Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: vQq2H2W7n5IEU2oda7TFOTJz8gOCdssM7aHRehSsVRY=
Subject key identifier: 66:2C:A1:D4:C3:88:1E:C6:51:2A:3F:24:70:A4:AE:5A:41:EB:24:CF
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 01A0C5C56FDAE3C67F0BC7E4B5DBA5A0860D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0BE2
Signing time: Mon 21 Sep 2026 21:00:45 +0000
Manifest this update: Mon 21 Sep 2026 21:00:45 +0000
Manifest next update: Tue 22 Sep 2026 21:00:45 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: GtVTZko7C7hedo5HFDM2CsT3gS2Mn679nUqHptmDlyI=)
2: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (hash: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI=)
3: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (hash: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:6f:da:e3:c6:7f:0b:c7:e4:b5:db:a5:a0:86:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Sep 21 21:00:45 2026 GMT
Not After : Sep 22 21:00:45 2026 GMT
Subject: CN=662ca1d4c3881ec6512a3f2470a4ae5a41eb24cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:5b:51:8f:91:67:a7:1a:7b:3a:5c:5f:8b:
3e:f7:e6:43:93:6b:2e:ce:5b:99:09:89:29:24:94:
56:7c:28:b7:8e:bc:5a:8e:32:0d:70:0e:29:bf:80:
57:e1:9e:d9:19:94:7e:a2:14:c9:6a:cb:52:20:3a:
54:c2:d4:f5:76:cd:d2:e1:a3:a5:cc:a0:b2:95:0b:
07:a7:39:b7:0d:7e:49:c3:11:88:df:64:35:4c:0d:
70:37:a9:0e:20:49:fd:25:54:63:ca:13:73:f2:cb:
d8:f8:0a:b8:d6:15:5d:25:e8:d1:62:28:7c:7d:87:
ac:2c:36:fb:c4:9c:d4:5b:cb:df:b9:58:1e:9b:a1:
2b:fa:d0:36:65:63:7d:7c:5a:f5:cd:43:1e:c1:a3:
ea:7f:4f:11:d2:b3:a5:c2:98:45:14:92:63:b1:2b:
99:9f:1f:32:22:68:2f:a5:48:f3:40:f5:12:bd:2f:
b8:34:01:90:b1:c1:0e:b8:25:bb:fc:8b:56:f7:09:
b4:66:5e:68:81:6f:59:80:75:89:09:c9:bb:60:bf:
53:66:92:cc:3d:ba:7e:65:10:89:47:75:76:48:d5:
e6:f0:45:0f:cf:68:1c:f1:ab:39:48:b9:8d:35:4f:
fc:68:64:bc:90:3a:3c:57:53:c0:51:a8:0b:ce:8b:
9c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2C:A1:D4:C3:88:1E:C6:51:2A:3F:24:70:A4:AE:5A:41:EB:24:CF
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:27:35:8b:67:45:ff:fa:5f:5c:16:d2:37:d2:d4:83:80:25:
26:b9:9a:eb:96:a1:e7:35:7f:fc:36:e0:13:f2:d9:6e:ff:fa:
49:05:24:16:8e:32:80:de:72:77:24:e7:39:85:5f:d5:52:f7:
1b:13:90:20:80:0c:ad:7e:c0:5c:4b:57:04:b8:69:4a:57:49:
96:73:75:ec:d0:3d:78:3b:a2:0c:99:a6:74:f9:8f:58:a8:d8:
e9:64:3e:8f:4a:03:3a:9b:57:1c:bf:ea:90:29:83:08:d6:ea:
ae:36:5c:0b:96:42:23:b5:66:c1:57:d9:e9:16:c5:fe:77:67:
73:d5:18:9e:87:5f:00:e7:4d:0d:a1:74:10:9f:5c:e3:8d:9c:
61:51:7d:5a:07:0b:31:3c:88:fa:e3:dc:4e:aa:fc:a3:18:90:
d8:0a:17:9a:33:8d:d5:db:91:5f:97:58:d2:9a:47:d9:f9:c1:
4a:87:02:1c:af:6d:dd:40:15:0d:74:58:4a:17:3a:3e:92:d2:
2e:fe:2b:32:cd:c7:2c:e4:23:5a:04:26:81:3b:b9:52:23:5e:
4d:d5:2c:d3:f5:09:df:24:3f:28:6d:e7:7c:c8:22:a0:76:f5:
78:18:03:fe:02:ef:ba:2b:e6:90:ed:86:f2:39:23:ac:bf:55:
ea:71:0d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:11:35 2026 by rpki-client