
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File: 9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier: DxAoXxMr2hba4N9hLa2oIoCwp9jUF3p/fNfLVrt5oxA=
Subject key identifier: AB:44:27:66:E4:04:03:7A:80:A1:CD:15:55:78:4B:D6:7C:31:2B:4F
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer: /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial: 01A0C9D8D0A1C046F57AF6DAC4BC77A7812C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number: 16F6
Signing time: Tue 22 Sep 2026 16:00:24 +0000
Manifest this update: Tue 22 Sep 2026 16:00:24 +0000
Manifest next update: Wed 23 Sep 2026 16:00:24 +0000
Files and hashes: 1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: XPiZvTqGBm6o6qPhk6Wv4Eb8t2tbws9E7fmHWC9x6lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:d0:a1:c0:46:f5:7a:f6:da:c4:bc:77:a7:81:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Validity
Not Before: Sep 22 16:00:24 2026 GMT
Not After : Sep 23 16:00:24 2026 GMT
Subject: CN=ab442766e404037a80a1cd1555784bd67c312b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:64:ab:05:aa:a2:4e:79:b4:93:99:f4:ff:
c4:02:23:3a:59:a5:ad:2e:ae:04:20:1c:f0:2d:1a:
51:c3:d2:39:23:3a:d2:e3:93:55:55:74:e8:af:f9:
a5:08:fa:18:10:2d:21:79:cb:92:ac:e4:1b:52:c7:
92:05:8b:d2:44:43:f3:fd:64:80:85:94:57:01:60:
59:36:d2:5d:a4:c1:66:b3:36:9c:2c:0d:2c:30:a7:
d2:d2:af:c4:df:6b:a6:95:9f:03:a1:b8:9f:04:cc:
ab:e2:fd:29:51:a2:18:5c:d0:a3:38:29:f2:1b:b3:
a2:2a:d8:58:b5:48:58:2c:cb:94:ab:66:5d:30:75:
1c:d0:a2:7e:91:74:09:30:2b:eb:e6:31:d6:5b:89:
47:4e:d4:b8:8d:ac:45:c3:9b:b4:e4:42:18:98:c7:
15:06:2e:0f:8e:0d:9c:65:39:52:55:cf:3d:1e:3b:
57:56:14:57:6b:50:d3:64:1c:96:fa:05:d3:ea:b8:
22:ef:3b:08:ac:cb:d6:fd:93:3d:0e:02:dc:93:b5:
0d:dc:77:9e:cc:16:45:4c:74:42:8a:ce:2f:74:71:
33:ca:5b:ee:9f:5a:87:fb:aa:c7:75:d9:f3:67:4f:
29:cc:db:b6:88:5d:db:af:44:9b:ca:37:c0:96:48:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:44:27:66:E4:04:03:7A:80:A1:CD:15:55:78:4B:D6:7C:31:2B:4F
X509v3 Authority Key Identifier:
keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:92:d6:1d:64:30:70:a0:aa:bf:77:3d:4d:49:f0:64:05:26:
b9:c6:67:98:c0:6c:19:00:c7:32:8c:90:4e:63:c9:e5:fe:4b:
ff:57:61:07:c7:cf:22:c2:78:88:d9:b9:cf:7a:d6:e1:8e:66:
c8:67:33:03:ee:84:84:03:3c:c1:2c:7c:a1:70:55:dd:2f:12:
c7:d5:71:bd:18:bf:17:17:93:b3:7a:9a:02:b8:fd:4c:59:37:
09:e9:9d:2d:b0:cc:04:70:b5:d7:4a:5b:5c:56:67:b7:6f:c6:
5b:a0:29:ed:47:ad:75:d3:98:a9:89:99:06:b2:03:c2:8a:be:
96:ad:70:5a:ff:da:1e:ec:7a:d7:1b:0f:20:98:a5:34:42:69:
08:e6:5b:b2:af:52:cf:a6:64:62:57:4b:70:c9:e4:c6:6f:a3:
6e:59:26:57:b1:c9:64:64:2c:f9:c8:aa:f9:64:2d:00:61:51:
ce:ca:3e:6d:f5:8e:bc:8d:cb:c2:fe:70:67:28:ef:ec:f4:6f:
71:0a:4d:3c:06:a6:be:b3:47:e2:a6:54:e2:7c:7d:60:6b:0d:
3c:4c:23:d3:90:94:80:7b:26:56:e2:bb:f6:79:f5:8e:9e:58:
04:82:8d:12:a6:b1:e4:8b:7d:a4:2c:66:26:fa:b0:15:05:14:
c5:04:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:37:23 2026 by rpki-client