Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: TSRygzlOcAYgr5cP5Q/RdyNAS9twJC4ReQi/9I/wILg=
Subject key identifier: C1:D7:20:91:3A:2A:B6:BD:D6:C9:5E:7E:79:60:BE:FA:30:BE:58:80
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 01A0E73FA9A659FB6D41910301DDD2215CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 0A49
Signing time: Mon 28 Sep 2026 09:01:43 +0000
Manifest this update: Mon 28 Sep 2026 09:01:43 +0000
Manifest next update: Tue 29 Sep 2026 09:01:43 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: T1/2V2Eg4MJIBzrnmeuyYEVUdwihJKRIj3QybCWbbL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:a9:a6:59:fb:6d:41:91:03:01:dd:d2:21:5c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Sep 28 09:01:43 2026 GMT
Not After : Sep 29 09:01:43 2026 GMT
Subject: CN=c1d720913a2ab6bdd6c95e7e7960befa30be5880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:97:3b:d7:15:66:42:05:2b:53:fd:42:c1:
6b:4d:e2:38:93:04:bd:68:65:e9:a3:50:5a:8d:2e:
25:6f:57:32:61:a5:bd:1e:f5:b2:4c:91:46:cb:31:
fc:85:0c:eb:9a:50:3b:6f:37:8d:22:19:5b:71:ec:
3a:35:2c:a8:6a:4a:ff:6d:b0:dd:0d:06:6d:6d:ad:
12:3f:4a:96:9b:83:13:34:ad:6d:05:60:2b:35:92:
00:36:97:2e:a1:48:40:6a:6b:6c:c8:ef:54:88:80:
05:83:72:e1:45:75:9f:c5:f2:ee:95:5a:91:da:32:
3c:ab:ae:1a:a9:b1:f4:e2:b3:f9:8d:3b:e9:d7:dd:
af:7a:5c:e0:56:4c:fe:0e:2d:da:6f:99:70:3b:cf:
b7:18:3b:d0:f8:0a:ce:95:74:ab:04:d4:df:87:63:
a8:5e:db:b7:a8:73:fb:a4:84:05:39:f8:b0:5b:16:
9e:79:00:4a:0e:93:35:0b:c4:73:ca:ff:e5:65:5a:
5b:25:0a:53:d8:59:5e:32:fd:9e:c1:5e:45:45:a9:
22:58:3c:50:12:9c:74:01:eb:91:d7:e7:db:51:5f:
0d:5f:77:d6:15:72:fa:fe:98:57:78:28:b9:9f:12:
29:4c:cd:47:86:19:3b:73:cb:59:a0:f9:4f:30:8e:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D7:20:91:3A:2A:B6:BD:D6:C9:5E:7E:79:60:BE:FA:30:BE:58:80
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:df:6d:d1:3b:0c:9e:0f:47:8d:ef:ac:32:5f:ed:4d:07:59:
c6:69:6c:f1:74:22:62:87:91:73:cc:d2:ac:18:34:bb:f5:26:
fd:c0:7f:8b:71:a0:f8:65:b6:d7:31:41:60:dd:31:92:92:cf:
47:d3:30:af:7f:5d:a2:c4:2d:55:1c:9f:7b:f7:aa:de:0f:77:
4e:89:4d:5e:fe:c7:c6:08:2d:90:d7:a0:45:4c:5a:9f:2c:cc:
4e:17:a3:f9:00:be:dc:f4:c5:ec:69:61:ba:e9:98:52:03:93:
5c:ad:d1:8f:b5:59:23:dc:50:54:c3:45:3d:c9:89:3e:a9:7a:
17:2a:4f:41:c5:07:3a:7b:16:56:16:e5:fb:ee:1e:c1:44:8e:
af:45:c4:70:3a:9a:6e:af:50:42:ad:87:32:eb:69:7e:46:e2:
07:74:bb:aa:e3:15:0b:b4:09:4a:0a:96:2d:a0:d5:17:d9:01:
5f:38:c8:09:82:dd:fb:cc:e2:d4:62:6b:d5:35:46:ba:dd:1d:
ed:90:8e:44:39:da:13:13:01:a6:25:c8:73:bc:62:0a:fb:f9:
e2:9d:82:b8:de:fa:e6:23:ac:4c:6c:ee:4b:dc:ef:1e:4c:86:
b9:45:83:16:d2:04:d6:32:a4:ac:96:c0:4d:39:47:a9:fb:ce:
1f:3a:69:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnP6mmWfttQZEDAd3SIVzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDQ2MDU5NmQ2ZDUzMjQwMWRlMzEzZGY4OTAzNjZlNTM3
NmQ2MDIwHhcNMjYwOTI4MDkwMTQzWhcNMjYwOTI5MDkwMTQzWjAzMTEwLwYDVQQD
EyhjMWQ3MjA5MTNhMmFiNmJkZDZjOTVlN2U3OTYwYmVmYTMwYmU1ODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszeXO9cVZkIFK1P9QsFrTeI4kwS9
aGXpo1BajS4lb1cyYaW9HvWyTJFGyzH8hQzrmlA7bzeNIhlbcew6NSyoakr/bbDd
DQZtba0SP0qWm4MTNK1tBWArNZIANpcuoUhAamtsyO9UiIAFg3LhRXWfxfLulVqR
2jI8q64aqbH04rP5jTvp192velzgVkz+Di3ab5lwO8+3GDvQ+ArOlXSrBNTfh2Oo
Xtu3qHP7pIQFOfiwWxaeeQBKDpM1C8Rzyv/lZVpbJQpT2FleMv2ewV5FRakiWDxQ
Epx0AeuR1+fbUV8NX3fWFXL6/phXeCi5nxIpTM1Hhhk7c8tZoPlPMI5HxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHXIJE6Kra91slefnlgvvowvliAMB8GA1UdIwQY
MBaAFPVEYFltbVMkAd4xPfiQNm5TdtYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hOWVkZTItMjhjMi00YmVmLTliZWYt
YzgwOWMwYTQwODg4LzEvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hOWVkZTItMjhjMi00YmVmLTliZWYtYzgwOWMwYTQwODg4
LzEvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmd9t0TsM
ng9Hje+sMl/tTQdZxmls8XQiYoeRc8zSrBg0u/Um/cB/i3Gg+GW21zFBYN0xkpLP
R9Mwr39dosQtVRyfe/eq3g93TolNXv7HxggtkNegRUxanyzMThej+QC+3PTF7Glh
uumYUgOTXK3Rj7VZI9xQVMNFPcmJPql6FypPQcUHOnsWVhbl++4ewUSOr0XEcDqa
bq9QQq2HMutpfkbiB3S7quMVC7QJSgqWLaDVF9kBXzjICYLd+8zi1GJr1TVGut0d
7ZCORDnaExMBpiXIc7xiCvv54p2CuN765iOsTGzuS9zvHkyGuUWDFtIE1jKkrJbA
TTlHqfvOHzppMQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:02:47 2026 by rpki-client