Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: 7tMzIaxFovHcHyYQHEiEmVeSC30VdRoYfMOwNPxDzhY=
Subject key identifier: 6A:E8:6E:59:E3:30:80:3E:93:CE:75:B7:96:35:51:9B:A0:D3:B3:84
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 01A0CA7D6B4094629498D2EB08540D426231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 0AD0
Signing time: Tue 22 Sep 2026 19:00:12 +0000
Manifest this update: Tue 22 Sep 2026 19:00:12 +0000
Manifest next update: Wed 23 Sep 2026 19:00:12 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: DV9WyMYP+HJbC5RSuVTcu+qLkST9THwmGano87KoCA0=)
2: xqAixzHxlN966fRenr5XBiPgZn8.asa (hash: 5Xg49cf9RjMtXD/hwpV8EsDl4tWwJlu6vHXbTMSTy+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:6b:40:94:62:94:98:d2:eb:08:54:0d:42:62:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Sep 22 19:00:12 2026 GMT
Not After : Sep 23 19:00:12 2026 GMT
Subject: CN=6ae86e59e330803e93ce75b79635519ba0d3b384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:79:3b:57:30:b0:c3:f1:b0:29:02:28:ea:fb:
a2:d9:8d:3e:30:e3:b7:16:12:02:f5:9b:c3:f1:fc:
0e:18:99:52:ba:cc:15:a6:91:65:55:57:9e:7c:37:
67:3c:bf:60:c6:30:d2:79:98:22:c4:54:94:2a:66:
11:2b:9d:ad:a3:b2:46:e1:58:b7:92:9c:02:7f:99:
d8:5a:36:aa:b7:ae:cd:f5:05:eb:ae:3c:3a:f8:c6:
cc:ee:cc:d9:74:15:8e:13:fa:b8:12:12:d5:a3:b2:
e5:59:0e:43:d5:59:fe:82:65:1d:62:b5:53:32:3c:
33:87:d6:9a:2e:6b:bd:52:cc:a6:ea:76:ea:1f:13:
c8:89:7f:b1:5a:92:f7:a4:19:6e:c6:1f:28:f3:cb:
b3:61:e0:63:50:12:ba:8c:8e:10:77:d9:95:29:01:
be:bd:d5:4e:37:44:b8:86:c4:dd:22:38:5a:dd:4d:
13:a9:a5:e0:c3:3d:81:e6:d2:bf:e6:97:8e:9b:a9:
05:14:62:96:69:7a:69:63:69:04:ae:65:6e:2b:4f:
14:fd:d2:5a:61:4c:b6:7c:7a:34:66:85:b1:2e:f9:
71:29:64:6b:aa:5c:55:5a:21:48:a4:d9:11:78:b8:
ca:4d:e1:b7:90:cc:9a:f8:75:7d:de:64:ea:d8:66:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E8:6E:59:E3:30:80:3E:93:CE:75:B7:96:35:51:9B:A0:D3:B3:84
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ca:37:d8:de:d5:9a:06:0c:c7:ca:32:bd:2b:29:88:57:7e:
b9:5f:0b:f8:ec:8c:ac:73:b9:5f:fa:b9:2b:84:bd:7d:cf:8b:
14:a5:b0:58:a9:ff:7e:17:48:1d:23:46:08:72:bf:aa:cc:d9:
28:bf:e4:f9:4e:2d:e7:71:43:60:b3:22:65:7a:6f:e5:99:e0:
6f:18:32:f7:58:a0:73:94:82:17:71:b2:bc:43:b4:57:f0:d5:
96:a3:20:82:f9:bf:e6:72:c3:8a:fb:3e:62:54:32:f1:1d:c5:
d7:b1:e9:92:3e:eb:3e:79:75:10:ca:86:ed:3a:d7:b4:4e:6f:
9d:af:79:4c:9b:2a:74:da:73:07:a0:6b:72:1b:d3:0c:c7:5e:
4d:ce:42:37:e3:53:00:a9:9a:01:e0:04:1c:3f:25:2d:f8:45:
4f:83:67:55:6b:96:b4:bc:00:f3:b6:7c:5c:56:df:14:d7:1a:
01:c4:e3:8f:22:a6:0b:ea:36:23:8b:f4:3b:c2:21:b6:ba:1b:
70:14:eb:f8:6d:57:67:fe:20:a5:cf:09:d6:5e:11:42:d9:ae:
c3:8f:bb:cc:bd:ce:e5:15:5f:1f:64:d4:36:92:b7:2b:20:f5:
bc:f1:cb:bb:a1:4f:9a:3c:2c:6e:19:df:b4:20:5b:71:57:26:
d2:87:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:32 2026 by rpki-client