Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier: 1qGin5e0ZG0uHPm7x64TVCRenBmq9cgE/Hg+9AVk+5k=
Subject key identifier: 2A:31:7E:19:16:E3:D9:E2:AA:C4:15:1F:B0:8C:CE:F2:4A:1A:D1:E5
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial: 01A0CAEB941EC95FBE70EE13FDE8808C202B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number: 09EA
Signing time: Tue 22 Sep 2026 21:00:31 +0000
Manifest this update: Tue 22 Sep 2026 21:00:31 +0000
Manifest next update: Wed 23 Sep 2026 21:00:31 +0000
Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: 6A7c8fUpxPrRJGGED1ycqyLrAejnUoibX/UxBY3aub4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:94:1e:c9:5f:be:70:ee:13:fd:e8:80:8c:20:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Validity
Not Before: Sep 22 21:00:31 2026 GMT
Not After : Sep 23 21:00:31 2026 GMT
Subject: CN=2a317e1916e3d9e2aac4151fb08ccef24a1ad1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:31:cb:d2:05:98:55:5c:82:52:f2:4e:c1:
9e:b2:56:93:1f:96:ff:d0:75:22:79:4b:e3:c1:1c:
05:70:24:9b:e5:a8:5e:ca:4f:4e:0d:63:7e:5d:d7:
22:e2:d0:46:8f:46:2f:82:e0:a2:26:52:2d:dc:03:
aa:95:d1:d0:f8:34:b5:2c:b8:1a:18:c6:37:15:8e:
52:9c:c1:f0:d1:87:9a:57:bf:e2:22:d0:f2:e5:43:
33:d3:03:05:92:c7:c0:8c:d6:6b:d0:9e:09:2b:68:
87:94:0a:ce:28:68:d2:3a:e2:e5:25:c5:21:c2:da:
64:a2:7a:e3:52:44:c7:9c:7f:73:53:9d:e5:fc:7e:
bd:7d:04:95:79:b2:50:7e:52:a5:7e:a9:94:0d:a6:
cf:0f:43:73:7b:61:e9:6f:7b:fa:b0:09:0e:dc:af:
12:4f:ec:7b:a3:1b:9f:55:8c:b3:e3:80:76:7e:23:
07:f1:51:12:c1:08:c7:6a:b4:f5:6a:c9:3e:2f:46:
f0:c9:30:35:dc:2d:3c:6b:a5:62:45:88:76:52:d8:
82:73:12:eb:3e:fb:e7:c5:96:71:e6:13:b6:e3:9f:
37:be:79:4f:13:2d:f9:2a:16:42:a5:49:5a:87:6b:
6a:20:c5:ba:11:0b:5e:80:df:c1:98:65:b5:13:35:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:31:7E:19:16:E3:D9:E2:AA:C4:15:1F:B0:8C:CE:F2:4A:1A:D1:E5
X509v3 Authority Key Identifier:
keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:46:ef:ff:0d:b3:d0:88:81:29:49:88:ee:70:b1:33:25:8a:
62:10:f3:37:67:7d:eb:c3:3c:3d:fa:38:e4:7a:03:9b:1e:2b:
db:c5:ba:7a:3a:d8:0d:02:73:10:58:9a:cd:ac:44:6a:17:0e:
46:12:e4:19:d2:8c:3f:b8:3c:68:49:54:e0:44:fb:8c:a2:59:
f1:c5:0c:2f:7d:32:50:b6:2b:08:78:8b:97:84:11:73:22:08:
1b:75:11:da:75:38:b4:71:0c:ef:dd:81:9a:b0:b9:f5:43:b3:
9c:d4:7b:11:cd:8d:32:56:62:52:fb:da:3f:ce:0c:d0:38:7f:
08:00:18:86:c5:13:24:30:6e:19:94:ea:9d:56:ec:73:c9:5f:
c6:fc:5d:be:68:ca:38:2c:82:50:70:db:ef:6e:bf:11:62:bb:
e9:eb:96:f4:b4:27:f3:d7:cd:7a:5e:3c:16:e6:9c:57:ee:f3:
c7:4b:1d:bf:09:b8:19:bb:d0:65:1f:47:14:0a:94:c4:9e:8e:
80:54:6b:91:32:9d:bd:2a:e2:50:e5:bc:62:9c:c6:c2:95:2a:
6b:6f:14:47:d2:e3:be:c6:e2:40:03:1a:2b:85:60:87:23:17:
93:7b:e2:87:b7:2f:ec:2f:9a:e2:5d:4c:54:fe:05:78:60:d2:
3b:d2:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:22:37 2026 by rpki-client