Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json)
Hash identifier: JjDnBg9SzvdWrDWJf5wLR9Ta2QiiaNNacqPh40wL+RI=
Subject key identifier: 58:7F:BB:64:03:02:47:2D:44:F4:C0:19:86:CB:CA:F7:65:F2:A7:DA
Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Certificate serial: 01A0D5395D458DD523F8BB9916FBBA6E550A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
Manifest number: 03A9
Signing time: Thu 24 Sep 2026 21:01:41 +0000
Manifest this update: Thu 24 Sep 2026 21:01:41 +0000
Manifest next update: Fri 25 Sep 2026 21:01:41 +0000
Files and hashes: 1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: GEscUJC5dBImj6rGJ/30TG1EvBJSK2j/st1z7zdE9Sk=)
2: tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa (hash: Ko/+YeSqgQQmx5PHs3jC/GfjdrV44JmmirXuegDNGWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:5d:45:8d:d5:23:f8:bb:99:16:fb:ba:6e:55:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Validity
Not Before: Sep 24 21:01:41 2026 GMT
Not After : Sep 25 21:01:41 2026 GMT
Subject: CN=587fbb640302472d44f4c01986cbcaf765f2a7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:d4:75:f5:63:81:39:92:2b:36:83:f7:92:
33:48:8b:bd:b1:d2:4e:01:25:07:0e:de:e2:0e:43:
54:a4:c4:0f:40:49:68:d1:76:3e:d4:29:ea:0e:64:
e7:bb:0f:67:26:53:27:19:e9:fb:f2:bf:08:ac:c2:
ba:1b:64:1b:2a:64:53:39:de:6f:47:fb:49:87:b4:
12:53:5f:e9:b9:64:0c:0e:3a:ec:65:06:e2:d9:42:
58:ef:c4:1e:87:a7:e2:44:ab:a3:54:b6:9d:6d:39:
18:b2:a2:d0:06:41:8e:45:b7:fa:8c:1d:0a:4a:f8:
21:01:95:b3:21:91:05:d3:06:8b:c6:c6:d9:db:7f:
83:5e:b5:34:81:84:d0:3c:51:f8:76:30:e8:9f:43:
19:31:b7:ea:ea:3b:b0:a0:ad:78:dc:f8:64:11:9f:
1a:63:c3:4e:9b:d9:c0:13:89:13:fa:52:6c:fd:1e:
51:bc:03:de:0e:3a:a1:4b:ad:3c:7c:b5:0a:cc:e9:
87:f6:40:ce:cc:05:78:51:da:3b:37:68:f2:fe:20:
be:f5:5d:b2:f9:37:01:08:fd:93:6d:d1:8f:70:db:
c9:35:44:3b:a0:18:9c:d3:59:8f:f3:48:ce:77:34:
6c:64:01:94:b0:9a:d7:30:aa:89:36:73:7f:87:21:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7F:BB:64:03:02:47:2D:44:F4:C0:19:86:CB:CA:F7:65:F2:A7:DA
X509v3 Authority Key Identifier:
keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b2:b4:f9:a1:4f:c0:bb:18:05:89:c8:f0:1f:3d:a2:b3:57:
0e:f0:3c:c9:a2:29:3b:e3:6c:b3:c5:52:80:aa:95:e5:ac:ed:
d5:1f:50:a0:2f:42:48:a0:e2:43:01:61:ef:60:4b:01:47:55:
c2:15:ab:84:7a:2d:7b:00:d3:8b:4a:83:b5:d8:9f:0c:4e:8f:
0b:d5:68:74:45:07:0a:36:c0:21:a9:c7:1a:02:d0:86:56:fe:
74:78:19:ac:4e:84:b9:f2:87:15:e4:63:c6:0b:93:78:13:47:
4e:e8:68:58:d4:bd:ca:5a:a0:9b:e8:17:69:84:42:da:ad:ff:
65:94:15:bd:0e:71:84:54:20:f2:d5:5d:ec:2b:75:cb:32:8e:
67:25:3c:3f:37:41:85:5b:6d:00:8e:5e:a8:f2:79:43:2d:90:
41:63:af:53:31:78:02:ff:3f:e6:f0:45:12:64:fd:97:05:8e:
3c:05:a9:5f:4e:c9:6d:2e:69:18:bb:4e:0d:9d:49:63:34:5e:
e5:86:23:6a:47:d3:20:3b:4e:13:03:c1:b7:b4:f4:f1:fd:1d:
72:0e:0c:7f:9b:00:c1:d2:6e:92:6c:41:11:80:42:ff:04:6d:
e9:7b:a9:09:d6:33:b8:c1:b8:a5:99:1e:5f:6e:80:ca:c9:45:
5e:10:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:45:56 2026 by rpki-client