Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
File: 9hUWPY_cRSP7uCJN89wgese94ck.mft (raw, json)
Hash identifier: TaMLoN25uWsc0v7JfvdsQ/bUYtrVokq9QaarfolojiY=
Subject key identifier: A3:14:AC:59:D7:81:70:5C:A4:16:E5:9F:CC:6D:63:D8:31:B7:20:0A
Authority key identifier: F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9
Certificate issuer: /CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
Certificate serial: 01A0CF368902BE359CAE0C09DDBFB4BE1C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
Manifest number: 037F
Signing time: Wed 23 Sep 2026 17:00:52 +0000
Manifest this update: Wed 23 Sep 2026 17:00:52 +0000
Manifest next update: Thu 24 Sep 2026 17:00:52 +0000
Files and hashes: 1: 9hUWPY_cRSP7uCJN89wgese94ck.crl (hash: hNLIl1gZwPFuFT4svzTN1yU4G1oNKxdDJylIO8hakzM=)
2: ZW4Y1TGuNOmvztoKC-GttBiocmk.roa (hash: Pc22uXR6lgCrGRVc00EDjUUEOpeb78zqYMkdzAmaFbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:89:02:be:35:9c:ae:0c:09:dd:bf:b4:be:1c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
Validity
Not Before: Sep 23 17:00:52 2026 GMT
Not After : Sep 24 17:00:52 2026 GMT
Subject: CN=a314ac59d781705ca416e59fcc6d63d831b7200a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:0f:13:5d:4e:0a:00:05:d9:48:cd:cd:e0:
09:ee:b5:d2:3c:fa:8a:5e:13:9d:34:af:c0:ca:64:
6c:50:79:70:03:f7:e7:65:36:15:52:66:46:cb:ac:
70:b3:79:b3:4b:1b:06:5a:97:2b:54:0a:03:02:e7:
c6:9f:2d:85:1a:39:a4:8f:07:a7:08:e6:c7:c1:32:
d7:b1:6e:25:34:32:13:2e:f2:e2:5a:4b:8c:c2:98:
9a:a9:7f:c5:a0:b0:1d:96:09:a2:fb:2e:43:bd:e4:
6b:18:b3:e8:e5:8d:6e:4f:dc:0f:6a:30:73:62:98:
0a:58:16:f4:47:cc:80:42:fe:e9:6d:c2:cf:5a:a7:
e4:2c:ff:dc:4f:6d:d5:7b:b8:b0:a4:a0:30:37:17:
6f:a3:55:fa:b8:06:1b:12:4e:83:82:45:f8:59:46:
98:5c:ee:51:24:8b:ba:34:f3:91:5c:1d:e2:8e:d7:
1f:e1:ca:95:70:bd:aa:e3:11:95:ae:7d:b3:d6:c4:
07:2c:08:16:dd:f8:27:6a:47:09:ec:68:2b:eb:79:
c8:67:a4:1f:be:4b:b5:ff:b0:73:25:19:15:fa:51:
0c:bf:2c:d6:2c:82:b9:63:2c:6d:89:fc:b4:00:0e:
9d:13:7c:c1:84:c5:0e:4a:1e:1f:88:fe:29:a0:06:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:14:AC:59:D7:81:70:5C:A4:16:E5:9F:CC:6D:63:D8:31:B7:20:0A
X509v3 Authority Key Identifier:
keyid:F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6a:88:1d:6a:43:77:ab:df:d7:38:2a:d3:7d:07:f5:68:a0:
0f:9c:21:e1:e7:80:17:6d:04:c5:1b:1e:e6:04:0b:12:4e:83:
8b:8f:fc:ec:ab:ce:ff:5d:09:b5:50:0f:8c:26:9c:7b:17:04:
85:16:d2:c1:f9:17:59:ea:71:ca:05:c7:e9:e2:9d:17:b9:98:
b0:d0:fe:a9:38:18:6d:05:00:d9:0c:6c:d4:22:7c:8c:d3:f5:
dc:e5:5f:af:c6:1b:03:34:ce:e8:84:59:73:8e:54:8d:dd:d1:
0c:89:4d:d9:a1:76:1d:d9:d2:2b:38:63:43:76:ff:c9:69:31:
4c:bd:3b:6a:b6:07:65:2e:43:3b:53:83:ab:ad:b1:fa:c2:0c:
2f:21:33:26:31:19:38:47:fd:0a:51:4b:9f:3c:d5:4e:2d:82:
bc:37:b4:6d:b0:b6:ba:64:2b:85:c8:1a:fb:6d:f4:d4:3a:98:
30:81:d3:69:ad:d2:56:69:92:fc:bc:90:fc:af:8f:08:04:c5:
2d:15:43:41:59:98:c8:12:77:04:8b:cb:52:b9:c6:12:c7:55:
cf:b2:ec:d3:47:2b:09:57:27:33:94:3b:5c:3f:ba:17:1e:a8:
5d:2d:3b:5e:ff:34:2e:c5:b7:57:ab:f1:06:31:18:de:b8:18:
65:81:64:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:50:11 2026 by rpki-client