Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier: ihkQ36OuCPJTSzTLpr2qRA7S3QfJ/HZNFE1f9Jmu1Ng=
Subject key identifier: BC:5D:D9:54:57:41:97:41:1D:BE:B0:9A:01:A4:5B:DA:56:11:45:2D
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer: /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial: 480AF2EF0E1F08C62F3D09FB6BB23E802C03B7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number: 024E
Signing time: Sat 26 Sep 2026 04:59:48 +0000
Manifest this update: Sat 26 Sep 2026 04:54:48 +0000
Manifest next update: Sun 27 Sep 2026 07:19:48 +0000
Files and hashes: 1: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: 3s9+5QslyboFwM2j4/fEry+2xBjv9xOsOy60fak3mBg=)
2: AS214809.asa (hash: KZxAxAgv7eodloZuRGXMZMgeZt8qfPZMw5fBoAT3Z1o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:0a:f2:ef:0e:1f:08:c6:2f:3d:09:fb:6b:b2:3e:80:2c:03:b7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Validity
Not Before: Sep 26 04:54:48 2026 GMT
Not After : Sep 27 07:19:48 2026 GMT
Subject: CN=BC5DD954574197411DBEB09A01A45BDA5611452D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:51:64:7e:d7:41:d1:c7:71:19:f2:95:1f:
c6:92:0d:87:91:02:cf:6c:f6:da:c8:24:8a:12:53:
6c:a4:9f:fa:1f:f8:f9:7b:3b:d3:9e:f7:2b:9a:54:
95:7e:19:5c:17:bc:18:5d:a5:ca:48:61:f0:71:50:
6e:dd:52:8f:e8:2c:9a:93:91:57:cb:6b:f0:99:50:
68:9d:3e:6d:d4:24:d4:e5:25:42:a4:a8:41:fe:f7:
c8:52:4e:8e:c4:9d:12:82:af:87:08:f0:c2:23:39:
83:be:3b:12:cd:7d:3f:1f:71:61:eb:4b:30:59:ab:
65:30:6f:4f:e3:b2:6b:30:12:fd:84:1b:38:f1:48:
c6:ff:d8:8f:b1:1a:3c:aa:e7:d8:09:2f:4f:40:b6:
af:b3:55:85:bd:66:d4:ce:65:30:af:ad:1f:76:93:
ae:c7:3c:46:c1:d7:97:e5:36:4d:d0:b4:2d:2b:76:
4a:2c:d6:57:24:63:c8:36:cd:fa:77:34:40:25:eb:
aa:eb:f8:10:1c:d0:7e:e5:14:f8:bd:0f:e8:1e:62:
c4:ba:2a:42:7e:8b:e2:98:51:c3:05:85:9e:28:7d:
fa:2f:3e:ea:da:c9:9d:84:d4:35:cb:3b:9a:25:5d:
d1:35:12:14:b2:7d:07:73:49:0e:07:6d:e8:17:58:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5D:D9:54:57:41:97:41:1D:BE:B0:9A:01:A4:5B:DA:56:11:45:2D
X509v3 Authority Key Identifier:
keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:40:f3:7c:0f:ee:c8:7e:33:ea:71:3c:c2:35:14:b2:e4:38:
3d:bb:bb:b3:a3:a6:37:44:5f:c9:a0:13:8e:6c:8c:58:f2:5d:
c4:66:c3:ce:6d:5c:2e:63:3c:e5:21:21:f0:5a:9d:d7:3f:75:
1a:4a:fe:fa:b8:53:73:46:42:63:95:3b:6e:32:d4:25:a8:91:
2c:d7:59:8e:45:09:16:25:93:44:fe:3e:85:1a:36:75:59:79:
29:da:40:de:3e:3a:46:c0:de:63:f7:89:dc:ec:c5:96:70:32:
3b:00:5a:0b:95:61:59:3b:9d:75:ee:d3:22:52:d1:cb:7b:f1:
55:e6:ba:6f:5d:83:de:98:a4:1a:8e:53:3f:48:af:d0:d3:b8:
08:45:4a:e0:d0:9e:11:81:11:a1:6e:4a:ac:0c:d7:96:3e:2b:
78:f6:cb:57:8b:87:10:a4:08:64:3e:4f:c0:c8:f1:ce:97:33:
21:67:dd:f7:86:68:c1:1c:35:57:42:01:6d:f0:ec:c0:59:44:
05:34:14:a9:a3:22:03:30:1f:24:3a:15:40:08:77:af:1d:ac:
91:d6:e9:d3:77:60:d5:58:9c:b6:92:70:43:34:fe:05:de:a9:
90:2d:e8:33:17:b5:5a:af:85:2b:bf:8d:c9:d0:7e:87:9a:a6:
1d:44:80:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:36:52 2026 by rpki-client