Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: KMwSC6bG9Kd7QXofiUz3R6uskUtiHxzj7R6LwwAPZfc=
Subject key identifier: 31:A4:E2:AA:A8:6F:E7:55:A3:F3:33:AB:E7:70:46:B9:CD:97:35:7E
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 01A1287A464ABF707E9BB0138598A0537C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 1A95
Signing time: Sun 11 Oct 2026 01:01:04 +0000
Manifest this update: Sun 11 Oct 2026 01:01:04 +0000
Manifest next update: Mon 12 Oct 2026 01:01:04 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: yA5dXp+m6ho06FWluwzMjVHMkvPoPutAOwXUEj1Eifk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:46:4a:bf:70:7e:9b:b0:13:85:98:a0:53:7c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Oct 11 01:01:04 2026 GMT
Not After : Oct 12 01:01:04 2026 GMT
Subject: CN=31a4e2aaa86fe755a3f333abe77046b9cd97357e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:c0:2e:f3:07:fc:ec:22:5e:c5:9d:80:08:
b2:81:93:d1:5a:a4:63:ca:3b:fc:07:ba:8a:65:81:
ef:20:26:c1:74:d9:e6:44:36:e5:16:6f:42:de:30:
bc:d5:1b:46:95:48:fd:d9:76:89:bd:9d:f1:24:03:
a1:3c:22:67:f9:6e:46:ea:e7:6e:34:d3:d5:64:68:
b6:0d:2f:fb:66:2e:7e:a2:d8:e3:5d:07:70:61:53:
ba:ab:11:0d:b4:2b:1f:eb:e2:53:46:47:1c:c5:f5:
c1:f5:43:3d:9e:77:79:c8:dd:49:cb:a0:cb:d0:da:
9e:9d:2b:c4:b6:86:63:aa:3b:97:4a:ec:6a:72:a2:
a4:f8:71:f1:bd:5c:30:3b:04:0b:6f:79:27:88:9d:
48:fa:69:00:c1:fa:77:d3:50:c0:35:ce:cc:73:b6:
5a:5c:14:6c:fd:63:e6:03:de:60:f4:a3:f7:f3:40:
8b:9c:1a:c8:f4:56:0c:2a:87:de:b2:bb:90:a0:eb:
47:95:55:fe:3b:c3:ed:9e:75:22:3e:33:f7:80:b3:
1d:b4:9c:aa:42:e7:27:90:0d:e7:1d:fb:89:1c:50:
f8:1a:93:ac:37:d5:31:13:a4:56:6f:2d:ad:f7:be:
3c:8a:b1:68:97:ae:20:63:db:b1:f8:1e:a2:16:3a:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A4:E2:AA:A8:6F:E7:55:A3:F3:33:AB:E7:70:46:B9:CD:97:35:7E
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:96:58:33:e5:12:f1:09:05:78:32:54:2a:d1:03:3f:4e:67:
64:fa:0e:36:d9:07:74:cb:81:f2:81:9b:cb:ea:aa:62:b2:d3:
b5:22:78:c1:e8:00:27:9f:45:63:c0:30:cf:94:82:57:59:00:
06:64:80:e9:37:e0:b6:12:12:53:32:91:45:ff:b5:bc:2b:34:
d7:9c:2a:b6:97:99:c0:db:2b:c9:9b:f9:dd:a4:70:2e:ce:b3:
87:0d:7e:01:5f:42:d9:0f:eb:b0:49:d0:5e:6d:b3:a2:09:9d:
22:2e:cb:87:b2:20:8d:c9:65:a0:8b:5b:5a:0d:c1:2f:70:11:
2e:f8:63:00:94:69:74:1f:29:a5:c7:0f:06:15:82:ec:00:ba:
d1:24:30:a4:4c:3c:e5:00:5d:41:ed:c3:b2:d2:f0:80:c2:28:
5b:db:cc:45:c6:55:b5:7b:14:53:1d:64:f8:0c:95:01:be:5f:
32:5b:6d:f9:ab:2e:a8:93:c4:75:ea:d6:43:fe:e4:ff:64:5e:
2e:ad:b0:22:da:d2:5b:fc:f3:a3:f3:46:64:1b:c4:66:ac:c8:
2a:d7:19:13:39:45:80:04:cf:39:9d:fc:d1:ab:09:e3:bd:16:
ac:65:47:7d:95:3b:2b:7f:f8:e4:4c:75:09:0c:24:7b:95:f4:
63:37:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 04:40:44 2026 by rpki-client