Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File: 9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier: sLCqhnp/iNFy+ygIzTdK9EHylDZQlMak+xBZyDIWJZg=
Subject key identifier: 71:DD:E9:AE:19:A4:08:FE:68:04:0A:25:63:C7:77:C5:28:CC:59:A7
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 01A0CEFFB64E97C14605C70FBB71349B756D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number: 1A71
Signing time: Wed 23 Sep 2026 16:00:59 +0000
Manifest this update: Wed 23 Sep 2026 16:00:59 +0000
Manifest next update: Thu 24 Sep 2026 16:00:59 +0000
Files and hashes: 1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: tCLSjHVqvmY3QWPtvIeadXa8haEfO6VkPJ4c17u9/OM=)
2: F_LtpihnOZSFHJv85nIVJ4V102M.roa (hash: 8yvnxuLRYXxGLDUJznrlW7WBOZGiJ5tUpgMx642UXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:b6:4e:97:c1:46:05:c7:0f:bb:71:34:9b:75:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: Sep 23 16:00:59 2026 GMT
Not After : Sep 24 16:00:59 2026 GMT
Subject: CN=71dde9ae19a408fe68040a2563c777c528cc59a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:73:b2:0e:14:5c:85:7a:92:11:38:18:af:99:
82:7c:3b:1f:59:b2:e0:6f:73:54:6e:a8:df:29:05:
94:01:6f:6e:9d:8b:05:a8:d0:fd:f1:e5:84:d4:b0:
ea:96:0c:24:c3:14:80:cb:e4:4a:78:02:0a:65:51:
43:75:ae:9d:10:23:1e:9f:22:02:9a:41:ac:7b:21:
6f:32:fc:75:7f:b2:f6:90:d9:b6:e2:c8:7e:63:ed:
63:b1:3e:94:f7:d3:cd:1a:f1:24:4f:bd:6b:3d:52:
42:95:f9:f3:9d:22:ea:69:47:17:9b:d0:2a:18:2a:
97:2a:3b:c3:0d:15:64:ab:15:2c:5e:61:ac:28:74:
31:c1:50:c3:5a:be:55:b3:8c:d5:a4:b4:a4:ae:4b:
03:2f:4a:52:41:6f:1b:5e:03:4a:83:ef:23:01:77:
d1:e6:26:7c:6a:72:8c:69:1f:89:50:6c:3f:d6:ef:
e4:74:56:d5:68:98:47:21:06:d1:0b:26:af:49:c4:
33:2f:f5:1a:cd:03:17:90:89:dc:94:19:bd:b5:15:
da:3a:18:45:fd:f6:67:11:d1:cd:8e:77:59:e1:26:
94:57:97:32:4b:8a:67:6d:a7:81:ef:9c:b7:1e:33:
99:14:9a:66:e5:09:b0:c4:06:93:f9:6f:35:13:23:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DD:E9:AE:19:A4:08:FE:68:04:0A:25:63:C7:77:C5:28:CC:59:A7
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8d:8e:6c:da:e6:c5:d8:5b:f1:ee:f4:56:80:a1:ba:39:ca:
ca:18:ef:39:8f:53:13:5e:ff:dc:52:d9:ff:91:1d:de:1f:b1:
4a:ec:01:9f:a1:6f:3a:f1:e1:65:ac:1b:b8:1e:ae:ac:b4:d2:
c6:5f:98:ed:34:fb:4e:28:44:ae:bf:a8:48:56:96:c3:5a:ec:
75:46:b3:d4:6a:96:1c:94:dd:65:05:50:13:04:30:90:ab:cb:
52:78:06:17:68:2b:20:ca:78:fe:fb:40:9d:5b:95:1a:1d:f3:
1f:0f:08:b5:d6:93:f3:0b:b7:97:ad:6c:c4:32:5c:13:8f:3c:
b0:2b:ca:9e:0e:ef:a5:6d:6f:4d:a6:7f:d1:50:c4:59:ca:89:
b6:73:fb:46:cf:d2:f5:6c:81:4d:b7:a5:9f:0e:22:91:c1:11:
22:96:d8:b1:e6:2b:c0:3f:be:4d:b0:c5:88:13:79:f1:38:f1:
42:07:65:cd:d9:21:77:0e:79:2e:4f:0e:3b:e7:01:04:ad:9d:
a4:6b:79:f2:5f:fb:e3:cf:1c:b3:f3:19:97:e4:78:a1:92:06:
c2:e0:5b:0a:a9:f3:00:a6:81:e4:a7:84:04:1d:77:16:63:20:
e6:87:bb:c2:18:b4:81:96:aa:bd:6f:49:81:35:1e:4e:76:c1:
45:cc:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:49:46 2026 by rpki-client