Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
File: 9z1njq7ZSnm3Qt1DveP1TynbMVI.mft (raw, json)
Hash identifier: Xan/viFjU3akdirrWM5x2kPsw3PH58S0eBM3FOaL42g=
Subject key identifier: C8:5B:A7:CE:33:99:54:BE:2D:7F:B3:A0:DD:98:AE:44:09:7E:77:4A
Authority key identifier: F7:3D:67:8E:AE:D9:4A:79:B7:42:DD:43:BD:E3:F5:4F:29:DB:31:52
Certificate issuer: /CN=f73d678eaed94a79b742dd43bde3f54f29db3152
Certificate serial: 01A0D1C92908648059FFDFFE7885B57A2FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
Manifest number: 0466
Signing time: Thu 24 Sep 2026 05:00:16 +0000
Manifest this update: Thu 24 Sep 2026 05:00:16 +0000
Manifest next update: Fri 25 Sep 2026 05:00:16 +0000
Files and hashes: 1: 9z1njq7ZSnm3Qt1DveP1TynbMVI.crl (hash: +rNzqioVAPTK9ym2Pi2gSmYQCJpTvWD+KojEzZoBYAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:29:08:64:80:59:ff:df:fe:78:85:b5:7a:2f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73d678eaed94a79b742dd43bde3f54f29db3152
Validity
Not Before: Sep 24 05:00:16 2026 GMT
Not After : Sep 25 05:00:16 2026 GMT
Subject: CN=c85ba7ce339954be2d7fb3a0dd98ae44097e774a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:2e:fd:4a:ef:e5:f4:40:f8:7d:e1:b8:eb:
2f:f3:62:ba:f6:d1:7e:14:79:df:f3:f7:b4:15:3e:
44:90:f5:13:67:08:b6:7d:e7:5a:b7:68:30:00:c9:
02:1a:62:49:06:64:2a:0c:d7:5e:c6:9d:f2:d3:4a:
a7:05:70:87:16:32:46:86:33:59:37:1f:d5:3a:47:
06:e2:bc:94:7d:b5:2c:08:d9:96:77:bd:05:d0:00:
83:3c:67:f8:4a:b9:3c:02:8f:51:90:2b:13:02:fd:
03:b1:45:78:75:8d:2f:5a:e3:76:de:ed:e9:d5:44:
17:73:8f:f8:fa:07:06:d4:34:bc:67:a3:84:24:73:
22:49:6b:59:35:bb:f4:c2:0a:8b:f2:f3:30:97:4d:
83:c7:9f:ed:94:36:f3:8c:30:d7:00:9a:e5:84:6d:
cc:88:21:c6:99:b1:27:03:41:7c:6e:c1:66:cf:fa:
4c:bd:cf:91:11:07:bf:61:e4:4b:01:c2:7f:3a:d8:
30:71:22:9a:e8:40:88:d0:c1:bc:9a:78:7d:87:3d:
68:1b:b7:3b:0b:2f:d0:17:f6:6b:2d:06:41:b3:39:
e4:5d:8c:14:b4:bf:64:98:a3:6b:dd:74:3b:cb:81:
72:20:94:f7:2e:de:2e:e6:7a:23:5a:56:b5:76:d0:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5B:A7:CE:33:99:54:BE:2D:7F:B3:A0:DD:98:AE:44:09:7E:77:4A
X509v3 Authority Key Identifier:
keyid:F7:3D:67:8E:AE:D9:4A:79:B7:42:DD:43:BD:E3:F5:4F:29:DB:31:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:66:3e:1e:fd:21:81:f1:3b:d7:a1:a7:50:eb:20:c4:a3:ad:
eb:e4:9e:f6:ee:5b:2e:7f:e9:9e:4b:54:02:18:a3:4c:d0:4f:
5d:2d:31:f6:cd:b6:10:d7:0d:63:da:84:a1:e8:90:0f:28:db:
30:84:0a:36:08:9e:18:3f:1f:4f:0e:09:4b:9d:91:00:a8:95:
20:ba:ad:75:42:b8:55:e0:c7:ff:46:63:19:5c:e3:9d:43:fd:
5b:93:23:b3:c2:44:1b:9e:ba:a7:3a:79:a4:cb:03:00:c2:b8:
5a:60:a9:92:8c:3e:3e:0c:a5:dd:3c:6d:d2:f9:62:5e:b4:ef:
1a:de:4d:6f:29:89:43:ad:8d:a3:bb:77:43:79:27:5e:fa:92:
73:4a:ad:ec:c2:9e:09:57:cc:37:df:e0:24:46:2d:10:22:ec:
83:cb:48:99:83:0a:36:02:8f:73:de:b0:53:57:9f:e3:84:2e:
a7:d7:b2:66:68:9e:ad:e1:72:b3:1c:7f:59:6d:a3:a4:94:ba:
4d:e0:b1:77:2c:f6:2b:cd:a0:86:d6:47:cd:11:bb:35:0a:00:
69:2b:ab:16:4a:de:46:fa:b6:72:ad:c6:08:b4:a7:a7:28:38:
93:09:6e:8d:46:ed:08:bf:43:8f:e7:50:16:80:03:2c:ca:f9:
3e:86:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:51:15 2026 by rpki-client