
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: BgTb/x+75yutOf6YAfe4u0Uu7XHSxDOO9FDW6Wd7Kek=
Subject key identifier: E9:9F:F9:96:42:9B:73:C7:55:06:3F:8D:57:48:72:E3:0E:C9:D5:67
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 01A0C3326A62063E36044CC24C1449E0022C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 09E6
Signing time: Mon 21 Sep 2026 09:00:56 +0000
Manifest this update: Mon 21 Sep 2026 09:00:56 +0000
Manifest next update: Tue 22 Sep 2026 09:00:56 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: UWjA1ZOFtuWQWfIAGglsEcluhGInLwgMXNJc8vdvEhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:6a:62:06:3e:36:04:4c:c2:4c:14:49:e0:02:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Sep 21 09:00:56 2026 GMT
Not After : Sep 22 09:00:56 2026 GMT
Subject: CN=e99ff996429b73c755063f8d574872e30ec9d567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:57:0c:ad:9d:fa:e3:35:3f:f1:f3:c2:57:
b4:cf:15:13:92:10:0e:4c:48:98:54:0c:2e:71:b0:
1a:a9:12:a9:74:e9:86:79:c6:3f:c9:f3:0e:1e:79:
98:1e:92:6b:06:5f:6c:f1:a5:52:8d:34:3f:cf:eb:
7c:21:2d:ad:4c:cf:db:46:15:24:26:c9:fd:9d:6f:
70:59:37:98:f8:05:06:c5:68:8e:76:fb:21:7b:f8:
48:d1:35:bc:d4:ee:8e:bd:2d:22:f3:b8:41:ba:ad:
62:10:da:8a:21:44:da:7d:d8:df:67:cc:a4:17:d0:
c4:8f:b1:08:89:86:0c:b6:3b:0f:01:2c:93:78:d5:
a6:15:14:ad:ab:b6:62:d8:7d:ef:93:e7:37:20:87:
26:98:fe:97:70:e8:6e:46:bc:4b:be:b9:5c:bf:3e:
70:be:61:aa:05:a0:1c:2e:52:20:4f:31:f9:44:b3:
84:02:fc:05:7d:4c:a4:2b:a8:5d:a8:ed:56:43:3f:
b0:d8:86:c8:54:e0:f6:cb:21:1f:28:45:64:89:72:
85:aa:b3:4a:ff:a4:0b:44:2f:a5:38:9c:a2:8b:a9:
bc:7e:db:ff:89:ca:6b:10:a8:ca:d2:22:7e:24:93:
c0:fe:d6:1f:76:36:6f:1d:9d:78:ef:2c:d7:d2:18:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9F:F9:96:42:9B:73:C7:55:06:3F:8D:57:48:72:E3:0E:C9:D5:67
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d5:1d:0d:13:18:98:06:77:49:a1:fd:be:91:2e:3a:43:07:
43:86:e0:80:f1:de:e9:77:f4:43:d6:74:37:3a:d6:e6:5c:86:
2a:3e:75:fe:c6:77:2c:14:a4:51:ad:64:e0:06:fa:77:ab:90:
a8:22:60:10:dc:d6:8e:96:c5:98:ca:f4:57:ce:e7:c0:4a:67:
ef:9c:86:c9:af:cc:38:b9:5e:65:cd:27:60:c5:1b:9e:d0:ee:
f6:82:1c:41:f5:86:66:ba:f1:be:cf:df:c4:17:a9:4d:c5:bf:
f6:79:a8:97:0a:e4:bc:50:5b:40:a8:e2:54:2b:1d:af:9e:42:
4c:e0:13:e7:66:40:e8:5a:36:db:0e:d7:c5:39:6d:47:df:5a:
36:04:31:29:6d:25:24:67:2a:22:b9:6b:20:87:73:ce:a5:ca:
c1:60:fd:81:e5:13:eb:29:72:f1:94:d3:92:56:8c:8f:eb:14:
a2:7f:42:e1:b0:82:7b:19:1f:09:57:d9:99:c6:df:63:26:66:
2b:50:ca:50:d2:ba:b0:0d:4f:d9:d0:be:be:96:03:f5:2b:4e:
86:7c:f7:3c:e5:c1:cf:1d:ae:3c:98:72:f0:d2:c4:d0:fc:85:
a7:37:a0:4a:4b:55:1f:19:a8:30:45:6d:94:35:10:49:55:9f:
55:07:89:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMmpiBj42BEzCTBRJ4AIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MzkxY2ZkMjhiMDdlNmE5ZTFjYTMyNTZjZGI4MjAxN2Iy
YjU2MjEwHhcNMjYwOTIxMDkwMDU2WhcNMjYwOTIyMDkwMDU2WjAzMTEwLwYDVQQD
EyhlOTlmZjk5NjQyOWI3M2M3NTUwNjNmOGQ1NzQ4NzJlMzBlYzlkNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApElXDK2d+uM1P/Hzwle0zxUTkhAO
TEiYVAwucbAaqRKpdOmGecY/yfMOHnmYHpJrBl9s8aVSjTQ/z+t8IS2tTM/bRhUk
Jsn9nW9wWTeY+AUGxWiOdvshe/hI0TW81O6OvS0i87hBuq1iENqKIUTafdjfZ8yk
F9DEj7EIiYYMtjsPASyTeNWmFRStq7Zi2H3vk+c3IIcmmP6XcOhuRrxLvrlcvz5w
vmGqBaAcLlIgTzH5RLOEAvwFfUykK6hdqO1WQz+w2IbIVOD2yyEfKEVkiXKFqrNK
/6QLRC+lOJyii6m8ftv/icprEKjK0iJ+JJPA/tYfdjZvHZ147yzX0hjPSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmf+ZZCm3PHVQY/jVdIcuMOydVnMB8GA1UdIwQY
MBaAFPQ5HP0osH5qnhyjJWzbggF7K1YhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMt
ZTVhOWJhOGY1NmFlLzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMtZTVhOWJhOGY1NmFl
LzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtUdDRMY
mAZ3SaH9vpEuOkMHQ4bggPHe6Xf0Q9Z0NzrW5lyGKj51/sZ3LBSkUa1k4Ab6d6uQ
qCJgENzWjpbFmMr0V87nwEpn75yGya/MOLleZc0nYMUbntDu9oIcQfWGZrrxvs/f
xBepTcW/9nmolwrkvFBbQKjiVCsdr55CTOAT52ZA6Fo22w7XxTltR99aNgQxKW0l
JGcqIrlrIIdzzqXKwWD9geUT6yly8ZTTklaMj+sUon9C4bCCexkfCVfZmcbfYyZm
K1DKUNK6sA1P2dC+vpYD9StOhnz3POXBzx2uPJhy8NLE0PyFpzegSktVHxmoMEVt
lDUQSVWfVQeJDQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:38:27 2026 by rpki-client