Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
File: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft (raw, json)
Hash identifier: lAyAdgHZT2W3XX9YuK9BFTbLMljXBht3lg68nYpa52k=
Subject key identifier: 2C:AE:A6:74:FF:73:75:C0:80:83:85:73:84:DD:B3:0F:C7:D0:AE:91
Authority key identifier: F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
Certificate issuer: /CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Certificate serial: 01A0CBC7A622BD83048273829D18750DC372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
Manifest number: 0E75
Signing time: Wed 23 Sep 2026 01:00:54 +0000
Manifest this update: Wed 23 Sep 2026 01:00:54 +0000
Manifest next update: Thu 24 Sep 2026 01:00:54 +0000
Files and hashes: 1: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl (hash: HELHWa6dD+SZ7NSL4BCPMglQDTRkyvC3EjJt+GrlrMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:a6:22:bd:83:04:82:73:82:9d:18:75:0d:c3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Validity
Not Before: Sep 23 01:00:54 2026 GMT
Not After : Sep 24 01:00:54 2026 GMT
Subject: CN=2caea674ff7375c08083857384ddb30fc7d0ae91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:51:59:0d:d1:76:a0:ef:34:98:02:02:ca:
49:95:39:c5:46:ed:a7:e1:dd:01:60:72:23:c2:b1:
4e:7c:35:c0:06:c0:6b:21:d4:d3:2d:29:32:ef:79:
f6:2f:f3:d4:0a:5c:96:69:1f:69:bf:fa:90:f1:26:
91:58:a5:0f:b1:e4:10:3c:84:fb:b8:90:55:9d:60:
1e:07:0a:71:54:bc:0d:48:67:f3:3f:f4:1b:84:a3:
16:34:20:ec:c1:10:cf:8c:8a:18:0f:4d:45:15:7e:
36:bf:82:2e:03:08:64:1b:b9:5c:d7:67:1b:77:41:
4e:f6:5b:83:1f:35:0b:06:83:aa:90:9b:74:23:ed:
ac:19:ad:e0:01:1e:6d:19:96:cc:c0:3d:24:28:dc:
e0:67:a2:d0:de:b1:a8:c5:d9:29:c4:56:48:53:e9:
47:e9:82:e5:b8:65:89:c3:63:99:68:40:8c:b6:5e:
b8:f2:6c:45:0a:56:4c:60:f8:13:1a:5f:53:8e:45:
f5:fa:04:93:10:a9:56:20:f4:da:67:d5:fd:8c:2b:
ed:7f:41:7a:50:0d:34:65:f8:cd:73:50:69:33:fb:
8a:84:f6:23:74:d9:14:fe:0f:56:1f:94:2c:12:37:
68:cc:e8:30:a2:88:29:98:9a:79:a5:96:c8:92:cf:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AE:A6:74:FF:73:75:C0:80:83:85:73:84:DD:B3:0F:C7:D0:AE:91
X509v3 Authority Key Identifier:
keyid:F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e2:37:89:6f:ca:9b:59:4d:0b:2a:98:9b:ce:44:b7:ef:30:
99:58:2d:35:c1:14:b3:a8:b0:59:0d:b4:73:57:15:e4:86:fc:
bc:99:a3:f6:db:aa:ac:1f:12:6f:c1:b4:ff:52:d2:08:e0:e9:
ad:cd:17:ed:f5:43:0d:aa:23:84:a5:d5:ce:d6:cd:d2:60:98:
59:5b:74:4d:e9:a3:af:04:92:3b:ae:b4:2f:9a:b4:d6:d4:2e:
e5:27:82:c6:8e:7a:e1:b8:b1:f2:a5:a7:33:2e:79:2c:4a:0f:
e3:4d:42:0c:b5:6c:c1:cf:b1:49:30:3e:b6:72:63:e3:65:41:
ac:c8:e6:42:f1:06:20:ff:87:39:b9:fc:5f:77:6e:4d:98:46:
d2:ca:31:9a:d4:c2:74:92:66:a5:9f:dc:6e:b3:26:9a:e0:52:
cb:cd:df:84:cd:9b:44:3d:c8:b1:65:b8:f3:e5:ef:6e:2f:42:
a4:17:8c:d1:92:f7:68:69:16:34:d3:aa:56:0a:55:94:af:d3:
6c:48:3a:e9:ba:b2:15:5d:84:de:d6:d6:3b:83:1a:5e:57:e4:
84:39:4e:64:09:a9:2c:ad:93:08:af:25:2d:fb:70:f6:92:0b:
85:7a:02:a8:16:99:1a:19:84:55:26:86:b4:25:9f:1a:ef:a4:
8e:21:69:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:03:18 2026 by rpki-client