Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
File: C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft (raw, json)
Hash identifier: gkvyzw9vKkiF9vgpjiHbsUS5+8DtqzdHawWPStdOZU4=
Subject key identifier: 5D:D0:47:D0:37:84:BB:55:BD:7A:FA:3B:EF:D9:EC:C8:7B:F3:BC:A2
Authority key identifier: 0B:DB:BA:C7:93:E1:D6:88:B6:5B:DC:00:DD:52:65:8E:20:AD:64:FD
Certificate issuer: /CN=0bdbbac793e1d688b65bdc00dd52658e20ad64fd
Certificate serial: 01A0D34B304A2B9B1F401766D917F802B09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
Manifest number: E8
Signing time: Thu 24 Sep 2026 12:01:55 +0000
Manifest this update: Thu 24 Sep 2026 12:01:55 +0000
Manifest next update: Fri 25 Sep 2026 12:01:55 +0000
Files and hashes: 1: C9u6x5Ph1oi2W9wA3VJljiCtZP0.crl (hash: lvkCXi/71iTBoMdCiOdXuDDw2pvidRpHkQPyAXRsVMk=)
2: UB6Z4RxbSymmwyF2i0zySOU1_ek.roa (hash: ocRn4kpzWMXb4ndCYHS8/37QR5foKf2xzUiC35UIK0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:30:4a:2b:9b:1f:40:17:66:d9:17:f8:02:b0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bdbbac793e1d688b65bdc00dd52658e20ad64fd
Validity
Not Before: Sep 24 12:01:55 2026 GMT
Not After : Sep 25 12:01:55 2026 GMT
Subject: CN=5dd047d03784bb55bd7afa3befd9ecc87bf3bca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:8c:12:d6:5e:36:04:bc:8a:37:8c:6a:e3:
7a:3b:fc:bf:a9:ff:b4:e6:c0:f0:61:96:1f:8b:9d:
47:6c:aa:52:7f:da:b6:63:14:a3:8d:af:b2:3d:fc:
9c:e7:3d:37:0c:28:50:cd:b9:75:21:c6:4a:f1:af:
d0:c6:fd:ad:d7:0a:0e:f0:7c:a5:56:c8:21:e8:28:
91:d9:b1:de:44:b3:ae:a0:ac:78:67:5c:2a:37:32:
14:e1:e0:1e:46:84:c8:dc:2d:43:dd:ac:c8:9a:9c:
b2:ba:09:bf:3a:56:80:ad:0b:b9:2a:e9:a6:aa:29:
7b:62:cc:32:5d:48:e1:ee:eb:11:8d:d5:24:57:15:
f1:42:1b:29:d9:72:4a:89:81:12:29:64:d6:52:2d:
1f:23:02:4f:55:87:92:b4:36:71:d8:07:97:02:ba:
9b:c0:c1:d9:ec:75:78:b5:9b:1c:5c:45:12:c0:cf:
29:26:16:9d:2b:58:78:29:20:37:0b:ef:7f:23:43:
90:1b:2c:ae:96:c7:70:ae:af:88:40:21:43:dc:bf:
50:40:70:94:0d:db:21:7b:ae:8c:2f:74:5e:14:7b:
1a:a8:d4:dd:26:de:1c:ca:cb:a2:5f:e8:ff:cf:94:
df:09:b5:ab:9a:38:65:1c:34:76:eb:73:54:79:c4:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D0:47:D0:37:84:BB:55:BD:7A:FA:3B:EF:D9:EC:C8:7B:F3:BC:A2
X509v3 Authority Key Identifier:
keyid:0B:DB:BA:C7:93:E1:D6:88:B6:5B:DC:00:DD:52:65:8E:20:AD:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:63:5e:f3:9c:1c:0f:13:ab:fc:98:76:4a:24:04:3b:24:89:
