Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
File: 9BB8B7044997B7AAF52B54E757F998927956EC38.mft (raw, json)
Hash identifier: nNQ9HQ8E5xEvprBLxy1blHoCwxdPADbMxTC53T0K5f4=
Subject key identifier: A1:F7:ED:D7:AE:97:93:40:C2:A1:76:FD:0B:F5:1F:4B:57:B5:E6:E6
Authority key identifier: 9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38
Certificate issuer: /CN=9bb8b7044997b7aaf52b54e757f998927956ec38
Certificate serial: 4DC690CE392792F4F7039ACE4F452D7D3BBC7809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
Manifest number: 0151
Signing time: Thu 24 Sep 2026 20:38:22 +0000
Manifest this update: Thu 24 Sep 2026 20:33:22 +0000
Manifest next update: Fri 25 Sep 2026 23:12:22 +0000
Files and hashes: 1: 9BB8B7044997B7AAF52B54E757F998927956EC38.crl (hash: +0h7n/Pbr4vYuu1YLn9Cjaz/DgfV6kK9F/LBERJUxsk=)
2: AS204844.asa (hash: VQAsDBi0RHb4rqNWH3oXo2B+pmgqS88NnKjLvvSUCF0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl
rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c6:90:ce:39:27:92:f4:f7:03:9a:ce:4f:45:2d:7d:3b:bc:78:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb8b7044997b7aaf52b54e757f998927956ec38
Validity
Not Before: Sep 24 20:33:22 2026 GMT
Not After : Sep 25 23:12:22 2026 GMT
Subject: CN=A1F7EDD7AE979340C2A176FD0BF51F4B57B5E6E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:fe:c6:f7:d5:fc:54:36:fc:3e:7d:54:38:
f8:1d:6d:57:db:cb:97:d7:d9:f5:e3:e4:87:d6:bd:
f9:03:d0:57:e9:d1:c5:a5:6d:2b:ec:e7:1a:62:32:
f1:92:68:37:7f:03:88:bc:8c:48:71:a0:cb:b5:75:
7f:40:3f:f0:e1:7a:7f:9d:ca:91:d4:f7:24:29:79:
9a:e1:d9:59:fd:34:dd:b2:de:f9:09:b6:47:5a:33:
95:48:2d:6e:30:24:72:19:a3:71:6c:4b:ad:42:80:
cb:f9:f5:20:44:65:f2:e3:c6:5b:07:45:1e:50:73:
86:3b:2a:68:3b:9e:a8:79:ac:02:64:a3:55:f8:47:
cc:4f:cc:84:11:2f:8b:5e:a9:75:2a:11:c9:26:08:
37:04:ef:6a:b2:51:79:40:5f:d6:b5:c1:f1:b5:65:
4e:17:31:e3:27:25:20:d9:86:e7:55:c5:b1:db:5a:
3d:ee:b9:8a:ae:ba:a4:40:70:40:b5:d6:a8:82:d0:
72:13:2a:16:24:ba:5b:1c:ee:b6:a2:c7:ff:a7:0a:
06:a9:31:75:74:8d:e2:a6:9b:25:3e:35:94:ee:2a:
0a:c4:77:6e:0f:ca:a9:78:37:a4:bd:e6:90:ff:02:
09:fe:0d:70:cf:55:36:11:bb:7b:7e:fc:4e:4f:a1:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F7:ED:D7:AE:97:93:40:C2:A1:76:FD:0B:F5:1F:4B:57:B5:E6:E6
X509v3 Authority Key Identifier:
keyid:9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:95:57:e5:aa:61:26:ee:00:9b:88:da:f7:b2:ac:69:07:73:
e3:d3:1b:63:1a:ee:d1:40:a5:cf:8c:3b:8b:8f:58:e2:f6:e6:
77:22:06:d8:56:c2:31:94:2c:3a:e3:49:93:08:c3:13:fb:e1:
e9:e6:ed:c4:a4:2b:e0:b0:19:5b:04:71:5c:05:97:0f:6f:93:
bc:41:f9:5f:75:c7:05:ab:b0:d1:c0:ce:fa:03:50:25:06:5c:
a3:42:79:80:4f:3d:82:a6:24:73:d7:7a:42:18:2e:c7:62:46:
7f:d5:fd:49:97:61:60:16:e1:58:9a:34:b0:1b:66:2e:d6:1a:
8a:f2:49:b0:e2:21:a7:c7:08:26:50:0c:66:3a:82:3d:03:6a:
57:bf:9a:cf:11:82:a9:c2:7a:3a:07:23:be:19:44:c9:91:4d:
00:59:05:f2:80:48:48:8d:5f:05:d3:08:92:ed:42:b2:b1:80:
4d:80:0b:ae:79:45:3f:c7:e4:61:da:b6:f5:ba:ec:46:17:b4:
88:10:fe:84:8b:c6:c4:27:3b:76:c8:f4:42:bb:81:7b:6d:21:
fd:de:6c:b8:fd:26:1c:78:e8:ee:dc:a6:f7:b0:05:30:32:fb:
13:28:ae:f4:c7:de:45:2a:ea:30:ab:75:dd:47:d6:0a:f2:f3:
89:d0:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:57:05 2026 by rpki-client