Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
File: 9RMq2BqEohEhxQRHsgidzl5LI4o.mft (raw, json)
Hash identifier: 8wTLtkE9S0yihihhZAptrsY7KV+f4wFumGDAh+AJ+Ss=
Subject key identifier: C4:D9:BF:A8:08:41:AA:EA:F7:AD:3C:C6:3C:BA:21:99:9D:F5:C8:8C
Authority key identifier: F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
Certificate issuer: /CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Certificate serial: 01A0D2008D3CC2004791F9A33B94902EBFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
Manifest number: 01B3
Signing time: Thu 24 Sep 2026 06:00:46 +0000
Manifest this update: Thu 24 Sep 2026 06:00:46 +0000
Manifest next update: Fri 25 Sep 2026 06:00:46 +0000
Files and hashes: 1: 810BVakNXZc-eZCkm84wPbkx0zw.roa (hash: 4W7QJcIB5zQfI2eP/65KAZgZifjdrkX8vzWfoESNuGg=)
2: 9RMq2BqEohEhxQRHsgidzl5LI4o.crl (hash: 6c8CZA7KSfowz3XfuIuyzjXaeGjVwAkRXGPsLQoQTmo=)
3: T7Q4ZInr7nmTwTSXGOP2lYQS6SE.roa (hash: Y1/e/IgPvhokjR0rrttCkxlf/wWiyXtQnZX5Qj+ssXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:8d:3c:c2:00:47:91:f9:a3:3b:94:90:2e:bf:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5132ad81a84a21121c50447b2089dce5e4b238a
Validity
Not Before: Sep 24 06:00:46 2026 GMT
Not After : Sep 25 06:00:46 2026 GMT
Subject: CN=c4d9bfa80841aaeaf7ad3cc63cba21999df5c88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:4e:f5:26:30:47:b6:62:c2:f0:6e:db:94:
4b:d9:27:4c:d9:fa:f4:e8:2a:04:f3:7a:4b:ba:34:
46:b3:fc:48:bf:a2:bf:c3:33:cc:95:d9:62:5a:8c:
2d:2a:29:e8:08:7f:4a:66:f0:6b:98:30:1f:57:95:
5f:37:59:a5:c2:5e:94:8c:6e:da:bb:8e:35:05:f2:
a3:40:c8:00:5c:2b:b8:32:1f:8d:05:67:55:72:a8:
8b:30:53:2e:12:01:42:fe:7c:61:4d:44:65:b8:04:
77:ca:c8:79:11:aa:9b:39:ee:e5:b1:78:22:04:07:
47:32:c0:b3:56:13:dd:b9:dc:35:97:7a:df:78:fb:
86:6d:4f:96:cb:06:a3:e0:4a:01:70:1b:6c:d9:54:
09:c4:9c:9b:41:d5:e6:10:3d:0b:33:d4:04:34:d3:
b0:a2:86:bb:65:3f:9e:3c:b7:28:5f:38:13:2c:c3:
8a:13:97:b5:52:ef:20:ca:dd:49:ea:1f:49:70:2c:
43:92:21:31:91:36:72:4d:36:41:9d:4d:89:f3:0e:
dc:c2:72:37:8e:12:cc:07:18:d0:63:e1:65:d6:8a:
66:fc:cc:a8:80:be:4b:f9:49:43:d9:d1:0b:42:2c:
33:2d:21:71:d4:ae:89:65:47:b3:45:6f:7b:61:02:
1a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D9:BF:A8:08:41:AA:EA:F7:AD:3C:C6:3C:BA:21:99:9D:F5:C8:8C
X509v3 Authority Key Identifier:
keyid:F5:13:2A:D8:1A:84:A2:11:21:C5:04:47:B2:08:9D:CE:5E:4B:23:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RMq2BqEohEhxQRHsgidzl5LI4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9e8b4b-0920-4fc7-8972-ea841e67c5d6/1/9RMq2BqEohEhxQRHsgidzl5LI4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5d:ab:c8:94:a2:c1:f8:86:b4:86:a6:8f:26:28:18:36:ae:
12:23:64:fe:20:0d:68:07:86:a6:87:48:e8:6f:34:a2:6d:82:
e2:57:bd:16:7b:f2:46:03:55:7b:d4:b3:2d:1e:1e:15:fa:e1:
23:fb:49:d8:76:32:d3:9d:fe:37:94:f3:89:d5:ca:50:25:76:
63:2a:2d:be:49:b5:8b:19:e8:4c:48:ca:c2:e0:84:54:b7:7f:
88:a3:3c:c9:b8:67:9a:e7:65:6d:e8:f3:72:4a:80:72:a6:e0:
9f:a7:96:1b:69:8f:a2:eb:df:95:8b:ec:68:bc:4d:de:78:fd:
48:f0:84:b9:54:53:38:fe:f4:f6:fa:73:53:37:62:ed:78:6a:
52:b4:6a:ce:0a:3c:66:03:94:1f:bc:6d:55:b2:fa:85:db:bc:
9a:b8:f0:4a:53:08:00:0e:6b:2a:82:3a:7f:ce:4e:a2:cc:2a:
ae:94:a9:11:2b:59:9e:cf:30:bf:f2:ad:6f:f6:02:84:0d:c7:
68:85:e3:81:eb:02:07:46:b4:61:18:7c:6b:33:4e:c5:aa:6a:
fb:a1:f8:99:28:7d:79:bd:98:b1:44:d2:d8:70:bd:7f:45:9c:
b7:f9:44:28:3c:27:2d:d3:3d:3b:10:7a:5a:51:a2:cb:73:a2:
f7:37:ff:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:53:58 2026 by rpki-client