Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier: zpDOp+jnWMpdKGocLxSj0Yt/qgNKRSE17fgr8lvBuUQ=
Subject key identifier: 85:1B:EB:2D:70:7D:23:EB:1F:FD:D3:4E:FE:E8:0C:CF:11:4E:5A:AD
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 01A0CA478B20E42FDE842E307D0632F583C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number: 0C58
Signing time: Tue 22 Sep 2026 18:01:21 +0000
Manifest this update: Tue 22 Sep 2026 18:01:21 +0000
Manifest next update: Wed 23 Sep 2026 18:01:21 +0000
Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: eiKsglN0uPJb0UFYbR5NoDYcSA95Nejcm0+lEpcWXJ0=)
2: DASQ8NU1yHanG6tnp7TCLgdJSB8.roa (hash: W/n6G98Zq5gjZZSilKHseC4jqvetgfkl6TxxF14gb54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:8b:20:e4:2f:de:84:2e:30:7d:06:32:f5:83:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: Sep 22 18:01:21 2026 GMT
Not After : Sep 23 18:01:21 2026 GMT
Subject: CN=851beb2d707d23eb1ffdd34efee80ccf114e5aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:32:c6:df:b3:62:40:80:f3:5d:b4:be:97:5e:
85:ea:75:e3:9d:c4:a6:d5:03:9e:c1:3c:20:20:08:
4b:8d:d4:8f:6c:58:ec:c5:05:5c:aa:60:15:ca:d8:
cf:07:77:d8:2c:81:80:a0:42:70:a9:44:2f:70:c3:
d4:d0:2c:69:bd:26:cc:50:bc:3b:99:71:ec:a3:47:
26:38:c6:0d:fa:ce:fa:d3:6b:32:be:73:8a:af:59:
78:2f:58:dd:e7:67:d2:58:25:f8:93:0f:7a:e4:6b:
3c:fd:65:49:e2:e3:a9:ec:a6:4d:51:a3:af:8b:0a:
5d:86:e0:ca:02:4a:e1:0e:59:9f:1a:33:0a:2e:82:
40:96:39:6a:b6:b0:91:a0:e5:2e:d3:24:a4:93:21:
38:d6:13:8a:01:4e:e6:fd:78:8b:ab:0b:70:7f:d5:
c2:d5:ba:4c:b8:7f:d1:4b:08:c9:e4:b4:61:5b:7b:
72:4d:85:78:24:cd:42:ce:34:6d:99:c7:8a:73:a1:
f8:c8:3d:72:ed:64:f8:85:de:e0:f0:b7:9c:4d:5d:
55:ec:ab:15:98:b0:20:43:e0:8b:d5:a4:48:f1:91:
81:31:1b:64:80:aa:a3:99:b8:39:fc:cf:b1:98:cc:
53:77:d5:ab:2e:42:8c:a0:18:ba:11:74:a0:25:f2:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1B:EB:2D:70:7D:23:EB:1F:FD:D3:4E:FE:E8:0C:CF:11:4E:5A:AD
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:93:f1:d2:99:fd:30:39:7a:83:c6:20:f5:c1:a5:81:2d:e5:
3f:9a:a8:9d:78:8d:35:51:12:4b:14:b7:3f:b6:b2:e6:2d:81:
4e:16:1f:82:4b:25:c8:d9:78:67:3e:54:cb:e6:12:84:c3:2a:
70:c1:2c:9c:b1:c5:d6:8f:aa:9a:85:e4:13:d4:c8:ab:a1:49:
dd:9b:0f:51:89:14:6f:a1:30:05:d5:aa:2c:9c:fd:38:5a:aa:
58:88:0b:72:77:b8:9c:e8:8b:1d:dd:d3:08:40:3b:f8:d4:f1:
de:17:a6:dc:0b:d2:26:18:47:3d:42:1c:49:c3:11:0e:45:84:
74:38:03:86:a0:09:7d:b2:25:fd:0b:e0:38:07:d3:b6:d1:fd:
b8:57:9b:42:a5:8f:20:b3:30:c8:f2:d3:93:65:f3:fb:40:4d:
23:28:ef:c6:c7:79:9f:36:df:87:0f:b8:d4:32:4c:a4:5f:8c:
b1:a1:72:2b:88:d4:4c:10:bf:ea:d6:30:10:94:96:ac:83:fe:
6a:ac:d6:2c:95:a6:59:22:ee:5f:98:2f:65:a5:1e:06:43:c1:
2b:12:dd:ef:9e:de:8f:09:a0:26:cb:33:6a:8f:c8:eb:2a:e3:
e0:98:ab:05:57:43:2b:be:db:97:63:53:d2:7a:83:64:17:0d:
1a:3f:57:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:36 2026 by rpki-client