Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json)
Hash identifier: aKgWO0jdFUncHEXdEDmvaQLPySvPlOrSOFsoq0YB4wM=
Subject key identifier: F2:3A:59:6D:FB:EE:84:2B:08:DC:11:F0:D6:E9:CA:02:BF:55:F9:F1
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial: 01A0C93427D4B26BA137129DE16D524B7394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
Manifest number: 0937
Signing time: Tue 22 Sep 2026 13:00:33 +0000
Manifest this update: Tue 22 Sep 2026 13:00:33 +0000
Manifest next update: Wed 23 Sep 2026 13:00:33 +0000
Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: jrgcZdLiQOYQzd/6qd82OsZH417JKeY35pNtrFr9cak=)
2: fBJnMHALZfcjzCrh2ePgybbFbm0.roa (hash: O2YCNOyi52ka2IOCrOYs4Cry49I7H3lrzo66p5voKNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:27:d4:b2:6b:a1:37:12:9d:e1:6d:52:4b:73:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
Validity
Not Before: Sep 22 13:00:33 2026 GMT
Not After : Sep 23 13:00:33 2026 GMT
Subject: CN=f23a596dfbee842b08dc11f0d6e9ca02bf55f9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:93:6e:29:ac:5b:fc:bc:8f:46:78:7d:a8:8c:
82:89:85:e6:20:40:30:2b:be:8e:25:da:74:2f:0d:
85:79:ca:49:63:60:6a:a4:26:83:7e:d7:64:e0:bd:
ab:9b:65:5a:f6:22:57:fd:db:14:2e:bc:33:00:b7:
17:aa:c6:e9:42:34:de:d5:6a:a6:26:73:43:35:1d:
7f:13:22:2c:1a:5d:b7:51:43:87:74:86:f1:d0:c1:
34:54:a9:40:b7:17:36:d3:f2:a6:6e:29:12:b5:e9:
5f:d1:0f:b6:77:10:89:b6:c0:e5:36:cc:0c:b7:b3:
ae:34:8f:25:d7:1c:a2:5e:6c:f3:3f:d6:c3:5e:77:
9b:65:26:69:35:9e:a4:f5:36:79:a3:64:d4:44:01:
da:29:fb:ba:f2:0a:5d:3a:9f:9b:24:c6:e9:3f:84:
bb:fe:e5:d2:a5:45:56:90:ac:ed:80:2d:cd:22:92:
03:24:3b:49:c2:6a:fa:f2:b0:b8:86:47:8b:b6:d6:
66:a5:f9:44:79:68:35:ac:1b:48:3e:e1:22:6b:0f:
46:30:9d:59:76:a1:94:06:8e:fb:2f:59:ce:e6:39:
28:00:66:08:fb:eb:59:06:f4:b0:ed:21:23:d4:d7:
09:61:33:bf:83:11:4c:b8:0e:68:d0:39:a5:ed:dd:
79:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3A:59:6D:FB:EE:84:2B:08:DC:11:F0:D6:E9:CA:02:BF:55:F9:F1
X509v3 Authority Key Identifier:
keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:47:69:14:d0:e9:29:91:e4:1f:21:60:55:db:38:dc:08:f3:
09:da:b9:2d:e9:57:eb:10:0a:09:35:e9:fd:d6:12:77:11:76:
89:f5:62:dd:13:d9:15:a0:52:c3:4f:ab:c6:ab:22:b6:a7:ff:
dc:eb:46:b6:2b:fb:59:ef:57:24:6b:70:7c:fe:25:ff:86:eb:
7f:0e:ce:18:5b:ca:a9:b9:fa:fc:1b:f2:29:5b:ab:24:14:02:
06:ce:ab:64:65:4f:4d:98:5f:ad:a7:3b:3a:b7:ec:b3:59:06:
87:b5:61:0e:f0:b1:78:4c:bd:4d:63:8d:93:46:04:a0:cc:b6:
34:7a:f8:f7:34:6e:f4:d7:2d:de:1b:bd:f9:b2:69:f7:25:cd:
47:ca:d0:35:3d:8f:1e:45:0a:59:bb:d6:a6:79:a9:86:43:50:
50:58:e6:cc:d8:be:1f:53:6a:bc:3f:65:87:06:cb:b4:95:c2:
6d:01:66:7d:a2:83:01:ca:4e:9b:1f:79:fc:22:68:a5:d0:26:
c5:0c:1c:ff:cc:39:5b:84:83:3b:6f:89:0f:48:f7:a1:49:3d:
e9:ef:45:6b:e0:73:a6:8f:44:06:3e:8a:36:0c:16:a2:c8:97:
56:a7:91:b4:05:0a:09:18:c1:11:8c:29:2f:b4:35:18:c2:0a:
f0:c7:4d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:22:46 2026 by rpki-client