Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
File: 9aSNNBWgK5T1T-4rZZSPJetPfdo.mft (raw, json)
Hash identifier: p2uyVatX0o1LpmpPllgkLqhW2d0Pzk3lPCYOcQBzcxE=
Subject key identifier: 5B:D2:58:0B:E6:1A:BA:31:D9:69:63:F4:D0:DE:A6:80:F3:DB:2E:B3
Authority key identifier: F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
Certificate issuer: /CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Certificate serial: 01A0CDECD0BE81873D1E04149ABAE51C09FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
Manifest number: 0114
Signing time: Wed 23 Sep 2026 11:00:44 +0000
Manifest this update: Wed 23 Sep 2026 11:00:44 +0000
Manifest next update: Thu 24 Sep 2026 11:00:44 +0000
Files and hashes: 1: 9aSNNBWgK5T1T-4rZZSPJetPfdo.crl (hash: z/3lGOdoXCHTrw+6ckZwRMAiCCgSQTrdqaeGb3WzmIU=)
2: KB-nu_fDuo0XIMgqWugjNtPelKM.asa (hash: xVtyR3/ZytBeSN3L364bzhtV6xgki7m57Wrm3JRE2Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:d0:be:81:87:3d:1e:04:14:9a:ba:e5:1c:09:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Validity
Not Before: Sep 23 11:00:44 2026 GMT
Not After : Sep 24 11:00:44 2026 GMT
Subject: CN=5bd2580be61aba31d96963f4d0dea680f3db2eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:e4:f8:6e:5d:ff:69:0f:4c:fb:62:c3:7c:
a3:ed:15:05:fc:f5:58:0e:52:1f:16:f1:c1:c3:9a:
21:09:86:7a:5f:07:bd:cb:c6:bb:ea:19:21:03:37:
59:08:e8:c0:cd:ff:51:89:09:f4:7a:40:47:59:8e:
e6:7d:51:f6:12:51:20:e9:4b:23:4f:3e:b5:6a:fe:
af:bf:22:6c:e0:f9:a4:7a:3d:96:91:98:27:02:33:
b7:89:1b:05:16:f8:bc:64:25:35:00:7d:1f:f9:2e:
ae:73:63:af:7d:4b:ca:5d:80:02:c9:30:91:de:09:
bf:b2:89:dc:67:8c:c4:42:ca:6d:27:64:b2:fc:64:
dc:a9:4c:01:04:db:16:8b:49:d8:d1:13:83:51:ac:
b3:a8:2e:bd:4d:60:a8:48:39:1c:20:ac:06:7b:4f:
60:0c:6f:b9:36:29:29:cc:d6:05:b9:2a:26:5e:f5:
4d:09:92:ae:aa:87:13:ed:be:69:51:29:2c:6f:6d:
9d:51:de:ae:91:8f:7f:82:2d:68:9f:56:fc:0e:42:
c2:d6:0d:79:c5:9b:d3:b3:24:cc:e6:24:ab:cd:b6:
c3:4c:29:45:c3:88:9b:10:42:1f:23:84:ca:2b:27:
89:05:3d:19:b4:8f:05:c9:56:c0:67:4b:46:cf:f0:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D2:58:0B:E6:1A:BA:31:D9:69:63:F4:D0:DE:A6:80:F3:DB:2E:B3
X509v3 Authority Key Identifier:
keyid:F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3a:de:b5:56:0b:f5:a7:d9:6e:fc:99:8d:93:f2:5c:af:8e:
bc:44:4f:fd:5d:86:a6:6f:a4:b1:54:aa:65:c1:c1:30:64:a7:
c8:13:ad:2e:5c:3c:0b:a0:a6:37:a8:14:24:4f:41:91:52:8d:
86:62:11:71:90:1d:93:9a:b2:47:3e:78:39:03:6d:03:44:bb:
96:ac:bd:9f:05:cb:eb:2a:cc:fd:89:e7:38:27:07:86:1b:b4:
94:f1:11:ed:65:65:6f:0c:c5:ad:bb:49:d4:55:7f:fa:1a:44:
81:79:34:12:37:75:1e:b4:e0:22:59:0d:9b:53:8a:df:63:f3:
7b:8c:e3:2e:22:c1:cd:ae:a1:4e:b0:01:c5:a2:4c:29:d4:92:
75:da:48:54:e8:fc:40:69:a6:b0:27:a3:43:b0:9f:43:f0:0b:
d6:f6:fa:1f:6b:0f:73:33:b2:b0:d7:5f:5a:05:2c:85:72:08:
61:a3:3a:e3:7d:ae:33:96:7b:83:2f:6d:36:ea:3a:9e:0a:6c:
2a:6a:f0:df:36:bf:b7:7e:bc:37:cb:e3:62:5f:3f:7c:0b:9d:
c8:87:34:86:be:66:3e:a3:2f:a8:43:5b:ce:9e:56:d7:cc:59:
eb:e3:00:d9:9c:cd:03:74:dd:c8:7b:35:7a:a8:95:60:ec:51:
6a:b7:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:18:30 2026 by rpki-client