68:cb:18:
f5:4c:76:64:4e:a5:a3:8e:39:50:22:21:38:83:72:
76:2a:15:4e:5b:31:b9:07:b7:92:bb:02:fe:fc:09:
21:20:30:6e:a6:a3:a6:3d:49:1e:28:e1:2a:aa:ba:
c4:da:1d:c8:c2:06:a2:ae:8c:e9:a9:51:ba:38:08:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A4:22:65:13:AB:F1:11:C0:37:2A:6A:E8:C1:E7:1D:D9:1E:59:45
X509v3 Authority Key Identifier:
keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:04:8e:aa:d8:33:2e:cf:62:5e:68:ec:51:a8:16:b6:d5:91:
d4:62:3e:b7:81:d4:1e:8d:60:cf:86:ca:78:44:79:fc:5c:f7:
42:73:68:9d:35:2b:5e:fd:f9:87:e0:7b:f8:06:22:ec:7d:30:
d6:17:1c:6d:33:5c:1e:b7:a2:dc:d4:46:c2:23:b1:d6:4f:5b:
78:32:bb:c3:50:3e:b2:46:72:03:1d:5b:d6:a7:f2:67:76:e8:
e6:3d:cf:05:b4:f6:7a:e1:c9:15:96:36:b5:36:7b:45:92:11:
b9:b5:a2:69:80:1a:90:c0:48:56:69:80:10:49:23:ff:87:45:
e7:6c:34:bf:cf:88:69:06:46:c8:be:2b:5e:31:79:93:9d:33:
a5:8a:37:d2:29:17:36:fa:a3:01:8d:66:ee:e0:63:53:3a:16:
11:da:6a:fd:cd:22:50:0c:52:d3:3d:c2:c3:d4:fb:e3:00:49:
eb:71:a2:aa:c6:35:cf:78:7b:9d:25:dd:b7:f7:9e:39:73:7c:
ef:bb:e9:ea:f4:44:df:db:3a:be:dc:8b:af:f4:c2:81:08:70:
93:a2:ba:0f:0e:90:42:38:f5:04:7c:96:b0:62:56:c0:f1:d2:
99:33:bd:26:a3:60:0a:64:f3:17:86:f5:b7:e2:6e:01:5b:25:
90:66:25:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:37:44 2026 by rpki-client