Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier: ccvkL+vD3Cx2bLYJvZC5yevHumilyXAU+WRD4x9eHac=
Subject key identifier: 8A:8D:9F:9B:65:0C:22:D3:9B:DB:F3:8D:B7:34:B1:3E:79:85:6A:38
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial: 01A0E0CFD85E1B2DFE02B7B18C6BBE04B2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 03:01:52 +0000
Manifest this update: Sun 27 Sep 2026 03:01:52 +0000
Manifest next update: Mon 28 Sep 2026 03:01:52 +0000
Files and hashes: 1: e06_jEIDuFW1OUI1Yr38xB0lxx8.roa (hash: gSYcnsHJnz/xJ/EuZcj8lHoCpS2M+qgzC3QMJw+m3cU=)
2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: dCXcc9MWvJuc4Pj2VZl9kpSyzACZbFos0klxK8pmmlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:d8:5e:1b:2d:fe:02:b7:b1:8c:6b:be:04:b2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
Validity
Not Before: Sep 27 03:01:52 2026 GMT
Not After : Sep 28 03:01:52 2026 GMT
Subject: CN=8a8d9f9b650c22d39bdbf38db734b13e79856a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2a:3d:f9:10:8f:06:da:f0:7c:8b:59:62:70:
70:5e:39:2b:80:8f:e5:cc:1c:c7:5e:06:dc:bb:ff:
4e:52:b5:70:08:30:6a:fc:57:b1:2d:ba:a6:26:52:
fb:d0:59:ed:6c:fa:0d:aa:97:12:e8:65:27:c2:13:
c8:d1:ff:6f:40:7b:61:5f:0a:43:87:64:26:29:e9:
a0:af:6e:68:d2:0d:52:11:ee:86:70:02:59:1d:17:
64:fc:b4:84:65:fd:5a:66:1d:47:ac:2e:04:e3:e9:
39:0f:e3:ad:4e:68:f6:10:60:94:20:e3:42:c0:a6:
3d:82:be:62:00:cf:3d:11:29:be:81:c0:25:d4:c2:
fc:39:39:f4:e3:c3:d1:f9:06:d2:fc:cd:25:5c:c5:
26:9d:f6:5f:0b:1e:09:a4:c0:82:a4:1b:34:80:86:
f4:dc:d4:87:b3:86:81:3e:84:7e:e9:50:d6:27:1e:
c8:48:2a:a6:01:67:3d:a5:fa:a8:47:4a:ba:ce:17:
92:30:5e:6e:cf:77:6c:e5:18:ed:d0:2f:a7:65:6b:
5d:b9:9f:cb:e0:d1:d2:7e:2f:5e:af:0e:c6:0e:9c:
34:fd:0f:f5:98:00:b2:78:7d:15:02:cc:53:e3:cc:
c4:6c:0d:4c:2f:8e:c2:7b:b4:07:22:05:dd:9d:fc:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8D:9F:9B:65:0C:22:D3:9B:DB:F3:8D:B7:34:B1:3E:79:85:6A:38
X509v3 Authority Key Identifier:
keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:60:d0:ea:5b:3f:c8:db:6f:d3:55:9c:db:89:17:87:8f:67:
ec:5e:96:68:d2:f2:da:0f:35:7b:18:07:4e:e7:83:de:1c:66:
aa:49:38:57:c5:9a:f6:34:e4:d0:69:43:f5:86:e4:20:83:bf:
a1:fe:bf:63:8e:e4:5d:0d:98:0b:e7:2f:30:10:b9:a6:b5:47:
73:e1:a9:57:1c:16:1b:ba:73:e1:44:bd:8f:9b:45:11:09:de:
89:bf:a9:dc:5b:30:5e:bb:f5:fc:50:fb:9e:b3:ba:f1:9e:51:
ab:69:18:3b:df:9a:db:f5:81:28:08:de:ea:33:12:97:00:26:
82:9a:61:a2:68:37:f2:35:49:6f:9c:db:7c:d8:8c:43:6e:18:
5b:ae:09:94:ea:e8:48:3e:8f:b7:a9:8c:12:d1:c6:ca:ce:4f:
2d:7d:cc:b5:80:94:eb:05:17:25:01:24:c4:b7:02:ab:2c:0a:
a4:ae:b7:84:85:e7:33:a7:78:23:3f:30:8b:ce:4b:09:e7:de:
ed:2c:86:16:f7:0a:24:f6:7b:77:96:6c:b1:fe:f4:2a:c8:35:
14:51:b3:aa:52:ea:70:ee:50:01:41:c2:6a:13:ff:c2:78:c0:
9a:d8:a2:85:9a:cf:03:b8:41:ec:a6:64:6a:29:8b:a9:f7:70:
a3:4a:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:02:46 2026 by rpki-client