
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File: 9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier: sApMS6+jAR9DSoQD4GcuJ2QOvLmNZEQnSK6HZ/dWGQY=
Subject key identifier: 2E:5D:E3:E6:7D:43:4D:0E:DB:5E:96:2D:E9:65:78:80:0A:00:EA:1A
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer: /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial: 01A1250BE013752E4C6F6D6A70FBCB8C23EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number: 1A94
Signing time: Sat 10 Oct 2026 09:01:37 +0000
Manifest this update: Sat 10 Oct 2026 09:01:37 +0000
Manifest next update: Sun 11 Oct 2026 09:01:37 +0000
Files and hashes: 1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: RbgSD3apBYWkoyS7jwbdLfb/4EKDwIKgXxZKhFIR/G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:e0:13:75:2e:4c:6f:6d:6a:70:fb:cb:8c:23:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
Validity
Not Before: Oct 10 09:01:37 2026 GMT
Not After : Oct 11 09:01:37 2026 GMT
Subject: CN=2e5de3e67d434d0edb5e962de96578800a00ea1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:aa:7e:d0:e8:be:f3:52:79:2d:81:50:12:
fb:9f:32:5b:21:ab:0c:06:da:3c:23:71:0d:7a:a5:
d1:b9:46:ef:d7:6a:b6:a6:97:a0:12:de:87:52:f6:
33:39:56:be:ba:32:c4:18:13:f3:c8:c6:2f:3d:1b:
8d:ea:6b:46:ad:10:8f:94:33:02:58:f1:37:2e:6d:
ab:1b:62:76:b5:5a:0e:c9:25:62:d9:d5:18:92:72:
e9:e7:60:cb:0d:7f:3c:25:59:71:57:fe:a0:d1:03:
7e:b5:c2:c2:9a:e9:3c:91:73:3c:93:87:66:82:eb:
64:c8:df:76:d3:c5:f2:73:08:03:89:db:54:fa:a3:
78:ca:2c:64:a7:c9:28:4a:cb:b6:5f:f6:d1:b0:44:
91:42:f7:27:d7:c9:97:fb:7b:e2:89:74:64:a5:f5:
e0:ca:03:14:a7:29:19:c6:03:2c:fb:b3:c1:03:79:
dd:f3:da:ce:e5:e3:2e:2d:18:71:8c:2d:9a:94:c7:
ea:87:27:5d:d4:8d:2b:2d:e4:e3:f9:01:87:0e:63:
e1:81:7b:cf:82:3c:ef:40:d3:a8:b6:72:34:42:e1:
1f:6e:8b:80:ca:97:54:ee:22:2b:e5:af:c1:8a:c6:
6b:34:b3:dc:a9:fe:c7:6f:60:4d:09:ad:49:4c:bd:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5D:E3:E6:7D:43:4D:0E:DB:5E:96:2D:E9:65:78:80:0A:00:EA:1A
X509v3 Authority Key Identifier:
keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5e:5d:6b:1e:a1:92:8d:81:2c:ed:d9:50:4b:06:39:38:8e:
6d:bc:68:38:8e:93:aa:e8:eb:81:45:29:dc:92:7a:ad:cc:76:
8b:ec:85:b0:95:ba:a3:e5:92:a0:18:36:14:0c:01:00:c4:80:
f4:2a:3e:48:e7:e6:7d:4f:ca:79:c0:06:8e:2b:05:e6:f8:3d:
ed:2e:0e:a1:33:50:16:6a:7c:31:46:92:d1:ee:eb:8e:de:90:
fa:32:3f:87:92:d8:28:96:6c:04:b5:30:aa:0f:a1:85:57:a1:
37:5c:af:ca:a5:ce:ef:d5:80:84:30:f0:5f:81:25:73:ec:3f:
c8:47:4d:d7:39:01:c6:c5:6d:a4:44:0f:ba:b4:aa:c1:f3:80:
ae:53:a5:78:4a:48:26:d5:87:d5:a8:4a:c8:2f:4a:0f:a1:ee:
cf:fb:90:13:8b:bb:26:b9:76:57:c3:50:aa:01:31:de:43:99:
b1:90:bf:ca:b2:a3:74:65:66:84:c7:6b:4f:11:dd:27:a6:39:
75:6f:5f:4e:9d:6b:83:1d:92:d4:88:96:f2:cf:3e:1b:eb:47:
41:c8:47:ee:a2:9c:02:00:d9:9b:9f:bc:c6:94:3d:61:0c:aa:
7d:3e:bf:10:09:9c:6c:c1:d6:0e:00:7e:f6:92:76:03:2d:93:
de:5c:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:34:41 2026 by rpki-client