Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
File: 9I2q8EbhmDbp4poD5DzVNeIXYXY.mft (raw, json)
Hash identifier: HgaoI+/bpPnM+1VG5zirq6wlW5aTZQnn7p6faZIcWFc=
Subject key identifier: 7E:7F:62:3E:D4:18:45:B9:75:AC:31:60:31:1F:C2:D6:D4:7B:23:5C
Authority key identifier: F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76
Certificate issuer: /CN=f48daaf046e19836e9e29a03e43cd535e2176176
Certificate serial: 01A1DFBA424B8D057917A40E84EC816AB54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
Manifest number: 0459
Signing time: Sun 15 Nov 2026 15:01:28 +0000
Manifest this update: Sun 15 Nov 2026 15:01:28 +0000
Manifest next update: Mon 16 Nov 2026 15:01:28 +0000
Files and hashes: 1: 9I2q8EbhmDbp4poD5DzVNeIXYXY.crl (hash: iSrTtHn4gwbAFtw+FqNBejj62JMm0rGrmbQKRFKE3zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:42:4b:8d:05:79:17:a4:0e:84:ec:81:6a:b5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48daaf046e19836e9e29a03e43cd535e2176176
Validity
Not Before: Nov 15 15:01:28 2026 GMT
Not After : Nov 16 15:01:28 2026 GMT
Subject: CN=7e7f623ed41845b975ac3160311fc2d6d47b235c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b7:9d:d1:86:a2:89:ad:8f:b5:d6:12:df:46:
95:db:e7:64:63:e8:36:02:c2:33:8d:c7:de:0f:de:
88:be:16:74:77:54:2e:de:06:d2:63:78:f1:7b:d1:
ed:00:ba:3c:6b:8e:77:ac:ac:0f:5f:35:82:d4:b2:
f9:49:5f:0e:69:59:32:6f:05:f5:f4:7a:03:62:f1:
ae:74:f7:ec:f7:e7:8e:79:54:8c:3e:b8:29:83:97:
91:cb:2c:2d:09:3e:09:a2:67:29:a0:da:e8:45:7e:
63:00:e6:6f:31:10:9e:a2:ae:23:d9:13:4b:e1:42:
f2:40:a6:85:89:61:c6:a5:9d:ed:0d:db:dc:bf:2a:
a5:fc:4d:34:66:a0:f1:21:d8:ac:81:a6:4e:9f:40:
ee:81:cb:5d:81:d5:75:28:69:ed:1e:30:3e:dc:2c:
25:1d:f8:c2:92:03:4b:cd:92:0d:51:fa:33:c1:c2:
80:b2:cb:c1:e2:22:6e:e5:7a:55:fa:d7:79:ef:96:
34:f1:d3:d3:20:69:d2:cf:65:9d:fc:29:89:b3:b3:
9d:ae:48:4c:fa:44:4f:1f:1a:13:d6:ca:07:52:70:
c3:35:40:a3:39:df:35:bc:ef:82:68:01:9b:db:4b:
30:4a:d9:b3:b9:ec:a0:94:4c:f4:f5:1a:9f:20:91:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:62:3E:D4:18:45:B9:75:AC:31:60:31:1F:C2:D6:D4:7B:23:5C
X509v3 Authority Key Identifier:
keyid:F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f4:49:be:18:64:2c:3f:5b:38:09:a1:40:20:43:f1:99:01:
d2:af:41:97:34:7b:58:9e:cf:b9:14:85:a2:c2:48:e8:7f:46:
f7:48:a0:a9:61:11:af:da:20:07:0b:80:5f:07:3d:33:1e:f3:
ff:01:6c:28:61:28:52:18:fd:7f:81:73:3b:82:a4:b2:29:d1:
45:b4:53:65:87:e4:23:f3:cb:22:78:2c:6f:5a:ed:5f:70:db:
37:76:35:63:4f:9c:11:50:27:7e:b9:18:1a:b3:c8:2a:12:37:
79:a8:be:79:78:46:c0:25:3e:ed:6b:32:5f:76:0d:9e:d2:c3:
7e:cc:7c:37:fa:8b:02:e0:ec:ad:94:af:47:7b:3d:b8:e4:bb:
02:e9:d5:b0:21:07:76:35:6a:75:a0:56:b3:d3:ee:b4:6e:30:
1a:42:68:3c:41:08:38:65:7b:9d:ef:e1:6e:97:4a:f7:05:6d:
9c:b1:58:dc:c7:00:60:25:99:d4:3f:d6:4e:fc:e5:a5:02:76:
32:49:06:19:8f:aa:7e:bc:8a:2b:12:e1:90:55:86:54:e3:6d:
34:66:be:0f:99:60:26:b0:02:76:f7:bd:20:c2:16:ac:1e:13:
d4:7b:d0:c9:40:d0:86:af:7d:e2:1f:1e:ea:61:87:1f:74:dd:
8a:e2:53:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:13:46 2026 by rpki-client