Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
File: 9I2q8EbhmDbp4poD5DzVNeIXYXY.mft (raw, json)
Hash identifier: Npyr+X3GqD7o+2eQPhCLTH7RXj2kEP74xa3q3l7ZDJk=
Subject key identifier: 64:5A:B2:73:93:52:12:73:0B:E0:45:B5:C9:59:30:F5:7B:A0:B7:95
Authority key identifier: F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76
Certificate issuer: /CN=f48daaf046e19836e9e29a03e43cd535e2176176
Certificate serial: 01A0C9A20FA182CFE95ACDBBF9EFF8A27650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
Manifest number: 03C9
Signing time: Tue 22 Sep 2026 15:00:36 +0000
Manifest this update: Tue 22 Sep 2026 15:00:36 +0000
Manifest next update: Wed 23 Sep 2026 15:00:36 +0000
Files and hashes: 1: 9I2q8EbhmDbp4poD5DzVNeIXYXY.crl (hash: 0JnFkIW24B4+XUNsDzIm0RxOWetqVxaRMhDhumn/QcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:0f:a1:82:cf:e9:5a:cd:bb:f9:ef:f8:a2:76:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48daaf046e19836e9e29a03e43cd535e2176176
Validity
Not Before: Sep 22 15:00:36 2026 GMT
Not After : Sep 23 15:00:36 2026 GMT
Subject: CN=645ab273935212730be045b5c95930f57ba0b795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:18:aa:3c:16:8f:b4:bb:c9:94:9e:f5:46:
51:e2:3b:aa:7d:e7:3b:fe:e7:c5:95:e3:cf:cd:34:
2e:71:b9:fb:ed:87:d8:be:bb:d4:84:ce:71:db:f7:
ce:3d:26:63:ea:01:4a:32:9a:bc:21:e5:af:19:a8:
77:80:6c:c8:05:23:96:39:53:bb:bf:43:64:01:79:
19:4e:b8:a2:95:3d:b8:3b:89:59:d8:28:18:44:ab:
b5:d1:94:d9:c1:b5:18:62:58:0d:e4:26:e4:bd:da:
43:85:f2:8d:09:a8:e2:03:23:1c:03:91:c1:95:07:
be:b4:d9:9e:88:43:2d:f1:96:63:7b:38:f0:27:f1:
ca:28:01:f3:99:98:aa:b1:74:24:de:8d:b7:9f:60:
e9:70:14:d0:62:15:99:05:13:46:e4:65:14:8d:09:
bc:62:b0:06:bd:d4:15:58:13:be:cf:42:84:eb:b0:
bf:a0:a7:ff:55:1e:4b:10:6c:25:2e:c0:5c:ce:f6:
b2:c9:84:93:c5:3f:c5:e9:ab:7b:30:38:a1:df:59:
36:3c:04:24:48:e1:df:b1:f6:24:8f:56:38:92:40:
4f:0e:ab:ff:f4:00:3f:b5:3b:12:ed:40:6a:c7:4e:
a1:28:b1:1d:8d:11:51:40:19:12:7d:20:13:da:28:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5A:B2:73:93:52:12:73:0B:E0:45:B5:C9:59:30:F5:7B:A0:B7:95
X509v3 Authority Key Identifier:
keyid:F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:66:fa:34:7e:98:e2:76:b4:32:58:ce:74:d6:31:b7:80:4b:
36:48:b6:84:cd:6f:7e:33:7d:ff:66:92:9d:b0:4d:94:b5:fc:
20:43:44:4f:38:cf:fc:87:b7:b9:b2:0c:38:6a:72:97:37:58:
5a:14:23:ea:d1:8b:ac:f4:1b:15:60:ab:3b:60:f5:7c:4c:28:
c5:93:b5:d7:e6:84:ba:a0:58:03:d3:95:2d:18:3f:9d:0b:f4:
90:32:65:74:fe:0d:52:f3:36:0f:84:56:2c:14:d5:77:bc:c8:
f3:a8:5e:c6:06:32:c9:2e:f7:20:ec:fb:8b:4d:03:33:25:61:
7a:36:77:bc:9b:33:a3:e9:12:f4:65:8f:87:47:06:70:af:cb:
a3:36:04:84:fe:3f:47:bc:fc:a3:88:7f:06:41:ba:00:13:50:
12:b4:b3:1a:d2:ad:0e:81:7d:ae:15:a3:c9:ec:eb:8c:2f:bc:
cf:6d:c0:ea:43:99:ee:2b:78:d9:43:6c:48:bd:27:fe:a5:a0:
16:2d:f9:a6:d0:f7:75:9d:f7:af:89:1f:16:a1:01:13:b4:86:
2b:19:7a:59:2d:7c:63:d1:44:a2:6a:1c:4b:34:08:b6:eb:08:
ed:be:87:4a:76:21:bf:2a:a5:5b:d9:44:0a:73:be:76:ac:fe:
4a:5a:74:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:58:54 2026 by rpki-client