Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
File: 9BB8B7044997B7AAF52B54E757F998927956EC38.mft (raw, json)
Hash identifier: 52P+koHKbT4uikgTHOXw7JXCjhCDeS7BedQcXiZslzM=
Subject key identifier: 91:CE:22:8E:F3:05:28:27:E8:46:81:C9:4F:A7:8D:E5:D1:6A:05:5B
Authority key identifier: 9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38
Certificate issuer: /CN=9bb8b7044997b7aaf52b54e757f998927956ec38
Certificate serial: 97FE49E00ACFA6AB72345D4D45809F559C36A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
Manifest number: 0195
Signing time: Sun 15 Nov 2026 12:37:18 +0000
Manifest this update: Sun 15 Nov 2026 12:32:18 +0000
Manifest next update: Mon 16 Nov 2026 12:51:18 +0000
Files and hashes: 1: AS204844.asa (hash: VQAsDBi0RHb4rqNWH3oXo2B+pmgqS88NnKjLvvSUCF0=)
2: 9BB8B7044997B7AAF52B54E757F998927956EC38.crl (hash: Z7UdrzyPzI33daqfbyJW7PBHs6tS8tYtRITAJbNcz+g=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl
rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
97:fe:49:e0:0a:cf:a6:ab:72:34:5d:4d:45:80:9f:55:9c:36:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb8b7044997b7aaf52b54e757f998927956ec38
Validity
Not Before: Nov 15 12:32:18 2026 GMT
Not After : Nov 16 12:51:18 2026 GMT
Subject: CN=91CE228EF3052827E84681C94FA78DE5D16A055B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:f6:4c:ce:e9:4f:33:a3:26:21:94:98:4b:
e9:d4:8e:99:b8:c3:80:2d:d9:99:e6:07:36:1c:ed:
e7:d3:42:10:f7:9c:8f:ef:e7:88:38:d9:89:fc:4f:
ff:cc:6b:aa:c4:0a:1e:2d:7f:2a:85:2b:91:0f:cf:
8d:a4:15:62:6c:a6:be:fa:39:a0:1a:f8:a6:2b:0f:
9f:a2:29:14:71:36:f7:71:ff:83:fa:29:a5:b7:00:
e4:f9:dc:14:a3:f1:9f:a7:4a:17:7c:b0:48:b6:b9:
b0:27:73:e0:25:d6:1c:3e:ab:1d:8d:9b:b4:54:80:
e4:63:7a:77:51:f2:78:68:06:4c:5b:2d:fc:1b:6c:
12:aa:e7:a7:03:06:2e:77:c7:e3:8b:b9:d7:6a:bb:
f6:23:68:c2:00:72:62:be:3a:50:33:27:43:26:68:
37:0b:f1:77:a4:4d:17:8e:bd:91:a5:61:44:58:fa:
e6:39:46:bf:3b:43:c5:85:75:97:7e:ed:e1:71:a0:
91:1a:60:35:a0:90:0f:cf:06:2c:54:91:b5:94:dc:
3e:0a:27:a3:a0:8b:49:81:0b:33:72:ee:3f:57:05:
41:d5:56:ce:45:c2:09:42:a2:da:b8:b3:2b:23:98:
73:c6:09:bd:cf:39:c6:3e:6f:37:9a:83:19:b9:4e:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CE:22:8E:F3:05:28:27:E8:46:81:C9:4F:A7:8D:E5:D1:6A:05:5B
X509v3 Authority Key Identifier:
keyid:9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6b:43:24:4d:ff:0e:35:2a:b9:f5:5f:b2:51:42:02:5c:73:
85:f2:16:48:54:e8:ce:06:47:6d:c5:f1:e8:61:af:39:27:ac:
4f:05:f3:94:35:c7:19:22:55:63:d8:4f:d5:f7:6f:8c:cc:da:
13:59:d9:36:db:f3:04:97:0d:52:eb:a4:e6:c5:60:12:10:8c:
18:09:92:3e:b2:e8:01:c2:be:71:32:51:6f:e6:0c:b7:fe:5f:
a3:60:07:23:3a:a4:ca:8b:b5:eb:53:82:44:1f:71:7a:5f:23:
bf:95:af:b9:01:55:0f:e3:87:f1:c2:9c:c9:0b:b3:1e:b9:81:
6e:e2:3d:38:8a:a6:2d:c1:21:cd:8d:03:dc:70:99:72:0f:f6:
d4:b5:ef:83:f8:20:e0:b0:e3:67:e5:a2:57:40:c2:a7:75:95:
3c:7b:aa:a3:e1:70:e0:c0:57:19:19:c8:91:85:58:47:70:c7:
87:6c:83:0b:5b:18:33:eb:dd:ec:bf:55:8f:fc:de:c8:8b:73:
b3:88:9d:5c:61:1b:9c:d7:76:8c:48:7a:1e:1e:e3:27:01:10:
60:db:54:f7:dd:2a:ec:4d:af:fa:00:9c:84:06:14:37:86:b8:
9f:b0:12:fb:30:a9:26:23:63:da:74:39:cd:13:96:99:fc:2f:
ce:ac:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:35:01 2026 by rpki-client