Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
File: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json)
Hash identifier: 6RA6rJHpcho/mTYDrRmGwX7VBUvO8C6UuwWAgt/9yPk=
Subject key identifier: FD:AD:EB:3A:6B:96:AF:DA:C4:E8:51:1C:B6:19:F9:50:1E:A1:F3:15
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial: 01A0D3B8B2A5A49819C762622D98B866D7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 14:01:31 +0000
Manifest this update: Thu 24 Sep 2026 14:01:31 +0000
Manifest next update: Fri 25 Sep 2026 14:01:31 +0000
Files and hashes: 1: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: BZFsBUR19P7mnZYEegIRb3jc+RE9bNynXdLITbYV9dQ=)
2: o0zy2PIJKQJUCGXdBu2GTTLsK1w.roa (hash: JMAJ2diz0rDcpnOliCZ1PbTa/8anGPpInGm0KE37C9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:b2:a5:a4:98:19:c7:62:62:2d:98:b8:66:d7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
Validity
Not Before: Sep 24 14:01:31 2026 GMT
Not After : Sep 25 14:01:31 2026 GMT
Subject: CN=fdadeb3a6b96afdac4e8511cb619f9501ea1f315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:d7:35:27:e2:c7:03:1f:bf:54:aa:72:a8:
1b:58:d5:2e:53:5d:ea:e7:36:9a:c0:f0:70:2d:02:
7b:4e:b3:eb:ab:33:fe:b3:3b:66:c9:cb:07:5a:43:
86:e7:86:3e:16:52:4d:4a:73:b0:8b:cf:1e:1e:c1:
bc:08:45:cc:b4:95:81:a8:67:8a:39:3d:27:85:61:
28:ae:0b:2d:87:06:1a:86:71:74:8d:7a:18:3b:6e:
5d:7f:75:9b:33:a8:b2:c1:1c:42:bb:85:bd:e7:9f:
a6:19:af:3b:e6:75:0d:52:76:24:ae:d7:7e:e7:e2:
a5:f6:04:9e:7c:1d:77:d0:7c:30:ef:20:64:59:d3:
44:1b:4e:6a:3d:0e:69:9d:c1:90:93:0f:ce:f2:c5:
c3:71:eb:17:ea:11:86:b8:f4:a2:9b:44:ba:b6:5c:
d5:63:f6:b4:64:56:5e:40:d3:dd:e3:b4:95:a9:fc:
8e:0b:12:f8:56:44:3b:1a:15:8b:b1:5a:cd:20:1e:
29:ee:94:1b:16:9d:df:6b:bb:f6:4e:82:65:2b:3e:
4f:b4:2d:d6:fb:7e:30:ce:62:09:3c:e0:42:11:f0:
84:bc:63:9f:15:5e:98:5e:08:4c:99:1c:26:c7:6c:
21:9a:e4:1e:62:9e:cf:36:b2:3c:0a:f6:1f:6f:d1:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AD:EB:3A:6B:96:AF:DA:C4:E8:51:1C:B6:19:F9:50:1E:A1:F3:15
X509v3 Authority Key Identifier:
keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1f:48:0e:a5:9c:66:ec:27:b1:ac:18:9d:89:5c:fe:e4:9f:
13:bc:84:4d:ed:1b:3f:4b:ba:d3:31:83:ff:a6:29:d4:79:a3:
72:4a:04:64:0c:04:16:53:be:ad:25:78:a8:78:a8:2c:80:e0:
6f:84:fb:16:89:81:8d:ba:3c:ec:2e:56:70:f2:b6:c6:b5:71:
a1:1a:e2:0c:98:5b:cc:3f:aa:e1:5f:12:63:03:5f:e6:d1:06:
a6:7b:fd:24:35:f4:af:86:0d:ef:64:cb:63:08:8c:bc:24:d6:
37:73:72:a3:3b:8f:66:b6:41:6e:fa:5c:36:9c:07:60:fb:57:
3c:d0:8f:31:a3:c1:5d:94:ff:7d:39:9b:63:04:31:d1:03:9c:
49:1f:d8:a2:4a:04:86:16:82:76:85:36:a1:67:6f:b2:2e:6e:
de:04:21:39:12:85:14:6c:aa:4f:17:c6:51:75:e2:af:f4:b5:
96:87:23:69:07:4b:82:85:a7:47:e5:69:ed:5f:f0:84:ff:7d:
87:71:dc:02:98:a3:0f:e5:dd:a2:05:f5:8c:58:5a:8f:31:4f:
ac:95:f0:8e:03:a9:85:82:23:a0:6b:d5:2c:47:0e:e0:2e:32:
76:ca:55:36:cd:d3:99:50:c2:32:d6:f3:18:59:8d:19:0b:c2:
09:ac:d8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:10:19 2026 by rpki-client