Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier: SB4f15DYqOStBCtUJXCkBk/ZzveGsbJ1m9VesDZgyWo=
Subject key identifier: 2B:67:3A:4F:35:22:52:47:4D:40:09:B8:56:7E:DB:38:50:EB:78:DE
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 01A0D916DE03BBDA81CBA2AA762B279679B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number: 0B40
Signing time: Fri 25 Sep 2026 15:02:29 +0000
Manifest this update: Fri 25 Sep 2026 15:02:29 +0000
Manifest next update: Sat 26 Sep 2026 15:02:29 +0000
Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: XvwI6FHhB7j4qM79OeR/3LXnEOBMhBaCxgkntyG7UKM=)
2: XFAB8dGfZx_QXDK6Kld_xwViMJw.roa (hash: H6Sf/b3mZ3PIXiHfD9wOVIrsUeA+yHGGwcGYDodBCc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:16:de:03:bb:da:81:cb:a2:aa:76:2b:27:96:79:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: Sep 25 15:02:29 2026 GMT
Not After : Sep 26 15:02:29 2026 GMT
Subject: CN=2b673a4f352252474d4009b8567edb3850eb78de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:10:52:20:22:9a:67:20:10:27:8a:2d:73:
16:40:a6:f2:2c:cc:2b:92:d1:b1:08:0c:cf:c2:e2:
00:d2:9d:4f:cb:f2:9c:c3:28:42:8e:7d:c7:2d:32:
32:44:20:21:02:70:ee:53:44:28:7d:ef:14:f5:ff:
f8:39:5f:8e:b2:09:28:79:f7:24:c6:a9:9a:bd:87:
4c:97:04:64:77:2c:6c:e7:c8:77:ef:42:0d:a0:10:
da:2a:0e:7c:15:e6:b7:3c:b1:9c:4b:2d:17:2f:94:
57:c1:fa:1b:b7:ac:36:64:e1:9b:03:8a:b2:68:26:
17:ae:66:e3:5c:a8:ce:18:5a:57:90:af:ad:97:3b:
42:ae:43:99:b2:17:ca:b5:a0:9a:85:ad:75:90:02:
6c:dc:ba:4a:dd:72:82:9b:43:a7:1a:ae:2d:c9:21:
bf:84:3b:5d:81:22:b7:2f:70:66:9e:9d:22:5c:12:
8b:7f:51:2b:c3:a5:fc:77:7a:54:45:91:e7:d3:a3:
6a:5c:97:dc:d7:06:e4:e8:fc:a5:cd:dd:1f:92:e7:
e0:4a:1b:4f:0d:e8:ac:c6:62:15:0f:9e:ba:11:fa:
4a:11:82:39:39:dd:87:d8:17:ed:35:c6:56:7c:cb:
eb:36:d0:6f:49:96:48:bc:54:28:54:d3:c5:3b:5e:
09:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:67:3A:4F:35:22:52:47:4D:40:09:B8:56:7E:DB:38:50:EB:78:DE
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d1:17:9b:a4:02:67:8a:f0:3e:9e:ae:82:f1:33:96:33:65:
5d:e6:83:06:04:00:8a:00:53:e9:8e:dc:4c:91:18:b8:e4:a5:
c1:e2:23:64:5e:ad:97:88:7b:50:5a:13:21:9c:e7:e1:55:6e:
18:12:f1:08:a8:07:d2:ae:b5:77:19:07:df:c5:f2:1f:cb:0b:
a9:27:c9:08:0d:67:ef:2e:22:f2:b8:0e:43:df:85:26:eb:5c:
a4:35:bd:9b:04:0f:2f:13:d5:f9:12:26:57:b7:c1:94:59:a1:
27:11:06:f9:4f:50:23:a0:34:84:13:f9:16:35:25:10:24:be:
61:d7:a1:c8:82:b2:ef:57:af:ad:fc:e9:0c:86:62:90:63:b7:
1d:be:eb:f3:bb:19:93:16:79:a0:ea:70:66:01:69:3b:39:f9:
42:40:71:04:c3:67:89:3c:fc:a8:ab:92:11:ae:bb:04:de:f9:
e3:4f:80:c4:f5:37:5f:63:ed:38:80:0f:57:34:a5:43:b6:b4:
bc:4b:99:93:df:56:b6:79:ab:fe:31:a2:42:ae:27:54:46:31:
56:01:c1:fa:e3:67:e9:0d:70:29:53:b0:b8:b4:d8:06:31:e2:
2f:3e:a2:a8:d0:5a:32:00:53:c5:d7:cd:1f:d0:5c:6d:ba:ef:
7e:01:1d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:17:24 2026 by rpki-client