
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: xH8+O1DwxEryns12p5rLfhgMfeKdnJJi9QAn0o7rjQA=
Subject key identifier: 6A:A2:32:03:04:80:01:0E:A5:D0:5E:00:BE:94:BA:7E:7E:13:65:D6
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 01A0DC4E2D0A01B3E45FA0F343C6F4614D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 17B6
Signing time: Sat 26 Sep 2026 06:01:45 +0000
Manifest this update: Sat 26 Sep 2026 06:01:45 +0000
Manifest next update: Sun 27 Sep 2026 06:01:45 +0000
Files and hashes: 1: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: mMjEzOlvuszPVPNjZPO99wPxK057VkVCveHgYm1W5G0=)
2: epgbRZ451e-4FNMtDUxjsoEsQts.roa (hash: 1bTVs1WZkQ0C5Jeug5kRDuRS7N5Tu6N+va1M7r7izGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4e:2d:0a:01:b3:e4:5f:a0:f3:43:c6:f4:61:4d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: Sep 26 06:01:45 2026 GMT
Not After : Sep 27 06:01:45 2026 GMT
Subject: CN=6aa232030480010ea5d05e00be94ba7e7e1365d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:7a:c2:fa:5b:02:e0:b5:20:f5:3a:89:9a:
5e:07:05:bb:12:e3:f3:28:1f:1c:f1:58:44:7f:8d:
08:96:1d:f1:bb:34:a5:ce:9a:8c:8d:38:c8:72:27:
c1:b6:01:e8:b5:5a:18:de:83:20:ef:f1:d2:1e:e4:
2f:8a:bb:c1:3c:0a:27:31:e8:55:3d:07:31:81:0d:
c9:92:bc:a4:b5:93:2d:5e:48:e8:46:0d:12:d2:b3:
35:ed:47:f6:3b:f4:99:49:e7:36:c4:28:9a:8d:97:
05:d7:df:19:85:c3:97:c8:83:ac:79:6b:c8:94:27:
b8:72:c4:21:95:d1:b1:c0:6d:a7:76:17:e9:aa:49:
e0:42:e3:dc:98:67:30:5c:15:b3:ff:57:28:d2:19:
8e:4d:20:ef:9c:ff:ca:cc:47:30:fc:32:c6:4f:35:
f9:ab:85:54:50:7d:89:94:e4:ac:07:5b:9a:8f:da:
f8:a8:11:bd:0e:eb:13:ab:91:c7:c4:e6:bd:d7:45:
9a:15:21:0e:58:9b:15:54:ff:91:72:e8:7e:3c:55:
d7:e5:78:3b:fc:51:40:7a:7c:00:73:77:3a:a7:28:
40:7a:40:4c:33:69:c9:19:f4:14:a0:af:4c:f9:dd:
b9:df:5a:bd:ee:5f:8c:74:40:8b:1d:8a:90:11:24:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:32:03:04:80:01:0E:A5:D0:5E:00:BE:94:BA:7E:7E:13:65:D6
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a6:84:2a:dc:dc:49:c4:8a:aa:53:41:dd:b0:53:ff:d5:3a:
f0:2e:59:26:cd:f8:90:ca:72:ca:3d:74:1b:51:a6:fc:ea:c9:
e2:72:8b:fc:2f:34:ee:93:a6:42:c1:d4:f8:cf:45:e6:26:10:
57:f6:ed:43:00:65:8c:be:ca:de:f6:6f:4a:76:bc:6b:81:c7:
36:9d:47:16:cd:98:c7:4d:fa:7e:44:eb:73:49:64:6c:b2:cb:
cb:af:56:36:90:03:17:00:2a:26:38:d4:67:65:b4:99:3c:80:
d4:73:17:88:3a:7f:20:ab:bc:e8:4c:b0:87:2b:7f:a9:16:d5:
b8:ea:8c:6a:55:16:b2:2b:65:ec:bc:a2:cd:0c:03:53:a4:88:
ef:8b:05:d9:3e:68:96:ec:a8:4b:0d:e6:cc:9c:ea:12:bb:4f:
a5:41:b3:85:fe:0b:bc:05:4d:c7:ae:eb:06:f8:8b:4b:ce:e0:
21:b0:d7:49:16:b2:67:f1:42:49:76:0a:44:5f:08:e4:63:86:
c3:0a:49:5e:fc:a0:64:97:5e:52:cc:aa:53:6c:d5:b6:42:82:
00:66:71:7c:3b:ee:7b:9f:3c:d3:15:ed:38:2d:c8:3f:33:3b:
bc:b3:34:d7:5e:96:f9:48:a6:48:7a:4b:b4:7f:16:f8:2b:c2:
bc:dc:71:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:12:33 2026 by rpki-client