Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
File: 9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft (raw, json)
Hash identifier: 8GR4cce+55ukgUJJkNgMbkD+cz/krFBrJ8qbph8Wr70=
Subject key identifier: CA:0E:45:22:C2:77:02:30:72:0A:0A:41:22:62:9A:BF:27:3A:49:5B
Authority key identifier: F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84
Certificate issuer: /CN=f70592c90b4cb245e54718d7c5799b47d419a684
Certificate serial: 01A0DC851D6E8C26A74D4DB67D6CA58DB3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 07:01:46 +0000
Manifest this update: Sat 26 Sep 2026 07:01:46 +0000
Manifest next update: Sun 27 Sep 2026 07:01:46 +0000
Files and hashes: 1: 9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl (hash: K/xKyVWopLglY69HDkhZ02JNO49gEedLN3RbCQgM3II=)
2: R0EFhHKRWmwfAHiJovxs4U8RwFg.asa (hash: v7Xa5f9qcTv5pbYAux3GgLoelyR7CSkPz3xgAUXrZ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:1d:6e:8c:26:a7:4d:4d:b6:7d:6c:a5:8d:b3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f70592c90b4cb245e54718d7c5799b47d419a684
Validity
Not Before: Sep 26 07:01:46 2026 GMT
Not After : Sep 27 07:01:46 2026 GMT
Subject: CN=ca0e4522c2770230720a0a4122629abf273a495b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:d9:ae:f3:57:1d:61:e9:c5:6f:80:b5:0f:
3f:a9:ff:ed:5f:6a:a5:2b:a8:72:15:88:22:e4:20:
6e:45:d9:8c:67:24:dd:91:39:b0:cc:fc:f3:45:d4:
dd:39:22:2e:4c:54:c5:2d:52:d4:15:03:a0:a1:11:
c0:33:01:d5:51:90:d2:6e:22:e7:96:2c:a3:e6:13:
a5:c3:c8:87:fa:a4:0e:5a:31:23:93:d7:f5:6b:e0:
a8:e3:25:06:38:cd:a3:80:db:82:3a:7c:b5:0e:80:
6e:c4:42:4a:09:70:cd:68:44:2c:96:39:c1:9c:1a:
c6:db:6d:00:a1:81:83:6b:05:3b:44:0b:70:ca:c6:
c4:ae:ad:8d:e7:6d:06:77:e1:49:e3:f2:11:88:d8:
c0:b0:1d:af:c5:c9:4d:8e:c9:37:33:97:e7:b9:22:
b0:97:2d:c1:42:d2:6b:e4:d4:10:d8:d6:c5:5c:52:
dd:58:d0:ca:a6:f3:22:93:5a:00:60:e7:8e:8d:4b:
6b:69:2f:77:71:0b:69:c6:f0:8c:25:44:02:f1:80:
d5:90:93:6c:1e:82:87:9c:f8:40:24:dd:1a:c1:67:
6d:5c:e8:75:96:4d:19:b5:9b:94:c0:f5:8d:96:dc:
bd:e6:5a:6b:d7:90:70:f7:f2:85:f5:17:b2:b5:3e:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0E:45:22:C2:77:02:30:72:0A:0A:41:22:62:9A:BF:27:3A:49:5B
X509v3 Authority Key Identifier:
keyid:F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:52:50:e4:69:77:58:f8:d5:6c:55:b5:fa:fb:6e:3e:38:45:
57:43:60:c6:27:2f:03:ba:51:c5:32:29:ce:4f:48:79:a0:5d:
50:89:7f:d9:c4:48:d8:e4:51:b5:64:aa:86:71:e3:bb:6a:ad:
51:fc:47:27:e0:22:7d:74:fd:16:d2:fa:db:ab:01:da:33:c4:
ac:49:af:b7:4d:70:0b:cd:79:26:47:38:f8:12:e4:c7:f4:48:
83:a8:f6:83:c4:fc:37:37:35:fc:ef:ea:c5:34:9c:24:c5:5e:
81:3a:11:76:f6:92:a6:1c:35:b7:5f:27:94:d1:7d:49:cc:3c:
9c:da:38:22:25:a1:92:80:62:75:c9:7f:cc:f8:d5:48:d6:73:
8b:00:09:89:7c:ae:85:16:5f:96:25:2d:ea:4a:14:71:05:48:
b7:de:2d:6a:5f:c7:ad:cb:2b:a1:3b:6c:cf:c7:32:c5:c3:d6:
b1:d8:c8:d8:a2:e3:a2:f5:f7:79:96:68:f4:99:62:33:88:d3:
98:c4:dd:64:0e:6e:b5:d8:57:a6:19:80:50:20:ec:29:24:cc:
9a:0c:f7:87:f5:c7:67:fe:b6:23:ed:47:29:6d:39:45:28:9a:
5d:91:68:ee:c4:54:cc:56:36:7b:28:24:ec:23:6a:a8:61:9c:
72:34:4f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:17:40 2026 by rpki-client