Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: DuRTMjuK8ojzxwFQtk+2dFRDIwyJNEY94V20cHvQf7c=
Subject key identifier: 86:D9:80:F2:C7:CE:5B:B6:CC:2C:BF:CB:B3:F6:BD:A3:5F:7D:F1:61
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 01A104DC23AF09939216FB3CBCB65FE67412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 0F28
Signing time: Sun 04 Oct 2026 03:01:38 +0000
Manifest this update: Sun 04 Oct 2026 03:01:38 +0000
Manifest next update: Mon 05 Oct 2026 03:01:38 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: /CCmUsGGcSlyMRLER1d0JNNUBCgc07cm9xTsj4TXn6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:dc:23:af:09:93:92:16:fb:3c:bc:b6:5f:e6:74:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Oct 4 03:01:38 2026 GMT
Not After : Oct 5 03:01:38 2026 GMT
Subject: CN=86d980f2c7ce5bb6cc2cbfcbb3f6bda35f7df161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:89:37:56:c1:b1:17:02:f5:16:f2:a8:dd:
ec:14:dd:ca:64:31:b8:52:35:8f:83:56:71:86:19:
fc:5c:e1:77:76:b8:75:ea:c9:63:ac:35:7a:76:2e:
b7:32:cc:9f:16:2f:87:dc:79:50:8e:0c:b2:0c:5d:
cf:0c:c3:34:dd:b0:7e:32:da:20:e3:57:b2:b6:e3:
d4:5b:52:c0:44:cf:27:4c:a6:b2:0e:b7:ce:c9:ab:
82:f3:d9:85:16:92:3f:2b:99:81:88:10:ef:01:eb:
be:8b:88:32:49:a7:bc:11:bb:fb:d2:d5:ef:68:23:
5f:6c:7d:b8:21:c4:fd:52:b4:e6:ef:3a:42:0b:ed:
b2:84:0e:52:44:ae:15:b7:e0:53:f0:80:e1:be:04:
62:5c:a9:25:f8:66:83:d8:6a:07:21:4f:a4:95:07:
08:ad:12:68:57:42:0c:fb:b5:6f:58:28:7f:5c:b7:
44:40:7f:54:76:66:84:b2:88:8b:a7:2d:bd:9c:41:
dd:55:7f:4c:10:a0:ff:3c:e0:71:47:5b:65:6a:7c:
61:57:6c:92:17:60:e5:18:dd:3c:58:9a:48:d5:e0:
fe:cd:cb:c2:6d:bb:b2:f2:4f:02:df:a9:e6:bc:7c:
0f:54:8e:a8:ac:da:6a:a8:14:23:78:19:73:b5:02:
da:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:80:F2:C7:CE:5B:B6:CC:2C:BF:CB:B3:F6:BD:A3:5F:7D:F1:61
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:19:17:a0:2a:b7:28:f2:fa:c2:4a:12:3c:7a:74:79:d7:82:
10:1a:6e:4b:39:3c:62:a6:e1:5e:33:cb:71:47:34:1f:e8:4c:
cd:72:b8:da:40:26:1d:f0:76:d9:d2:92:fe:ae:db:d6:0e:b8:
d5:c3:bd:8f:12:69:5a:24:99:8a:9f:68:c5:f8:58:2e:bc:5b:
a3:6d:f0:43:90:57:0e:d2:d4:e3:25:0d:55:8e:a2:20:7c:12:
6a:99:57:7a:74:f4:15:ac:5d:c3:05:ee:94:07:3d:a1:2c:78:
f2:7b:2e:ff:3a:41:c4:c8:b2:02:2d:c8:2e:17:2f:37:f0:9b:
fe:63:97:51:b8:86:54:95:4a:05:c8:7b:04:4f:30:42:ac:75:
cc:f7:cd:3c:ec:52:a6:f8:ad:31:9e:78:85:16:9d:88:05:19:
8e:ae:be:c8:50:49:38:08:2e:71:1c:80:83:53:2c:75:18:0e:
7a:74:d9:6b:74:8a:11:39:3c:e9:fb:81:3f:7e:39:d0:b4:59:
a3:e9:c5:8f:72:34:3c:49:34:ef:6c:f0:e2:98:00:92:c6:eb:
aa:c8:7b:44:24:a3:07:26:58:37:a8:73:c8:59:3a:3d:46:d3:
66:18:fe:aa:00:e8:e8:ab:9e:67:7d:cd:06:cf:ea:12:4b:9b:
c1:be:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:42:49 2026 by rpki-client