Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.mft
File: 9On4vS-aSts8ccewsDAHr7UwPek.mft (raw, json)
Hash identifier: xmaeqpDFGEQVNHnPWMn1gi02voDB8AAF2rPcDz+x3NY=
Subject key identifier: DA:BB:38:83:DA:B6:03:7C:ED:67:96:DD:C4:A1:D2:FD:F5:C6:54:B4
Authority key identifier: F4:E9:F8:BD:2F:9A:4A:DB:3C:71:C7:B0:B0:30:07:AF:B5:30:3D:E9
Certificate issuer: /CN=f4e9f8bd2f9a4adb3c71c7b0b03007afb5303de9
Certificate serial: 01A1DCB8F30A873C4BB7839E4D3C1631BD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9On4vS-aSts8ccewsDAHr7UwPek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.mft
Manifest number: 09
Signing time: Sun 15 Nov 2026 01:01:10 +0000
Manifest this update: Sun 15 Nov 2026 01:01:10 +0000
Manifest next update: Mon 16 Nov 2026 01:01:10 +0000
Files and hashes: 1: 9On4vS-aSts8ccewsDAHr7UwPek.crl (hash: VvI+1Dgw9W7PTRAc5fEoiehwcsq374A8ZpQWwrUsAqY=)
2: MGzCP-3egIZv-ryFkuQCUFDWEqs.roa (hash: bJhpD6FoorD1c1XWBALWLkhn3d9wdJmlj8XJVxONDqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9On4vS-aSts8ccewsDAHr7UwPek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:f3:0a:87:3c:4b:b7:83:9e:4d:3c:16:31:bd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9f8bd2f9a4adb3c71c7b0b03007afb5303de9
Validity
Not Before: Nov 15 01:01:10 2026 GMT
Not After : Nov 16 01:01:10 2026 GMT
Subject: CN=dabb3883dab6037ced6796ddc4a1d2fdf5c654b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:b1:fa:2e:6b:66:79:f3:c0:17:e8:36:f5:
67:05:46:65:1b:1c:08:3a:cb:e8:0f:fd:88:1f:23:
6e:13:27:5f:b3:7c:2e:72:a2:da:10:db:9d:e6:32:
6b:cd:0c:a1:60:7e:cb:51:db:35:b4:17:00:ce:d2:
4d:7e:04:64:91:f3:35:22:ce:a8:97:0d:02:0a:e9:
6e:22:97:40:49:eb:0d:7c:ca:1b:0a:4d:be:a5:63:
53:96:33:c5:98:04:5f:2b:46:b6:a4:74:2c:65:89:
26:e6:bd:c1:0e:78:d4:a8:22:ed:c4:04:25:1e:1a:
6f:b7:cf:b6:ed:fc:32:af:ff:23:ca:1d:c3:5d:f2:
bf:e4:06:52:ca:f6:cc:9e:7b:54:ea:10:41:e3:b5:
a3:7d:8b:f8:e7:87:53:88:e7:76:c2:d0:b9:e4:24:
e6:bf:a2:dd:fc:2a:40:25:6e:64:f1:72:e1:aa:d4:
51:f2:87:d2:1d:a3:7a:c6:68:ef:ee:9b:67:80:63:
a5:78:bc:db:02:e9:51:26:67:87:98:26:3d:b2:fc:
43:3b:9f:fe:4d:73:ac:1e:a1:44:41:c4:98:0d:27:
a2:34:c3:47:fa:2c:4d:8f:84:1b:50:fe:43:6a:13:
75:f5:99:c6:84:50:2c:be:33:54:20:8a:89:dd:4b:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BB:38:83:DA:B6:03:7C:ED:67:96:DD:C4:A1:D2:FD:F5:C6:54:B4
X509v3 Authority Key Identifier:
keyid:F4:E9:F8:BD:2F:9A:4A:DB:3C:71:C7:B0:B0:30:07:AF:B5:30:3D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9On4vS-aSts8ccewsDAHr7UwPek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:65:9f:50:05:ae:e3:c7:a6:ba:99:68:b3:b6:ff:12:17:76:
3f:ae:97:5a:41:3f:bd:ba:c5:32:82:6b:b5:7a:fd:d6:b6:61:
ff:40:2f:79:31:9f:7a:73:53:f7:3f:85:39:d1:9b:de:53:1f:
d7:4e:6b:13:60:20:a9:78:1e:1e:eb:d0:2c:29:89:00:8a:0a:
e8:c3:2b:c6:a1:1a:bf:e2:73:77:fb:60:b1:5b:1d:c9:ba:f4:
59:2c:c8:08:a2:eb:39:a0:cd:96:16:79:8b:02:ba:aa:aa:e8:
f8:dd:08:77:1f:02:5e:eb:03:40:35:5a:20:e8:c9:bf:61:97:
30:f6:01:3a:a9:55:f5:b8:96:84:a4:3b:15:99:f3:78:12:87:
47:d3:0f:92:81:50:77:5e:71:c6:df:65:df:97:bf:db:50:65:
a1:09:9d:80:21:7b:6b:8b:f1:7d:c2:44:04:83:fb:f9:a0:a4:
fa:62:b5:d0:cc:56:08:6a:b2:6f:ac:73:b9:c4:4b:59:1a:af:
c2:82:c6:96:a1:ca:8f:02:b4:bd:71:a9:4d:d7:d6:2d:34:cb:
ba:cb:88:62:bf:a2:69:c6:de:02:a3:27:b6:51:cd:fe:94:ff:
32:22:da:a6:89:16:7b:a7:85:e3:06:74:e7:87:64:29:35:d7:
80:3e:cd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:07:52 2026 by rpki-client