Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
File: 9i4OVeXFow7AS9bcRtFUs-S3tfU.mft (raw, json)
Hash identifier: Rq3ZaSUVGnUVnpGyrATlCIDr5oFiYW0fduO8j3hEz0s=
Subject key identifier: F7:74:70:2D:09:2B:FA:37:FE:B3:4D:9E:03:23:5D:09:5D:34:E0:5E
Authority key identifier: F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
Certificate issuer: /CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Certificate serial: 01A0CE2497656DEBD2A189362EE8AB1ABCFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
Manifest number: 0EA7
Signing time: Wed 23 Sep 2026 12:01:39 +0000
Manifest this update: Wed 23 Sep 2026 12:01:39 +0000
Manifest next update: Thu 24 Sep 2026 12:01:39 +0000
Files and hashes: 1: 9i4OVeXFow7AS9bcRtFUs-S3tfU.crl (hash: VfkD86r4NlJFznjAOLDQBZqpCC1+XPMzH5JrPj1dz/c=)
2: tFVRD_-pjyGAXBK1B4RnTlbS06Y.roa (hash: rxdXUltbYBZphQ4R9SWeek1/7cVm9u/f4Eo1gHxec1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:97:65:6d:eb:d2:a1:89:36:2e:e8:ab:1a:bc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Validity
Not Before: Sep 23 12:01:39 2026 GMT
Not After : Sep 24 12:01:39 2026 GMT
Subject: CN=f774702d092bfa37feb34d9e03235d095d34e05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:31:83:3e:12:7c:aa:09:56:fc:17:9a:4b:
9e:1f:83:3d:d4:09:4b:24:5e:6b:20:98:c3:57:d1:
6f:f0:65:de:54:15:56:13:9c:18:42:43:f8:2e:15:
4a:cb:69:11:cf:91:20:97:8e:aa:33:41:d3:53:a0:
6e:82:31:a4:32:18:f8:2b:a6:ca:d0:6c:b2:fe:46:
5e:a3:b6:7b:e0:1a:bd:65:61:12:0d:84:29:77:c5:
7e:b8:f5:63:34:ce:c6:45:25:81:d2:8f:aa:7e:7b:
0d:0f:53:7e:18:fa:7c:e2:fa:12:3b:03:91:ec:22:
98:61:ba:58:3e:86:67:f7:f3:85:ce:48:5a:e1:cd:
92:91:dd:5d:cd:dc:e9:b4:3b:e1:f2:c4:80:22:e0:
7f:b1:3f:dc:1a:8b:1d:d0:54:d4:d7:6a:b8:b4:f0:
f9:3c:9c:56:18:06:e4:f7:c5:74:b0:35:1b:73:ad:
7c:16:a0:62:d1:01:e8:98:a8:fa:c6:a2:e1:0c:bb:
1b:ee:0f:cc:c4:85:61:3f:11:a1:e7:0e:a8:4d:7e:
d6:a7:81:57:d3:92:1e:c3:e9:7e:eb:47:6f:2e:90:
72:01:84:df:ae:9d:0d:45:85:c4:ef:e0:62:ca:6e:
de:d8:31:d7:63:f5:23:0f:8e:20:2f:9e:97:b6:43:
c3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:74:70:2D:09:2B:FA:37:FE:B3:4D:9E:03:23:5D:09:5D:34:E0:5E
X509v3 Authority Key Identifier:
keyid:F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c4:4d:32:92:9a:a2:b0:d4:41:32:92:e8:93:27:7e:83:15:
a1:38:0b:b9:35:63:4a:41:fa:f9:c8:86:86:e6:d4:f8:07:e6:
ce:72:ab:0d:45:8c:1a:49:a0:6c:5b:b3:e0:35:18:31:38:b9:
78:f3:36:dd:a3:85:84:11:df:49:8a:7a:0a:7c:d5:76:47:7a:
12:68:a6:20:bd:8e:45:d5:38:71:d1:e1:f4:87:15:5c:b7:79:
d8:eb:ee:7e:6f:ba:a0:a2:e8:83:2a:f6:17:63:5f:3f:61:fa:
66:48:a4:32:49:37:5a:2e:11:02:18:ef:5e:dc:5a:9f:a2:99:
d5:71:e9:ce:15:39:05:53:7a:75:c0:67:3c:e7:06:ea:bd:bd:
58:b8:9a:2a:25:59:79:e2:36:27:1a:eb:b6:1c:73:e8:7c:6b:
af:b2:7f:d7:27:a1:6d:58:dd:b1:2d:1a:83:b7:4f:22:d6:56:
99:05:35:03:5c:72:88:8f:4f:0a:4f:59:37:79:79:2c:05:1f:
57:04:cb:db:6a:3f:7e:e0:6f:ab:4f:52:9e:f6:df:65:04:63:
75:f9:2e:57:bd:52:fe:c2:b5:3d:b6:94:9a:c3:36:f1:65:04:
eb:38:22:0e:7f:02:cf:3f:87:01:e6:a6:b3:c8:b7:ff:01:0a:
c6:ac:3f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:17:58 2026 by rpki-client