Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier: AB/cTCv9g0326N1UA+KjUsCu6FMSQQ7T+Ttl2CJ+4Hw=
Subject key identifier: E9:76:3E:0D:B4:76:3A:9D:48:A5:4C:27:CA:F5:74:55:81:8F:C3:4B
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial: 01A0CBC7112DDFA1BCBFA26038E9CDA978F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number: 0888
Signing time: Wed 23 Sep 2026 01:00:15 +0000
Manifest this update: Wed 23 Sep 2026 01:00:15 +0000
Manifest next update: Thu 24 Sep 2026 01:00:15 +0000
Files and hashes: 1: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: RUDje1a3/8EKGBKAp3TiwK+H6utEXbJcC1PuyU42ac8=)
2: QswWzxGJPrCuags3T3sVZhymc5Q.roa (hash: /433oyyX1AGDgQHu0Vt/5hnmhr/+/BlPoLd3zml5Aq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:11:2d:df:a1:bc:bf:a2:60:38:e9:cd:a9:78:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Validity
Not Before: Sep 23 01:00:15 2026 GMT
Not After : Sep 24 01:00:15 2026 GMT
Subject: CN=e9763e0db4763a9d48a54c27caf57455818fc34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:80:44:65:47:fe:e2:78:50:64:4c:aa:3f:
99:a0:5c:4c:d2:e7:2c:eb:1e:55:9c:86:0f:77:fe:
73:85:8b:ec:5e:77:49:67:67:ca:f9:97:70:ec:33:
b6:46:9e:57:a1:32:94:01:e0:a7:7c:33:e3:c3:32:
39:6d:8b:b7:d7:51:3f:d0:44:54:1f:0e:6a:c3:ee:
bb:71:f6:28:33:23:38:36:4d:19:4a:bd:67:05:15:
5e:a2:88:2e:ed:1e:48:5c:0e:3d:c2:57:dd:48:ae:
2e:73:df:ca:e9:82:06:96:af:c6:23:6c:80:20:73:
e4:30:5b:24:3c:5c:6e:14:ca:ff:d2:a2:4c:b7:3d:
d3:92:25:49:0f:22:fb:bf:93:85:06:94:2f:1d:9f:
cc:22:f5:de:1c:00:b8:59:19:26:66:b1:df:17:51:
70:4e:dd:bf:ec:c4:15:02:d9:64:f4:32:c7:25:cc:
d7:a5:1b:d5:b7:22:03:63:49:31:20:a8:f4:3f:d4:
2d:64:13:7b:ec:0b:67:55:14:1e:75:92:cb:6c:07:
0f:24:0a:10:65:fd:03:4a:b0:47:e9:b7:28:73:42:
a1:a1:60:60:e5:95:4c:d3:95:1b:8b:fb:21:c1:0e:
55:a9:6b:f5:f3:8b:95:26:c8:a6:12:d1:e2:d8:cd:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:76:3E:0D:B4:76:3A:9D:48:A5:4C:27:CA:F5:74:55:81:8F:C3:4B
X509v3 Authority Key Identifier:
keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:42:c8:09:5b:e7:58:83:bc:93:0e:13:92:93:8f:0b:bf:a3:
c4:b3:de:95:e7:f6:8c:78:da:ed:8a:23:d8:15:26:3c:05:28:
64:04:1c:19:5d:9e:3f:21:0b:df:01:b8:d4:f4:00:92:3a:1e:
55:49:a8:01:33:30:06:d8:5d:11:6c:5c:bf:3f:22:9a:d4:1f:
e4:3a:d8:c6:64:d0:09:8e:1a:20:62:d3:8b:3a:cf:d0:2a:0b:
40:c3:2e:e8:66:bd:3c:ac:83:8b:a6:df:f9:bd:17:2e:02:0d:
3a:e5:ad:4f:33:66:4d:58:43:7d:5c:27:4d:79:56:c9:ef:99:
7a:f0:86:ee:37:94:b7:f3:00:e8:ec:48:91:cf:a7:b4:bd:07:
df:49:79:c6:43:da:a1:34:36:5a:28:86:a2:27:3c:1d:6b:ac:
26:74:bc:d1:f9:f3:2b:bd:be:8d:e6:9d:9b:f2:44:26:fc:b6:
fc:cf:63:1e:2e:dd:6c:9a:26:0a:ca:4b:f5:df:e9:ce:e5:7e:
79:f3:c0:99:b0:1a:fd:4f:9e:aa:25:8a:89:8c:41:48:f4:cd:
54:13:50:e7:f6:20:b3:65:83:d4:fe:86:09:f2:45:5a:f0:e0:
a5:15:40:c0:6f:04:9a:6d:92:90:28:f5:80:e3:1d:fe:4a:4a:
23:a2:c6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:28:57 2026 by rpki-client