Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: 4kfdWqf3Q0fk35ouTFLdfBiXk4SUDJwYNZVnAzZ2zwc=
Subject key identifier: A8:CB:C9:16:F2:4E:04:13:15:7E:1B:98:B6:17:D1:D7:FB:6B:49:33
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 01A0D3B8AE45B66ABA93F292A7EB9510C120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 114E
Signing time: Thu 24 Sep 2026 14:01:30 +0000
Manifest this update: Thu 24 Sep 2026 14:01:30 +0000
Manifest next update: Fri 25 Sep 2026 14:01:30 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: asrxqFHBiaSNeFuYWDDrAi17TXSQDFIxTvPoCjsOLqA=)
2: h5DIp02VidThuOHraMPFCodvygs.roa (hash: xwNLtlpo98S4VMl0NrrQV2mRppmcREH8EvSc90IeL2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:ae:45:b6:6a:ba:93:f2:92:a7:eb:95:10:c1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Sep 24 14:01:30 2026 GMT
Not After : Sep 25 14:01:30 2026 GMT
Subject: CN=a8cbc916f24e0413157e1b98b617d1d7fb6b4933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:d5:1a:17:e2:a4:d5:cd:ba:cb:9b:ba:45:
d2:45:f5:cd:eb:72:7a:1c:cf:b7:a2:2f:80:b0:e1:
46:dc:95:fc:31:fd:3e:d7:53:fb:8a:fc:8f:32:bd:
21:a8:a2:13:5e:b6:1f:dc:9f:48:5f:77:4c:ca:37:
c3:81:c7:2f:5f:f2:e5:aa:9a:dd:c0:d4:f7:23:ad:
f2:8f:ea:3f:30:04:ea:88:ce:e9:19:bb:df:ac:c4:
78:5c:09:fa:2a:97:1f:5a:30:06:ba:e1:6c:0b:90:
b0:f4:80:e3:1b:87:96:3b:7c:a5:f1:da:f8:d9:25:
2a:93:2c:27:e8:a1:b4:e5:06:9d:97:43:6c:12:98:
61:9b:8d:2b:42:b7:d0:f6:48:ef:dd:8f:4a:71:44:
5d:bf:96:62:25:9a:2b:bf:fb:26:ee:81:ae:39:ef:
c8:02:4d:f7:4f:5e:1d:b9:6c:5f:35:72:f5:ae:ca:
02:9f:93:db:b6:78:f0:88:bb:23:b2:c7:3e:b2:51:
10:12:27:c3:93:57:df:71:81:0e:7b:67:17:93:83:
0c:5f:99:69:63:aa:26:b6:c9:f4:b4:f6:13:b2:e3:
fd:0b:b7:16:f6:b8:6d:58:96:f6:97:27:12:85:34:
9a:85:d7:b6:96:ae:0e:d0:d7:04:4a:68:99:01:ae:
2c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CB:C9:16:F2:4E:04:13:15:7E:1B:98:B6:17:D1:D7:FB:6B:49:33
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:12:6d:76:f8:1e:82:6b:7f:f9:b2:98:a1:81:9c:9a:a7:8a:
a4:3b:47:36:bf:a7:9d:90:27:f7:c3:c9:d7:d0:fb:e8:8d:9b:
8d:c6:1c:85:84:3e:c7:5e:56:97:54:33:a6:fe:00:d4:9e:a3:
bb:cf:d9:30:2e:d0:89:ef:3e:8b:8e:7a:d6:de:c1:73:76:da:
22:a3:bd:2d:05:a3:ae:8e:0a:96:28:0a:f1:23:24:eb:2c:b6:
f4:80:ab:45:9c:45:20:3d:35:43:7a:d0:20:c7:0d:3c:29:51:
4d:b8:2a:ed:49:45:c1:2b:ad:99:d4:7b:a5:94:45:99:47:41:
e4:2d:c9:90:58:2e:b9:3b:6d:d4:af:0d:1a:2a:ea:ad:43:e5:
ef:f8:12:d5:d0:96:e3:63:38:e0:a7:fe:4d:0a:0b:d2:74:42:
af:cb:c7:b7:20:db:2b:c1:4e:14:e1:b6:86:3c:1d:64:0f:44:
72:8f:6f:3a:43:08:d9:a7:89:ff:03:cf:4e:f1:c0:a6:99:86:
b0:9e:1d:86:b8:02:fe:fb:37:97:53:1f:ab:66:23:2f:70:14:
f0:73:c8:3c:10:46:3f:53:1d:5a:68:41:76:0a:0c:9f:b2:b3:
ea:cf:ac:fc:21:08:c5:d5:b9:36:1d:d3:6d:2b:8f:8b:db:cb:
b5:45:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:38:20 2026 by rpki-client