Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File: 9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier: C9FsHYn/IbOVGA9HEkH1pCi+MLTEzt8YFO6+yIdKbEc=
Subject key identifier: 25:57:2C:6C:09:68:99:7B:86:FE:1A:AD:97:1F:8B:96:DE:41:62:1E
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial: 01A0D2018421E994F19E8CBC375BE24FED00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 06:01:49 +0000
Manifest this update: Thu 24 Sep 2026 06:01:49 +0000
Manifest next update: Fri 25 Sep 2026 06:01:49 +0000
Files and hashes: 1: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: gvjLPNeJZRBoxvps/58OzMuuITdChbfihP/IPvC+qIQ=)
2: JuwdF3pXKULgX8rdBkYwVawnKUg.roa (hash: J6niK53xMmSAm4XjHsm9sqSbekhWgzfMokxnfXFEmFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:84:21:e9:94:f1:9e:8c:bc:37:5b:e2:4f:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Validity
Not Before: Sep 24 06:01:49 2026 GMT
Not After : Sep 25 06:01:49 2026 GMT
Subject: CN=25572c6c0968997b86fe1aad971f8b96de41621e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f0:87:a3:e2:e6:ee:30:c3:dd:d4:24:5a:5d:
b8:eb:03:09:93:86:0a:f7:16:c5:82:f5:da:f8:a2:
87:07:49:3d:29:4b:96:c9:9d:65:11:58:17:62:77:
91:64:39:84:f1:54:7e:96:0e:8b:06:53:16:96:6b:
f3:dd:e4:8a:02:46:21:97:a6:5e:b0:ce:e6:95:a9:
66:58:7b:d0:0c:e1:0c:f4:f6:e5:3d:d5:60:12:b3:
c4:e5:4a:42:90:7a:8e:a6:47:a6:1f:2a:7f:ff:e2:
9c:41:5e:51:5b:7d:90:07:36:1a:64:d1:7d:a3:30:
b3:b8:45:15:65:64:6a:c2:d5:39:55:50:0f:65:b9:
98:fa:ba:f5:3e:07:0f:a5:e4:64:0a:f5:d5:e4:41:
e6:cb:e9:b6:64:e8:72:06:bb:08:21:33:32:ee:29:
dc:04:dd:40:62:d0:17:8c:4f:ed:c9:e6:a7:3d:d7:
fd:ad:25:77:78:b7:e3:a2:45:82:9d:4c:e1:4d:0e:
ea:96:ca:d1:f7:2f:96:35:29:8e:b0:3d:0f:74:aa:
38:1a:54:c8:f8:a5:fe:e6:50:14:3b:ac:51:f1:82:
6c:f7:69:7c:71:3b:39:b0:0e:0e:8e:12:4d:f1:35:
ba:10:07:6d:39:cc:f6:9a:52:37:41:ee:dd:67:4c:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:57:2C:6C:09:68:99:7B:86:FE:1A:AD:97:1F:8B:96:DE:41:62:1E
X509v3 Authority Key Identifier:
keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:74:a4:d5:2c:77:0d:ca:53:09:f4:9f:2a:23:b9:6d:ca:8b:
7e:8d:ef:e0:de:4e:59:01:ab:c8:ab:78:12:4c:86:49:1b:2b:
05:0e:b7:69:98:67:70:bb:09:9c:54:ec:cf:55:68:df:25:89:
a2:a7:82:3f:40:85:dc:29:ad:54:69:48:18:e3:e4:f4:08:29:
7c:d8:c5:ad:d8:34:e5:d2:25:8e:cd:08:d6:41:52:08:e3:3b:
f6:e5:c7:05:54:0e:91:f3:e5:f3:4b:ed:57:84:da:ca:eb:e3:
f9:b4:5f:2b:ac:9b:16:3e:94:29:91:f2:18:2a:ae:d0:90:e2:
e2:6a:1a:bb:4a:3b:06:12:41:47:b4:87:28:b1:18:b7:a5:db:
ff:21:67:4c:f7:0a:9f:ac:b4:ff:6c:c6:5a:05:29:04:32:44:
53:d8:e1:de:3a:48:39:72:3f:24:f6:61:b3:8d:fd:77:f0:51:
8e:23:a2:83:1c:f8:21:b5:6a:be:bf:a6:f7:e5:f0:5b:e5:31:
38:62:6a:53:62:bb:53:7e:f4:cf:d8:70:39:60:e6:bb:59:b5:
57:d9:34:f2:2d:68:72:04:2b:a2:ec:2e:a8:bb:f4:db:6f:74:
86:da:e3:f9:9f:56:93:ad:ca:1f:d5:ca:d7:dd:d4:74:e5:41:
3f:8f:a3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:02:05 2026 by rpki-client