Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json)
Hash identifier: CEn9k4w5LL5Zvwb/9l0hV60HC6vbAGvUCgq04HlCy1A=
Subject key identifier: 48:8C:CF:F3:80:BB:FA:50:67:D4:35:89:A2:C7:2B:19:88:2B:70:3D
Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Certificate serial: 01A0D1243E8A0E6FAE72AD73E52AA9F2EA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
Manifest number: 19FF
Signing time: Thu 24 Sep 2026 02:00:08 +0000
Manifest this update: Thu 24 Sep 2026 02:00:08 +0000
Manifest next update: Fri 25 Sep 2026 02:00:08 +0000
Files and hashes: 1: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: RlHj6sLY+P6SA2bAcaaEb8MUvRMrjOEeD8GGMMwgknU=)
2: NCKHSq1L93RSNmWsVPen2Pp7itw.roa (hash: E1xwyNLOyD17eDTlIsUyX0bH+yVNi172nC4ro2vpPiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:3e:8a:0e:6f:ae:72:ad:73:e5:2a:a9:f2:ea:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Validity
Not Before: Sep 24 02:00:08 2026 GMT
Not After : Sep 25 02:00:08 2026 GMT
Subject: CN=488ccff380bbfa5067d43589a2c72b19882b703d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:94:82:12:22:9b:9d:db:27:65:15:0e:88:16:
78:a7:98:23:cf:12:1b:a7:00:2a:0e:e1:1e:9e:79:
16:f6:83:50:58:9a:b4:ec:58:09:c0:f3:b8:9e:81:
f2:b8:d5:ef:c9:74:95:88:e6:58:3d:92:58:24:e7:
2a:06:dc:50:d4:9f:da:fb:9a:54:1d:86:a7:48:da:
29:23:25:ac:86:55:ac:50:e9:7f:31:5c:5d:35:4e:
22:7f:8f:70:6c:c9:66:dc:0d:ae:25:44:1e:08:50:
e4:d8:47:c0:e9:e5:2a:4f:1f:6d:65:cd:ed:77:07:
39:a3:56:b9:2c:cf:53:05:b0:c8:f5:3e:3d:41:31:
81:82:c0:36:9a:b0:70:21:8a:5d:87:d8:8f:af:31:
5b:8a:a5:40:e8:db:84:82:b4:42:a3:e7:30:9a:3a:
1c:e9:56:21:62:1a:f3:33:68:f5:b6:c4:9b:8c:a3:
c5:50:e6:05:36:72:e4:79:b8:98:95:2c:c4:bc:28:
dd:a7:1f:4d:a6:a6:61:ae:5b:7e:b8:41:33:aa:bc:
17:cc:fe:bf:33:2e:5c:e2:66:03:7d:97:34:34:64:
8a:a1:4c:7a:a0:33:b8:2f:ed:4f:2e:9b:a2:4a:0b:
9f:d7:3d:1f:cf:2b:98:42:92:30:19:8d:84:26:28:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:CF:F3:80:BB:FA:50:67:D4:35:89:A2:C7:2B:19:88:2B:70:3D
X509v3 Authority Key Identifier:
keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7b:08:e1:5e:02:05:ab:80:b9:b8:33:ee:3c:4a:64:2b:6a:
48:6d:fd:43:f6:ca:28:fc:67:d3:a9:57:fd:07:a2:74:db:78:
98:8f:ed:55:60:cf:96:fc:c8:d4:f6:b0:82:41:84:ad:3e:7a:
23:c2:6a:ee:ec:39:29:86:70:33:b1:8f:ae:f4:74:60:d3:c6:
76:fe:8c:3a:af:02:b7:5a:15:da:8b:e4:d9:c5:03:e5:f9:cd:
fb:1d:4e:1b:0f:38:de:15:bf:ed:30:c0:eb:e8:4a:b0:c0:f3:
57:8b:13:89:92:31:c5:ab:12:dd:bc:33:fe:9d:b9:e7:b9:8a:
d2:e1:4d:b9:d1:a4:dd:9b:26:f9:f7:86:94:d8:b9:91:b2:5f:
70:7d:b3:bd:cb:d7:10:75:1d:a7:3e:f2:da:a2:6d:3a:52:4c:
3a:6f:b0:c8:82:bc:22:1c:5c:f4:3f:65:fa:e2:49:e6:d8:f1:
1b:53:8f:af:2b:4a:82:45:0c:cd:d7:0f:ef:6c:3c:2b:8d:2a:
51:93:79:e6:f1:b6:4c:95:b9:a0:21:f6:bb:e0:d1:27:6a:8f:
4d:4e:a8:fe:46:6a:03:6b:28:5b:43:b6:a4:02:09:cd:4c:47:
4b:93:f4:99:c4:12:cd:f3:ad:88:ae:ad:8f:6b:7c:88:96:e7:
0d:79:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:54:55 2026 by rpki-client