Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: TtRFSctdOA+Dgze7CTtV7bvMHPR7yLDgw6j+gcE4NHM=
Subject key identifier: 35:E3:96:0D:6C:5B:17:C6:6F:19:F5:01:10:A6:60:50:54:33:F8:04
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 01A0D45D99810F25DD3AE522BD4E93E61E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 0A25
Signing time: Thu 24 Sep 2026 17:01:38 +0000
Manifest this update: Thu 24 Sep 2026 17:01:38 +0000
Manifest next update: Fri 25 Sep 2026 17:01:38 +0000
Files and hashes: 1: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: EN2wiZPh8XTE+t1YfS7IpJ5rLJPpKEPP6I+mj8YhaKQ=)
2: Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa (hash: llVgeSirYRMnxHxg+jow3ZLNY2RJpGEBaB4uInwuLpg=)
3: q7LASc7RAdvhKI2lD0l4EEgjIM4.roa (hash: Nr2UUQFi//KxEpaf+hC6t8vMKhEd7i+ElopwPR5ej6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:99:81:0f:25:dd:3a:e5:22:bd:4e:93:e6:1e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Sep 24 17:01:38 2026 GMT
Not After : Sep 25 17:01:38 2026 GMT
Subject: CN=35e3960d6c5b17c66f19f50110a660505433f804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:98:82:2d:0f:9c:a5:74:46:b1:fa:35:25:
38:e9:dd:4c:b1:05:14:b2:c3:18:40:ea:e5:3a:b3:
f5:69:54:3f:db:a2:36:f9:bc:eb:64:73:a4:e1:ce:
93:36:65:fc:30:40:69:38:11:5b:5b:29:9a:ca:43:
95:fb:63:1f:64:93:96:99:14:7d:54:7e:71:a3:60:
2e:c8:34:01:66:53:56:9b:70:44:85:e8:95:25:f6:
72:6f:74:33:37:9b:02:9c:d4:15:f2:e7:7b:89:72:
69:e3:78:52:5f:c5:cb:26:7c:7f:90:a1:71:f8:46:
27:17:a2:73:28:43:d0:6d:b7:5e:54:a5:8e:bc:0f:
c7:ea:89:b9:6e:f0:a8:d6:bf:f6:c4:3a:53:01:c0:
01:d5:e7:79:50:30:76:a7:5e:03:96:6c:8e:06:ae:
81:bc:78:ae:07:bb:de:7f:d2:5b:ad:08:b0:6d:99:
b7:d5:0b:e3:ad:9d:a1:bf:c6:c8:70:a6:25:4c:ca:
8b:ba:91:87:ea:e9:8a:98:76:70:a9:49:01:1b:f7:
72:6e:3b:2e:80:b4:c9:cc:48:f1:ec:d5:75:99:35:
0b:43:8e:37:13:97:0f:55:5a:43:45:4d:6c:51:4f:
38:06:76:22:a4:67:31:8e:bf:75:ca:6b:0d:be:ea:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E3:96:0D:6C:5B:17:C6:6F:19:F5:01:10:A6:60:50:54:33:F8:04
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e7:8c:45:3c:70:c7:c8:b9:9b:d2:d7:cd:cf:cb:90:2c:ee:
bf:95:a1:d3:02:5b:dc:52:38:1d:f0:a2:87:ea:5d:00:80:16:
d6:99:8a:9e:08:cf:51:2e:91:37:52:1f:a6:99:c4:76:24:d6:
08:67:a9:2e:e2:67:e1:1a:37:04:e5:7d:fb:fe:dd:d2:44:38:
6f:6f:e0:f8:64:3c:44:73:9b:28:be:b4:b3:2d:d6:e7:ce:c8:
6e:23:99:ec:d3:7e:60:64:18:37:7f:b2:96:a6:52:bc:ec:df:
81:aa:41:40:72:25:d9:01:42:99:1a:44:94:77:31:9c:c8:5f:
88:4e:34:ca:d0:3c:ff:6a:9c:3f:5b:01:20:9e:af:54:19:18:
ca:a7:11:7c:b9:19:0a:34:ae:f9:cd:2c:76:ba:5e:c2:da:a7:
f2:6d:57:b1:ac:c6:f5:5a:82:b4:13:38:53:46:28:62:1a:33:
36:de:a7:80:a7:af:42:a6:33:d3:5b:9f:86:db:16:66:fa:f2:
8f:f6:2b:dc:ff:37:c4:b7:12:20:d0:64:44:87:ad:eb:04:3f:
0f:fe:25:95:f7:90:26:da:92:89:a9:2d:c3:71:09:b5:2d:15:
50:f8:12:29:b2:74:5d:c5:fd:80:fe:5f:c0:3c:55:09:5e:12:
eb:ed:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:07:07 2026 by rpki-client