91:e2:25:a1:e6:92:3f:4f:43:a8:1b:51:52:8d:8b:1a:cc:d7:
bb:63:60:67:19:0f:52:9c:97:50:29:39:80:69:16:b5:0b:ca:
76:77:3c:e0:d6:1f:ec:dd:cd:54:68:dc:2a:ea:24:9c:d0:96:
37:11:38:77:24:42:15:5a:32:dd:40:d7:ba:8a:48:6f:88:fd:
66:a1:83:13:71:70:ad:f3:c3:2e:9d:d7:d4:eb:34:65:43:d4:
39:22:9a:0e:13:5b:21:2c:13:9b:2b:d6:dc:04:b2:ff:57:84:
2f:0b:ee:3c:e5:38:0a:d1:cf:ae:2b:0d:fd:19:5b:01:67:39:
c1:cc:e7:cf:12:33:a2:5e:ec:dc:36:65:13:6e:f4:ee:a5:8c:
40:da:6b:49:5d:13:bb:22:62:3d:8a:39:74:f2:dd:71:d5:68:
c5:0b:5c:e2:c4:74:94:b9:91:a3:14:13:61:45:8b:23:b3:cc:
cf:7e:6f:63:0a:fa:9c:c7:6d:fc:16:d7:40:06:e0:a6:70:31:
ed:b4:24:33:5e:89:06:10:53:4c:a6:89:0c:f8:7b:24:bc:13:
19:a0:d3:d9:3b:05:06:3b:4a:30:03:08:ea:82:cb:60:7f:2d:
b9:4e:c3:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSzBKK5sfQBdm2Rf4ArCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZGJiYWM3OTNlMWQ2ODhiNjViZGMwMGRkNTI2NThlMjBh
ZDY0ZmQwHhcNMjYwOTI0MTIwMTU1WhcNMjYwOTI1MTIwMTU1WjAzMTEwLwYDVQQD
Eyg1ZGQwNDdkMDM3ODRiYjU1YmQ3YWZhM2JlZmQ5ZWNjODdiZjNiY2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VyMEtZeNgS8ijeMauN6O/y/qf+0
5sDwYZYfi51HbKpSf9q2YxSjja+yPfyc5z03DChQzbl1IcZK8a/Qxv2t1woO8Hyl
Vsgh6CiR2bHeRLOuoKx4Z1wqNzIU4eAeRoTI3C1D3azImpyyugm/OlaArQu5Kumm
qil7YswyXUjh7usRjdUkVxXxQhsp2XJKiYESKWTWUi0fIwJPVYeStDZx2AeXArqb
wMHZ7HV4tZscXEUSwM8pJhadK1h4KSA3C+9/I0OQGyyulsdwrq+IQCFD3L9QQHCU
Ddshe66ML3ReFHsaqNTdJt4cysuiX+j/z5TfCbWrmjhlHDR263NUecQQRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3QR9A3hLtVvXr6O+/Z7Mh787yiMB8GA1UdIwQY
MBaAFAvbuseT4daItlvcAN1SZY4grWT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzl1Nng1UGgxb2kyVzl3QTNWSmxqaUN0WlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80YTU0MmUtZDMwOS00NzBlLTlmNWMt
ODQwMWU3NTUwNDkyLzEvQzl1Nng1UGgxb2kyVzl3QTNWSmxqaUN0WlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80YTU0MmUtZDMwOS00NzBlLTlmNWMtODQwMWU3NTUwNDky
LzEvQzl1Nng1UGgxb2kyVzl3QTNWSmxqaUN0WlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWNe85wc
DxOr/Jh2SiQEOySJkeIloeaSP09DqBtRUo2LGszXu2NgZxkPUpyXUCk5gGkWtQvK
dnc84NYf7N3NVGjcKuoknNCWNxE4dyRCFVoy3UDXuopIb4j9ZqGDE3FwrfPDLp3X
1Os0ZUPUOSKaDhNbISwTmyvW3ASy/1eELwvuPOU4CtHPrisN/RlbAWc5wcznzxIz
ol7s3DZlE2707qWMQNprSV0TuyJiPYo5dPLdcdVoxQtc4sR0lLmRoxQTYUWLI7PM
z35vYwr6nMdt/BbXQAbgpnAx7bQkM16JBhBTTKaJDPh7JLwTGaDT2TsFBjtKMAMI
6oLLYH8tuU7DGw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:27 2026 by rpki-client