Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: pgoSfwWlntVE80kLjJbDYmCpJaNoIrA1L3tRGAPMGCw=
Subject key identifier: AB:3B:0A:B8:13:52:91:CE:62:10:F0:7F:33:C7:E2:38:BA:71:BD:EE
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 01A0E7AEF7546916E5B4B33329A30DC40246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 11:03:18 +0000
Manifest this update: Mon 28 Sep 2026 11:03:18 +0000
Manifest next update: Tue 29 Sep 2026 11:03:18 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: 8QqQp+SWGjJrJjNZSYWgWLkZh/GnkcU3dxi6cp0Ij9s=)
2: mGKvGN6mzAi9Xi9OgEnQnIpovsQ.roa (hash: AZAga0gvOyoyk29F5YS9oe0dyqX933PqnZoBR7aFkQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:f7:54:69:16:e5:b4:b3:33:29:a3:0d:c4:02:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Sep 28 11:03:18 2026 GMT
Not After : Sep 29 11:03:18 2026 GMT
Subject: CN=ab3b0ab8135291ce6210f07f33c7e238ba71bdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:80:a3:7d:f9:7d:45:15:5d:b1:e6:5e:62:
bd:08:55:7b:36:44:c0:0f:7d:56:84:8a:60:1f:46:
a2:2a:e7:b2:24:93:ce:52:48:f5:57:0c:9d:ff:9d:
ef:92:d0:55:3b:08:4b:c0:a3:45:1b:75:bf:66:42:
10:49:d9:c6:d2:57:93:10:a3:e6:07:96:21:c4:bb:
6e:ad:4a:86:63:a1:05:b9:86:7d:cd:14:e8:64:85:
48:09:37:de:41:70:26:db:cf:bf:76:53:04:1b:22:
fb:90:89:7a:1a:ed:79:8d:c9:79:1e:f1:08:be:fd:
a7:a8:c3:70:57:3a:c9:b5:16:21:0a:50:8a:72:8f:
cb:16:c9:e6:8f:af:cb:0f:c0:73:ac:1d:9f:3f:74:
23:3a:cd:d5:11:33:50:46:af:36:b4:65:b2:1b:18:
81:8a:94:96:2b:89:89:89:76:42:31:1c:b7:46:32:
a4:9a:a2:02:fe:5f:5b:83:43:e8:fe:8e:03:9f:18:
02:11:42:b0:7b:1d:35:aa:c7:3f:fc:dd:35:3e:00:
cd:b5:bb:3f:23:d4:6c:08:90:8a:f2:26:3b:79:32:
b4:e9:c7:45:84:26:b5:4c:e6:41:75:4d:ea:02:86:
5f:fc:16:fa:ac:7e:46:74:85:9c:9a:52:73:b4:42:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3B:0A:B8:13:52:91:CE:62:10:F0:7F:33:C7:E2:38:BA:71:BD:EE
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3a:94:3f:37:8e:e0:17:ef:b1:e0:a0:3b:3b:cc:41:13:a0:
78:c3:6f:0e:11:51:c3:10:01:25:4e:f0:f4:fa:4e:13:d6:9b:
bc:e6:08:d9:d5:36:3a:cd:d1:e4:c9:24:41:4c:f6:8a:62:ac:
cd:20:48:26:5f:fd:2d:2f:5b:50:57:3a:93:82:57:da:a9:a1:
0b:63:f6:93:28:67:8b:67:2b:cc:ab:4a:10:1a:01:e0:5b:e0:
71:66:fd:df:20:2f:8b:69:42:bc:0e:7f:b9:95:c3:9d:14:c1:
0f:c3:1b:60:49:a2:e5:a3:d6:28:ac:19:d5:8e:d6:ac:d4:77:
9b:ce:0d:85:e9:73:8b:14:25:c0:bd:d2:f4:d2:0e:c4:52:13:
01:9e:2c:3c:0e:86:67:a7:df:f5:d8:a5:70:e3:b4:67:7d:fa:
a5:7f:6f:34:8f:af:05:9e:76:49:1c:9b:0a:00:7c:e8:d8:3c:
1c:64:04:d3:19:25:8c:e9:2a:8a:06:7c:ad:72:1f:ed:37:56:
74:4f:42:12:b1:f5:4a:05:25:40:38:22:b2:08:c0:f1:23:73:
48:68:89:de:9d:d1:f2:98:97:32:c2:d7:b2:3b:41:ab:07:3c:
f4:57:4a:d7:81:8b:8b:c5:51:7e:c9:b4:3b:72:77:db:f1:d8:
9b:f5:08:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:05:14 2026 by rpki-client