Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier: N7aqqvowzI3sK0bhbaD2Yx64a+c8+iT3NcdzbZezaFU=
Subject key identifier: CC:81:1D:7F:3B:C4:FC:22:B4:AF:56:FB:F1:6E:07:66:28:A3:46:CB
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial: 01A0D5DDA8583AF454EBE4158499239F2C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number: 1A6A
Signing time: Fri 25 Sep 2026 00:01:08 +0000
Manifest this update: Fri 25 Sep 2026 00:01:08 +0000
Manifest next update: Sat 26 Sep 2026 00:01:08 +0000
Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: Iv1a/NAhpxTzLhOutcPsrJ2qnPwqUcmghjUW/DUC/aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:a8:58:3a:f4:54:eb:e4:15:84:99:23:9f:2c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Validity
Not Before: Sep 25 00:01:08 2026 GMT
Not After : Sep 26 00:01:08 2026 GMT
Subject: CN=cc811d7f3bc4fc22b4af56fbf16e076628a346cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:fd:ad:55:31:f8:77:80:a5:64:27:f9:9e:
11:cb:1f:bf:d4:d1:ca:bb:87:c6:9b:b7:f6:7b:70:
0b:b0:48:4c:c6:d4:07:25:1e:0d:35:11:64:90:f0:
6f:34:34:7f:71:e5:3a:86:3d:c8:28:d4:ea:8f:f8:
f2:33:00:bf:df:cb:a2:27:61:2e:2b:f3:d7:b3:cd:
4f:1c:1a:fa:2e:4c:2e:7a:4c:17:55:e2:36:24:4b:
b5:45:9f:40:c3:4a:4f:26:b7:28:2b:bb:e4:52:30:
5e:75:94:2a:27:5a:5e:08:be:e4:21:00:47:6e:5d:
73:f2:b3:bb:a9:15:5c:4e:87:2e:98:cf:d3:b2:8f:
f5:ea:a6:a4:4f:b9:cf:d0:f4:de:8c:c9:74:a6:6e:
a0:a4:1b:22:1e:b7:0c:78:60:d6:12:fa:5c:26:6b:
af:0c:de:b3:55:26:d7:c6:21:02:86:8b:e3:38:8f:
4f:c0:6e:e0:98:8a:6f:43:c5:df:66:6c:ba:34:7b:
04:c5:c4:fe:5d:54:d4:31:f9:6b:66:e6:a1:c4:86:
2b:c7:f6:96:76:6b:7f:a3:13:fe:e8:99:7e:35:6d:
03:9a:3c:89:97:a8:22:5d:5e:43:8f:50:c2:ff:a0:
a5:bb:bb:2a:73:0c:aa:74:51:4e:74:e7:2e:7e:44:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:81:1D:7F:3B:C4:FC:22:B4:AF:56:FB:F1:6E:07:66:28:A3:46:CB
X509v3 Authority Key Identifier:
keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cb:10:57:9f:f1:18:a7:89:b6:2c:2b:58:e7:7a:1d:59:41:
bc:4b:cf:db:31:8c:c7:0b:d1:89:44:7b:c8:8f:1e:4a:66:a5:
4f:02:64:8b:d3:4b:be:42:10:01:b1:08:e6:e5:aa:62:c9:3c:
79:ce:ce:b6:6a:63:38:fa:d7:7a:45:c6:f5:d3:4e:b9:89:fb:
b1:ae:ea:ec:c2:7c:d8:a9:d2:d5:28:ba:06:75:64:e5:24:95:
75:a9:3f:4a:00:61:99:ff:88:ee:1e:12:c2:ef:71:8c:30:da:
8a:83:0f:68:89:a6:57:6b:ff:09:73:de:7d:14:f5:70:db:ed:
41:2d:fa:04:1c:88:d7:72:4b:a0:10:5b:34:b7:75:4d:b8:c3:
a6:03:b5:aa:07:05:a8:32:d9:46:de:9c:de:b6:f0:8c:db:2f:
be:43:10:2f:af:40:ce:ae:cd:c4:86:2d:51:1a:03:49:36:b8:
8b:55:84:df:5f:53:f1:7f:f2:ac:4a:29:66:f8:93:03:7e:93:
b2:ce:b6:26:4d:2b:24:e8:1f:10:a1:1f:8b:a6:92:70:b0:4c:
c7:70:8f:72:47:2b:09:3b:3b:fb:65:f7:6c:a7:01:62:a0:bc:
7a:7d:28:53:59:11:6e:c1:9a:89:fe:4b:c1:c1:d8:34:c8:7a:
58:71:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:50:53 2026 by rpki-client