Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: cPTIUcmCVLWxvIlihraNLg6c5DqyR9EW6SSFA6/1bAs=
Subject key identifier: 82:9C:DE:21:3B:04:B9:46:E3:99:47:B7:6C:D0:53:A7:09:EE:52:6E
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 01A105EE25BCCEEF4C32BD7057D9B605114C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0F02
Signing time: Sun 04 Oct 2026 08:00:55 +0000
Manifest this update: Sun 04 Oct 2026 08:00:55 +0000
Manifest next update: Mon 05 Oct 2026 08:00:55 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: FhcgdmodqNnwCGhh+iV1cMhe3QlQJ0AP+Zoyg6Yi1b8=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ee:25:bc:ce:ef:4c:32:bd:70:57:d9:b6:05:11:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Oct 4 08:00:55 2026 GMT
Not After : Oct 5 08:00:55 2026 GMT
Subject: CN=829cde213b04b946e39947b76cd053a709ee526e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:57:c4:36:66:5f:04:54:ed:2d:c4:8c:4c:
bb:b6:b6:42:b6:3e:61:f1:3f:37:0a:95:57:24:a9:
cb:95:ef:6c:45:0a:c8:91:e4:38:cc:ef:97:67:45:
ce:7e:22:ae:4a:b5:ed:cb:9c:34:c8:e7:88:7a:f5:
da:bc:c2:c6:da:e4:9a:af:4e:3f:25:1e:94:d5:59:
db:3c:25:75:70:35:70:c0:3b:6d:9d:a2:d0:6d:d0:
25:c2:5e:5e:68:18:73:75:70:27:dc:28:9b:07:0f:
9f:2f:b8:e3:31:7b:6d:69:82:fb:07:f2:d5:07:64:
9b:a8:ca:b1:dc:f7:c0:01:73:a7:8f:bc:75:d2:18:
bd:0d:12:9f:96:16:73:28:81:c2:70:15:78:8a:57:
af:d0:6e:b2:1e:89:39:9b:95:a6:98:4e:e5:d4:cb:
a4:cd:1d:d1:96:08:64:7d:5b:8f:fa:22:af:f8:a6:
86:3b:a2:b1:c5:19:e6:4f:5b:42:54:a4:ac:71:f6:
c4:9f:52:5e:79:ec:c6:64:1f:ea:5a:85:f1:1d:ef:
43:aa:12:ed:34:aa:66:fe:c6:b5:69:41:c5:63:01:
ef:1c:29:10:77:42:65:73:35:44:31:2b:e7:dd:db:
12:a2:90:e2:b7:da:13:b0:45:c6:33:7f:2e:4f:f9:
d8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9C:DE:21:3B:04:B9:46:E3:99:47:B7:6C:D0:53:A7:09:EE:52:6E
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8d:ac:d2:14:17:d3:e4:77:4a:2a:f8:0f:61:a7:88:d2:16:
25:63:c5:e7:d4:77:71:e7:9c:dc:f5:95:44:ba:bb:e4:30:1f:
d1:d5:8a:02:8e:db:14:d7:e9:9f:e2:c3:41:49:c7:39:ac:c1:
de:cc:3d:76:f3:b4:7b:9c:6b:e5:b2:b6:11:ba:1b:a6:8b:35:
75:a9:1a:5d:a9:91:10:96:12:0e:89:b9:e3:8b:0c:6b:92:e6:
84:d3:c7:c6:ac:a8:d9:41:19:3c:49:4d:d9:91:af:29:3a:a6:
68:aa:9b:b6:58:cb:c7:39:8c:3f:f5:0f:4a:e8:45:c8:f3:6f:
b2:ab:45:93:d0:76:75:9d:ae:6d:42:39:90:c2:b9:3c:93:84:
46:33:d6:a2:51:0f:6d:20:0b:13:41:c9:7b:91:cf:d6:29:e7:
4e:17:4e:01:36:8e:9c:53:21:3c:3a:07:d7:d0:41:49:9c:40:
b8:b0:ab:fb:b0:2e:7f:7c:82:f4:90:89:35:46:43:7d:54:e4:
61:f9:48:bb:12:16:37:18:65:e2:69:cd:07:0f:19:57:51:89:
a1:9d:dd:83:41:19:7b:af:33:69:a3:1b:e2:f2:02:c2:74:38:
8f:d6:af:14:df:92:5f:23:cf:ba:4a:a3:c2:1a:ea:f2:fe:b4:
62:b2:35:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:23:00 2026 by rpki-client