Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: Th6nnHSsLGFgnPBnHFoeCC0W/w0Ni2WhQflcgBDgf1s=
Subject key identifier: 93:23:DD:49:E3:45:B3:6F:C2:BC:4F:6E:36:A3:E9:BA:48:57:C5:87
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 01A0F67B1ED3F7563E3B44E399F09C7EA0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 1A7F
Signing time: Thu 01 Oct 2026 08:00:58 +0000
Manifest this update: Thu 01 Oct 2026 08:00:58 +0000
Manifest next update: Fri 02 Oct 2026 08:00:58 +0000
Files and hashes: 1: 6WW-5nEcLXyYysohxbswx53KUC4.roa (hash: YGye3VGtaY9dIe257yt+Ywof1sTn+vKBOCXTqKl9UZo=)
2: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: ICxL8L8eWbRxlZ8Xjyes04LrJsSpjvQpFCbcZl+WbK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7b:1e:d3:f7:56:3e:3b:44:e3:99:f0:9c:7e:a0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Oct 1 08:00:58 2026 GMT
Not After : Oct 2 08:00:58 2026 GMT
Subject: CN=9323dd49e345b36fc2bc4f6e36a3e9ba4857c587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9f:d1:7e:44:d1:a1:d0:ed:eb:c7:73:90:58:
34:7c:dd:0b:93:2d:7b:c2:1c:9d:95:f8:2d:0d:28:
3d:65:1d:e0:c1:f2:41:21:37:e7:e2:f3:0e:c2:a8:
10:29:63:71:3f:15:d4:df:3d:20:dd:fc:54:dd:50:
67:35:d2:59:0a:c9:ea:53:2c:3b:25:86:2a:a2:1f:
bc:bb:72:6d:6c:96:a1:97:d4:43:14:e7:1b:47:c8:
7a:d2:d8:65:ec:5a:ec:58:6c:af:10:b5:0f:f7:6c:
78:e5:aa:13:a9:5c:ee:3d:19:25:a7:ad:ee:42:9a:
f8:4d:ad:9f:c7:d9:cc:23:3f:3e:03:77:4f:f9:6b:
9d:ef:c4:61:09:46:bf:6e:67:77:18:e5:b4:a1:8d:
70:de:17:16:d5:ce:c8:e9:7b:c9:3c:56:06:75:e7:
a7:03:8f:13:c9:4b:06:db:25:45:0c:0b:0f:10:be:
38:1b:f6:33:21:70:d5:bc:a6:87:7a:c3:93:ce:20:
7a:7a:7c:84:59:d4:c9:47:6a:e7:39:01:0d:8d:24:
9b:ba:59:6c:dc:b9:1e:84:08:10:f5:29:0a:e3:23:
5f:e9:b4:f1:82:a5:6c:c4:05:f8:15:59:49:50:e9:
51:58:30:df:96:f7:49:8a:7a:37:90:af:fd:15:fd:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:23:DD:49:E3:45:B3:6F:C2:BC:4F:6E:36:A3:E9:BA:48:57:C5:87
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:63:f1:c7:83:45:29:e5:fd:08:85:74:0b:51:9e:08:8e:d9:
19:ae:14:ee:f9:c8:69:16:0a:61:85:37:81:ef:9c:76:71:87:
48:7d:91:99:8a:5e:46:01:a3:88:0d:fb:bb:05:69:a6:f2:77:
91:0e:1a:bb:9a:67:28:33:d1:ee:f4:e3:7e:2e:e5:00:e1:f7:
02:24:e7:6e:3f:2f:1f:02:9d:57:29:6a:3b:f0:a8:50:c1:59:
1e:a3:8a:bf:4a:02:f4:57:cd:43:ea:e0:2a:84:cf:b9:8f:4e:
08:9d:98:1a:c4:78:29:76:f4:3a:db:15:2d:15:a6:d0:73:0b:
13:8e:bc:3d:fb:38:ef:fa:e7:ae:0f:4f:81:d9:cf:6a:b2:77:
ae:de:66:a1:e1:72:ad:6d:6f:5c:81:9e:c8:ac:2e:1d:93:75:
88:6f:1a:f0:ac:cf:3e:c3:ce:8f:ab:d4:6e:25:c4:c5:c1:a6:
c3:60:4c:36:49:79:f6:62:77:24:34:7a:e0:f2:9a:78:75:5f:
d0:a5:ce:3b:91:1d:74:6f:71:41:4c:ae:29:ab:da:ac:e9:f9:
39:ed:26:1a:4e:e8:62:42:ec:78:06:f4:3c:b5:78:53:6a:50:
d9:a3:15:e7:45:dc:0f:d3:f3:d3:7b:9e:a0:1a:5b:9c:8c:61:
cc:98:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:31:45 2026 by rpki-client