Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
File: 9uGk5drZ5MwU4BaRDsS2adXjq5w.mft (raw, json)
Hash identifier: 71wsOWj59JjDOHhRE9wvQN78r1Y8pa+vkKoz1udlYK8=
Subject key identifier: 34:9B:30:51:8B:6E:1C:8F:2F:36:EB:42:72:EF:10:12:E5:4B:44:86
Authority key identifier: F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
Certificate issuer: /CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Certificate serial: 01A0BF1E5A1A09A5DD7E032E6D50EC8365DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
Manifest number: 0280
Signing time: Sun 20 Sep 2026 14:00:32 +0000
Manifest this update: Sun 20 Sep 2026 14:00:32 +0000
Manifest next update: Mon 21 Sep 2026 14:00:32 +0000
Files and hashes: 1: 9uGk5drZ5MwU4BaRDsS2adXjq5w.crl (hash: ChSr93qT/eXUbn/lY8sgssRhsoOvJhVwIH+WNouMzGA=)
2: H_uYynhuG6l8wZqNzHCCCngrv6I.asa (hash: cNBW9xKMdJGhXlb3YQvmEsKCGDZEJR6jaSu58wTwgns=)
3: SRCK7Ufu64KsijFRcRFiAbmnlfM.roa (hash: r3tIqkepOEqyJpInWtiArXc2WfvA20Y21WU/4jD8OPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:5a:1a:09:a5:dd:7e:03:2e:6d:50:ec:83:65:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Validity
Not Before: Sep 20 14:00:32 2026 GMT
Not After : Sep 21 14:00:32 2026 GMT
Subject: CN=349b30518b6e1c8f2f36eb4272ef1012e54b4486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:99:b6:de:32:69:ce:ee:c0:06:7c:16:18:
af:bf:b3:bf:98:d4:5a:70:6d:df:a6:74:66:e2:86:
bd:7b:ff:cd:10:b2:48:ab:a3:99:34:1d:52:e2:6b:
9f:69:10:67:f8:01:b6:3a:90:b7:67:b0:3b:57:ff:
8e:c8:84:3c:65:78:6b:4f:59:50:75:fd:f6:8d:b0:
ab:9f:45:5e:e0:6b:ed:9d:c8:f2:73:bb:9d:24:e6:
ff:87:c6:19:94:da:8d:5a:70:60:af:b2:45:d1:2d:
1f:9e:dc:dd:c8:3f:1e:d4:77:47:ec:20:d7:5e:e3:
0f:03:4f:b3:39:bf:e8:07:ba:5e:99:25:6b:db:e1:
87:9c:1b:c7:ec:bb:5a:67:c5:84:e0:1d:95:c9:36:
5a:db:6c:16:ec:70:36:05:ec:17:aa:74:7f:00:83:
1e:d2:44:23:b3:92:36:b9:53:14:a6:3f:6e:a0:9b:
d1:08:8f:58:78:1f:bf:9d:d3:c3:85:f2:3c:d4:66:
9b:a1:51:8d:8b:b8:61:f8:36:e2:29:2d:40:33:3c:
a5:57:03:80:39:14:56:2b:69:59:59:35:fd:85:64:
8d:52:89:ae:ab:36:9e:66:c0:d2:d5:6e:c2:cd:dd:
0a:9f:aa:b5:54:93:fa:0e:f4:b8:e6:b6:08:48:0a:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9B:30:51:8B:6E:1C:8F:2F:36:EB:42:72:EF:10:12:E5:4B:44:86
X509v3 Authority Key Identifier:
keyid:F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d7:58:4a:de:f8:2c:1d:8b:4e:d5:68:c0:17:28:3e:80:76:
ff:2c:4f:a6:aa:83:ee:97:82:26:65:43:4f:b9:10:e4:cb:6b:
33:9a:74:58:3c:6c:98:3e:8f:b5:d3:c0:b2:de:df:16:34:02:
5f:fa:f5:26:3c:1d:4f:ba:90:a6:0e:b6:5a:01:cd:66:0b:5b:
be:a6:30:20:15:dc:3f:65:74:44:99:68:a8:86:32:40:ef:23:
e1:fd:80:54:20:82:58:41:a3:29:d9:31:52:fe:fa:6b:cd:40:
82:ca:d8:93:d3:9e:0a:50:b4:ba:0d:04:ab:f0:a4:bf:17:d3:
5d:d9:91:c4:8a:a5:28:38:b2:47:d0:f0:f8:29:c3:09:22:11:
ec:8d:64:f6:e9:db:e4:fd:26:fe:82:5e:fe:cd:d9:bd:b5:3d:
63:ca:1b:db:5b:cf:5a:7c:35:8d:2a:8b:1a:5e:8b:1f:36:19:
7c:84:22:97:a9:6c:04:4e:c7:d0:c4:78:6e:51:55:48:5c:e3:
e7:25:2c:e7:e1:21:7e:a1:85:9d:53:a2:28:ef:ef:10:8e:23:
a4:97:a3:26:12:e4:21:86:cf:fc:ba:0b:a6:36:c7:2b:e1:77:
81:46:63:62:ad:71:24:27:49:02:c4:9d:03:fc:22:b3:94:29:
de:1d:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:03:58 2026 by rpki-client