Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
File: 9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft (raw, json)
Hash identifier: +LpRI+tSoCLzzQP7alKzujnqUN5m2IiWq/6aNEfm7Ms=
Subject key identifier: B0:3C:75:21:02:AB:43:E7:DE:AD:93:D8:C9:44:21:9C:1B:2A:96:41
Authority key identifier: F4:DD:8F:BB:92:F9:B4:74:61:87:D9:D6:3F:E9:B9:0F:CB:5E:CA:17
Certificate issuer: /CN=f4dd8fbb92f9b4746187d9d63fe9b90fcb5eca17
Certificate serial: 01A0ED0A640EE6C24826521AA47A6532429B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
Manifest number: 0292
Signing time: Tue 29 Sep 2026 12:01:16 +0000
Manifest this update: Tue 29 Sep 2026 12:01:16 +0000
Manifest next update: Wed 30 Sep 2026 12:01:16 +0000
Files and hashes: 1: 9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl (hash: XbetBMn6OEFtRyU+kB/qh2xQpz1xB3SFBl2N4Lqc9Co=)
2: wosvCdYOBGKEXb-UprSvx0MCphs.roa (hash: tnEA6MDP3i67STNORkdr3Hyo+omI4rqXgbveiy6Se1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0a:64:0e:e6:c2:48:26:52:1a:a4:7a:65:32:42:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dd8fbb92f9b4746187d9d63fe9b90fcb5eca17
Validity
Not Before: Sep 29 12:01:16 2026 GMT
Not After : Sep 30 12:01:16 2026 GMT
Subject: CN=b03c752102ab43e7dead93d8c944219c1b2a9641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:c9:a7:94:d2:e4:97:f7:a0:a9:b7:3f:7e:
de:c5:cd:e4:da:ec:06:f6:e0:bb:e7:24:a4:da:b3:
ce:4f:3e:75:d7:16:ba:ca:df:6f:25:71:ee:51:49:
69:f4:26:c2:97:6d:0b:48:88:f7:c3:59:06:f7:60:
82:23:9e:dd:93:3c:38:d2:77:df:68:9d:bd:24:63:
31:74:82:e1:07:09:4f:db:5b:b6:16:81:ab:61:54:
33:7a:dc:92:90:b5:e7:cf:43:32:cf:6d:6e:b2:22:
46:c7:05:b0:09:e1:6a:2b:de:16:3f:55:8a:ac:f6:
84:d4:f2:eb:65:6d:7b:21:2b:8d:94:cb:54:44:d0:
26:38:e1:1e:11:9b:b9:37:7c:2f:a0:0b:3c:ae:1d:
0b:d4:95:93:95:dc:82:1c:65:47:11:7c:b1:a5:9b:
83:d4:e1:72:cb:be:0f:7c:9d:83:f8:21:77:29:40:
35:9a:ac:fb:f0:52:26:36:f1:31:88:b7:34:f7:2b:
9f:95:01:d0:1f:dc:cf:33:0e:99:1f:69:03:f4:3f:
12:01:c0:42:fa:71:f4:d3:9f:11:28:3c:97:3f:bf:
b1:0c:c7:ac:fd:e3:22:cf:28:3a:7f:71:72:39:12:
cd:7e:0a:4c:4d:68:01:39:0d:71:c1:f7:3a:e5:2f:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3C:75:21:02:AB:43:E7:DE:AD:93:D8:C9:44:21:9C:1B:2A:96:41
X509v3 Authority Key Identifier:
keyid:F4:DD:8F:BB:92:F9:B4:74:61:87:D9:D6:3F:E9:B9:0F:CB:5E:CA:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:46:0b:ac:ff:46:78:bf:fb:e8:fa:45:d1:2a:90:50:e9:00:
52:21:c4:e5:f9:90:67:66:1b:c6:ba:9e:d3:05:b1:8f:f8:31:
41:46:e8:3e:50:1c:3c:b3:f0:6c:86:8c:c1:de:7d:3b:82:82:
3f:47:e2:14:12:d7:ab:a5:a6:a6:d8:af:82:e3:1f:b6:74:60:
e0:ba:c1:76:df:5f:ec:25:35:21:ad:55:50:91:f0:4e:5c:5f:
26:38:b8:c7:c2:7f:ce:59:ee:e5:b9:7a:56:87:63:6b:2a:fe:
d8:48:91:35:0e:be:b9:07:5a:8f:2f:5f:fd:2c:cb:2c:0c:8f:
82:a7:73:7b:ef:64:fc:6c:18:0a:85:d9:f4:30:21:6a:ed:0b:
86:a1:a5:27:20:10:b9:52:b6:27:02:5c:a6:6e:c4:22:5f:cf:
d4:0b:d9:aa:40:d1:36:f2:cf:8d:f0:ef:1f:9d:a5:67:64:5b:
fb:56:b8:3a:0c:29:49:24:ff:0c:79:35:b3:1f:90:06:e1:b1:
65:e5:07:9c:1b:ce:57:b6:cc:fd:3a:80:54:73:57:d4:79:01:
db:ce:4b:a4:14:58:ee:c4:1f:23:1a:6d:8c:97:22:8e:8a:44:
f4:40:ec:5d:61:1a:4b:15:f1:05:dc:c4:c1:a3:a6:1d:fc:b0:
36:74:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:23:01 2026 by rpki-client