Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
File: 9ffGz7jHWxG31BX3mS0AZKRV6FA.mft (raw, json)
Hash identifier: 8xgYomVofowT6f+uEODcU3iuLf2lZQjzQoAAyNHu7yM=
Subject key identifier: E3:AF:55:25:B7:C4:EE:80:E8:2B:B3:08:29:F4:07:4D:05:75:99:63
Authority key identifier: F5:F7:C6:CF:B8:C7:5B:11:B7:D4:15:F7:99:2D:00:64:A4:55:E8:50
Certificate issuer: /CN=f5f7c6cfb8c75b11b7d415f7992d0064a455e850
Certificate serial: 01A0D124BF2F7B8777A16A528092A4AC67F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ffGz7jHWxG31BX3mS0AZKRV6FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
Manifest number: 11
Signing time: Thu 24 Sep 2026 02:00:41 +0000
Manifest this update: Thu 24 Sep 2026 02:00:41 +0000
Manifest next update: Fri 25 Sep 2026 02:00:41 +0000
Files and hashes: 1: 9ffGz7jHWxG31BX3mS0AZKRV6FA.crl (hash: qPF6VOwxg48gzmCKlh+MyMycVEcm3P7icVb86AFcL6k=)
2: Zx7Q8aKSaWd5VMFP4osRhni-9fM.asa (hash: cED8OgeMgvpEKX/+AxzFJiR9qympXx564F6hDopqC3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ffGz7jHWxG31BX3mS0AZKRV6FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:bf:2f:7b:87:77:a1:6a:52:80:92:a4:ac:67:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f7c6cfb8c75b11b7d415f7992d0064a455e850
Validity
Not Before: Sep 24 02:00:41 2026 GMT
Not After : Sep 25 02:00:41 2026 GMT
Subject: CN=e3af5525b7c4ee80e82bb30829f4074d05759963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:26:8f:67:3d:69:21:64:b7:c0:62:41:4d:
11:0f:e0:27:17:46:ea:6a:6a:22:cd:e8:c5:60:2f:
62:4c:87:93:8a:4c:a6:02:83:9e:ae:14:06:d6:53:
66:62:42:e4:00:55:76:17:e2:70:61:75:f9:90:66:
bc:81:db:55:0b:4a:a5:f1:9e:1f:d0:f0:71:3d:e5:
72:4d:25:7b:36:99:15:90:35:05:c1:97:4b:11:b0:
4f:2b:02:1b:07:62:95:20:e3:dc:3e:7c:11:fa:27:
6b:bb:3c:62:56:15:fb:37:54:3b:1c:28:be:0d:04:
82:af:a5:3f:56:54:f8:58:d4:f4:51:71:09:90:ce:
a5:7c:5c:17:d2:b4:30:5c:fa:78:b7:ba:cd:9f:77:
4c:9b:18:8e:61:33:7a:a8:1a:ad:01:48:1b:29:2c:
60:78:7d:02:df:93:e3:bf:68:0e:4f:db:f8:22:b9:
12:23:57:6b:9f:0b:af:0e:ca:55:8c:61:1a:e2:e6:
ba:7e:19:45:ab:99:c7:a6:72:44:db:34:03:a6:b6:
df:89:bf:59:c8:a0:21:f8:97:1a:d0:c5:11:18:9e:
2e:5c:4d:26:10:35:eb:04:7c:22:b9:ab:33:5e:3f:
3e:41:6c:a9:7a:5e:bc:a2:ca:7d:95:cc:4c:30:ca:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:55:25:B7:C4:EE:80:E8:2B:B3:08:29:F4:07:4D:05:75:99:63
X509v3 Authority Key Identifier:
keyid:F5:F7:C6:CF:B8:C7:5B:11:B7:D4:15:F7:99:2D:00:64:A4:55:E8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ffGz7jHWxG31BX3mS0AZKRV6FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:57:19:3c:aa:73:88:f8:4c:6c:8a:57:a8:bc:ca:78:57:f1:
bf:b4:dc:b6:44:8a:72:40:b6:a8:2b:4c:19:f6:06:83:dd:18:
fa:c2:87:60:99:ca:72:d8:89:74:84:67:34:ba:fa:03:72:e6:
5a:fc:be:c4:c2:da:9f:fc:36:d8:ac:ee:ec:04:cb:1e:87:62:
56:78:8b:2f:5d:61:8a:a1:26:ca:cb:de:b0:6f:45:48:15:e2:
c1:5b:05:8c:c3:5f:da:69:45:1b:09:b9:7a:72:52:5c:95:d2:
34:56:c5:3b:e2:6a:0e:32:3a:e4:3f:86:78:89:0a:70:3e:b5:
c0:69:09:e1:b8:99:96:d5:04:ef:ea:be:a1:26:fd:76:9e:45:
d7:66:72:73:8f:1b:33:d8:36:28:60:01:ac:44:5f:d8:b6:28:
dc:e7:a1:8e:39:b7:5c:56:d3:f0:75:81:24:52:c6:98:19:47:
57:50:66:ff:33:78:5b:6d:bb:15:95:1d:fd:75:46:87:29:ae:
b1:d9:8b:25:e0:4e:60:d6:b4:30:60:52:93:48:6a:47:39:e2:
92:98:ee:de:e4:64:d8:79:f8:ec:b0:82:a7:a1:7b:4e:4d:c5:
f6:65:a3:1f:5f:12:30:ba:10:28:30:85:e3:bc:6c:97:8e:21:
3e:1e:cb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:21:51 2026 by rpki-client