Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: STiDMlcJP53X6YhS3ncv39Tjt+lhaGHs2gyve1XCEl8=
Subject key identifier: 32:A6:B5:EC:11:48:04:B2:F8:20:50:F7:96:AF:60:CC:F4:DD:D8:BB
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 01A0CCA3952DDF0FF474070CF30B6BA88424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 1351
Signing time: Wed 23 Sep 2026 05:01:07 +0000
Manifest this update: Wed 23 Sep 2026 05:01:07 +0000
Manifest next update: Thu 24 Sep 2026 05:01:07 +0000
Files and hashes: 1: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (hash: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8=)
2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: LHukXKbkyF7PWdxs6XXXQ1STmnTzBe8ZWEgUMy0c8zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:95:2d:df:0f:f4:74:07:0c:f3:0b:6b:a8:84:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Sep 23 05:01:07 2026 GMT
Not After : Sep 24 05:01:07 2026 GMT
Subject: CN=32a6b5ec114804b2f82050f796af60ccf4ddd8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:21:b8:49:d0:d3:c5:f6:7d:bd:63:05:26:
f1:51:7d:58:90:04:ae:54:d0:87:c6:80:7d:3c:4e:
b8:c7:a6:15:14:33:b6:29:53:9c:f2:1d:f3:78:7e:
85:df:6a:63:e1:13:df:07:dc:d3:0f:dc:14:e4:34:
41:4b:85:ba:6a:e5:fa:62:fe:ee:54:e5:5d:07:ad:
a1:08:73:a3:6c:a9:d7:60:78:de:30:09:6b:30:a0:
0d:e8:67:b1:4d:8f:b2:7d:0f:80:b3:5d:a0:14:35:
91:63:98:7c:03:49:08:f9:2a:b7:4f:31:a0:1a:a4:
15:61:42:30:47:08:a6:df:4e:1b:06:23:00:f1:5e:
05:0d:13:d5:b4:ae:39:f6:20:10:d6:6b:18:b2:33:
f0:11:c0:78:fb:56:19:f4:a9:f4:e0:f5:73:1e:8d:
89:89:4f:eb:9f:8a:d1:b9:eb:21:ea:06:b6:9a:c7:
fc:ff:92:f5:05:04:75:ab:5e:ef:02:9e:db:1a:a4:
07:f1:a2:8b:3c:67:c1:cc:57:b5:1a:dc:44:f0:1a:
16:8c:86:c9:bb:40:cb:52:a1:25:04:e5:77:e1:ac:
ac:e4:16:2c:3c:45:1c:26:87:1f:0b:5f:09:3d:61:
14:6e:ec:a6:6b:70:ef:1e:04:47:60:9c:87:5f:95:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A6:B5:EC:11:48:04:B2:F8:20:50:F7:96:AF:60:CC:F4:DD:D8:BB
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:33:2c:03:c4:8b:1e:89:f1:18:72:9b:9e:df:12:32:45:a7:
37:5b:3d:3e:9e:6e:05:3b:f1:f2:cf:39:72:7e:a7:45:b3:09:
2b:6f:08:11:4f:d8:39:44:d7:e1:e2:b5:62:c7:45:55:a6:a3:
c2:ce:98:53:6d:4f:26:5f:96:00:40:fc:94:fa:de:cb:1a:29:
9f:cf:bd:3d:a6:9e:1f:5b:a3:1e:56:7e:b1:38:eb:57:a7:31:
39:01:93:c4:9e:f7:96:99:ae:79:5c:a3:bc:4c:c4:56:cc:d7:
97:9c:f9:0b:c0:cf:cf:71:ca:06:da:b5:7e:9e:20:48:35:43:
26:71:3d:49:19:1e:c5:34:06:ee:13:13:89:f1:33:a2:92:3c:
55:19:16:60:10:48:23:70:62:06:90:6b:09:d3:c4:7d:80:c9:
69:43:39:e8:c0:02:f9:08:84:37:c6:2e:ae:90:66:ae:07:03:
95:4d:18:d2:89:01:49:32:ed:84:b8:7c:ce:b6:00:8a:9f:63:
7b:15:7e:7d:7f:0a:f7:fd:9c:c3:1a:6a:67:b5:65:eb:bb:0f:
5e:a2:db:db:1e:fa:d8:69:97:0f:9d:94:51:4b:7a:a4:b9:a5:
af:cf:d5:5c:37:90:5b:4a:2a:3d:19:9d:20:a1:f2:7c:8a:68:
cb:ec:2e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:22:11 2026 by rpki-client