Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: pvrVymJPTJhexCx6Og4OnVgnbhG+q54qqZP8a9S8K70=
Subject key identifier: 8F:1E:6A:DB:2A:0A:D7:A5:20:77:C4:03:35:5D:8F:A3:FC:A1:89:14
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 01A0D200AD7B8118C252563C6DFAB5A7F3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 09E4
Signing time: Thu 24 Sep 2026 06:00:54 +0000
Manifest this update: Thu 24 Sep 2026 06:00:54 +0000
Manifest next update: Fri 25 Sep 2026 06:00:54 +0000
Files and hashes: 1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: qv07ZzrNah/OxYJJepRKFE7ItwoZX8zQdhoj+d6paWs=)
2: tKfj59q_uSVeOVXFF8rwGwcX1DE.roa (hash: M8dRarfAWOblSl0tPp78zm1/aNBzJLXYpivkbEtUqgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:ad:7b:81:18:c2:52:56:3c:6d:fa:b5:a7:f3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Sep 24 06:00:54 2026 GMT
Not After : Sep 25 06:00:54 2026 GMT
Subject: CN=8f1e6adb2a0ad7a52077c403355d8fa3fca18914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:b1:9c:e0:ef:eb:89:20:2f:c4:85:85:a8:
ec:be:0f:bc:10:40:fb:c6:16:ad:2a:a9:c2:2c:38:
14:22:16:7a:bf:10:a8:74:a9:27:8b:8d:04:26:a0:
4f:0c:1c:46:ca:06:9a:2d:53:67:99:55:b8:95:4b:
83:73:db:07:48:11:2d:3f:5a:9c:e6:e4:59:ab:20:
ff:16:86:ea:a7:e7:2a:c8:95:aa:a0:3a:97:3e:97:
9d:45:79:50:d3:2c:9d:01:42:8e:62:03:d3:bc:3b:
80:dc:18:e6:87:58:26:22:6d:49:0b:38:7b:d6:0d:
00:f1:de:75:9d:48:ee:73:95:18:72:c1:48:0d:c2:
f4:09:44:4b:5b:07:9d:8a:4a:17:19:cc:8a:10:b6:
8d:b4:91:08:72:05:15:26:99:f1:58:ed:b9:cf:ac:
c5:10:41:f5:2e:58:95:57:c8:6f:71:71:ce:df:f1:
56:51:4e:ec:00:16:00:a9:d7:95:0f:be:ab:ee:08:
d7:7d:cd:a4:44:d9:38:03:6f:de:aa:3c:15:22:ea:
1a:c8:2d:9a:fe:4b:25:d1:53:49:d7:a6:6d:b7:b6:
33:a1:6c:a3:0b:72:ab:d0:1e:7d:0d:13:69:1b:11:
4b:bf:da:2a:a0:84:da:f5:ed:88:f3:8f:bc:e2:ee:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:6A:DB:2A:0A:D7:A5:20:77:C4:03:35:5D:8F:A3:FC:A1:89:14
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a0:80:56:a3:57:d0:d1:d9:1a:88:1d:c9:e7:5f:bc:f6:13:
e1:32:52:aa:76:4e:97:64:6f:87:48:fe:44:4e:81:aa:ec:44:
17:ed:b2:01:c2:db:7a:da:d6:95:40:1b:71:9b:cb:33:f4:31:
ce:5b:a6:02:8a:c9:aa:f2:92:86:5c:92:0a:41:5a:27:50:9a:
7a:41:a1:95:d7:1f:26:d4:8f:71:e4:67:b0:24:2e:ec:81:1d:
4a:6c:0d:ec:87:65:71:c8:54:55:20:ad:a1:2c:bf:11:35:f6:
cf:23:9c:61:e3:08:b2:42:ba:06:98:49:00:bb:35:82:ba:a1:
b6:cf:61:f4:16:b7:17:58:6e:fc:39:a1:4f:77:4a:99:7c:7c:
fb:be:20:6c:0f:be:81:bc:d3:8e:56:ab:76:c1:a9:7f:83:8b:
0f:e6:46:2f:da:08:b1:b7:f9:a4:a0:df:b0:5f:ab:b8:0e:8f:
25:53:53:5d:1c:28:a6:23:43:dc:8e:56:b3:23:e5:ea:bf:56:
ae:7c:b1:d7:90:5c:5f:28:93:d8:e0:58:4a:a3:17:2f:a3:00:
79:49:03:4a:03:32:83:62:e1:ff:96:ac:1a:65:a6:17:ae:88:
69:e6:b7:98:85:f2:6b:ae:59:10:0d:ec:60:ae:e0:c0:cb:c0:
b6:1f:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:28:50 2026 by rpki-client