
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
File: 9nBodmrYwI61UovBquRS_UAQt28.mft (raw, json)
Hash identifier: rMp2N3CKB/EpJipNoWU7JdU7W+0aHxN5g3nEtnaUx44=
Subject key identifier: D2:04:25:91:B3:82:0D:0E:F0:9B:11:C6:94:58:5F:8B:22:E5:68:4C
Authority key identifier: F6:70:68:76:6A:D8:C0:8E:B5:52:8B:C1:AA:E4:52:FD:40:10:B7:6F
Certificate issuer: /CN=f67068766ad8c08eb5528bc1aae452fd4010b76f
Certificate serial: 01A15741CC2281893A2FF6D0796DD2D8BF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nBodmrYwI61UovBquRS_UAQt28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
Manifest number: 012B
Signing time: Tue 20 Oct 2026 03:01:32 +0000
Manifest this update: Tue 20 Oct 2026 03:01:32 +0000
Manifest next update: Wed 21 Oct 2026 03:01:32 +0000
Files and hashes: 1: 9nBodmrYwI61UovBquRS_UAQt28.crl (hash: NVTjKL2ht3WRkyCDBU7GUvGEKQ2RApcReKfq/3i+Yeg=)
2: NIKDJQF8JbqfVTqA1noObiOx-Eo.asa (hash: UMnWgAWLwENoUzr9jwUQCzxce2UUZVyb7ZrbelUcUro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nBodmrYwI61UovBquRS_UAQt28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:41:cc:22:81:89:3a:2f:f6:d0:79:6d:d2:d8:bf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67068766ad8c08eb5528bc1aae452fd4010b76f
Validity
Not Before: Oct 20 03:01:32 2026 GMT
Not After : Oct 21 03:01:32 2026 GMT
Subject: CN=d2042591b3820d0ef09b11c694585f8b22e5684c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:b2:a7:d6:66:da:c1:7f:40:f4:8e:ad:77:
eb:b3:38:2c:42:fa:e1:c3:5d:91:62:87:01:09:59:
74:87:e8:25:f8:e2:0f:ad:1e:c0:80:17:df:8d:cc:
20:67:e5:a0:ff:b5:5e:4f:a0:05:3b:7f:ef:86:a8:
84:23:81:f5:ba:b8:99:d3:3e:98:be:b7:0c:b8:75:
ed:f6:3f:98:73:16:b7:1f:95:0d:87:67:36:c8:de:
94:ea:ed:56:6b:59:36:98:26:91:3e:12:1c:67:20:
87:25:e1:8f:82:72:b1:cf:56:d0:2e:7e:09:3c:a0:
2b:6a:b7:01:77:5a:2c:62:e5:96:ef:8e:60:86:23:
3a:45:59:d5:58:37:27:0b:00:e2:2b:43:65:ba:81:
15:d0:aa:1e:57:6a:80:9e:59:0a:82:ad:ba:20:4e:
f0:1a:b9:ac:a1:83:63:0b:1c:bc:e2:ec:41:ac:32:
0b:cd:5f:7b:82:42:c2:cb:67:29:c2:65:5f:99:84:
ca:29:78:e0:42:f2:74:07:5a:1f:0b:df:05:a5:ba:
ff:7f:89:b7:dc:4c:e0:ba:64:5f:ff:9e:aa:ab:9f:
f2:91:57:1d:19:1a:76:2e:b0:d7:2d:6f:99:c3:d8:
b7:c6:0d:78:d0:aa:4e:53:46:d4:b6:f1:96:d3:fa:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:04:25:91:B3:82:0D:0E:F0:9B:11:C6:94:58:5F:8B:22:E5:68:4C
X509v3 Authority Key Identifier:
keyid:F6:70:68:76:6A:D8:C0:8E:B5:52:8B:C1:AA:E4:52:FD:40:10:B7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nBodmrYwI61UovBquRS_UAQt28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6b:a8:8d:35:33:29:d7:5f:6f:e1:87:86:89:a7:f0:69:22:
94:60:9e:2e:e7:37:82:80:a9:e2:de:bc:c8:4c:22:1a:07:dd:
48:32:d8:d4:6a:a6:71:37:7f:b9:9e:d5:54:0a:ec:e0:9e:74:
66:fe:4c:78:40:ad:22:cc:10:7c:3d:fa:47:1f:1e:7e:14:1c:
4c:99:b3:1a:51:09:16:07:e1:93:09:1f:e3:be:c2:97:47:a0:
62:2a:4a:76:6f:97:4b:08:29:86:b4:02:24:28:c7:12:a5:41:
28:5d:4f:14:f4:a6:ab:34:2c:02:63:f3:e8:db:44:b0:f3:67:
54:67:03:f8:11:8b:e0:a8:d1:03:22:12:8d:5c:5e:0c:c0:6c:
59:b5:11:bb:8f:ce:48:a2:5d:55:ee:c9:26:72:a2:5e:2c:11:
2c:c3:6b:07:8d:46:5a:f7:2d:e0:12:d8:7b:5e:7f:77:14:0b:
cc:b4:95:3f:63:bf:99:d6:8c:8f:87:44:0d:54:ea:09:c4:f0:
39:88:c5:62:1a:61:10:31:2a:0a:8a:73:56:b3:3a:5e:53:42:
1e:3b:5d:04:6d:d0:5b:a6:21:22:f3:20:e5:50:ff:49:36:ae:
ef:d1:19:7e:66:98:73:5a:97:22:2f:0b:b8:25:67:7f:8b:59:
b1:3c:d2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:58:35 2026 by rpki-client