Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: oU/38HtLSWIP0l9RmTymmtxPt2eGn3LkqzrtVS8pfV4=
Subject key identifier: E9:31:DF:D1:C7:95:3D:68:8F:79:EA:0F:36:29:A5:6E:22:EC:FF:6E
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 01A0D4CB5199CF1D93D61C738D14F5AE9EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 0F90
Signing time: Thu 24 Sep 2026 19:01:29 +0000
Manifest this update: Thu 24 Sep 2026 19:01:29 +0000
Manifest next update: Fri 25 Sep 2026 19:01:29 +0000
Files and hashes: 1: 6f1i3xvOw5Akrk8EPZTaku38e58.roa (hash: yAZKqI7wHi0H5V8PrGtfeSpp18rf8v5uoZXgPYXu5QA=)
2: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: 0S4ed1PyHZNw51+g7NGTZGT5bUeAz5B3Yp5ToGazCMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:51:99:cf:1d:93:d6:1c:73:8d:14:f5:ae:9e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Sep 24 19:01:29 2026 GMT
Not After : Sep 25 19:01:29 2026 GMT
Subject: CN=e931dfd1c7953d688f79ea0f3629a56e22ecff6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:c6:d6:01:8d:ef:9d:df:ba:d3:ff:da:65:
80:7c:da:da:7a:31:40:44:f0:10:89:62:c6:a9:da:
1c:32:c6:e6:bf:e9:3e:b7:eb:a5:eb:b7:4d:11:c4:
40:46:d4:8a:c1:c4:f6:2c:76:5f:7d:2e:5e:49:b3:
04:47:1e:18:9d:04:0a:d7:c7:d5:21:ce:6e:e3:aa:
cb:03:b8:a1:12:9f:1d:d5:84:23:5a:72:ad:f0:e0:
c2:43:2d:7c:91:fb:67:21:57:52:64:30:e1:6e:ac:
6b:12:76:c7:7c:dc:83:87:55:d7:fe:f8:73:99:65:
9f:3f:8f:ba:70:ed:1d:21:7a:ea:92:4b:9e:88:fd:
a1:7c:84:0a:d6:6f:0e:6f:24:4c:64:16:41:31:dc:
3b:64:12:5b:56:4b:bf:e6:80:6a:7d:04:a1:56:3a:
e4:2a:b0:87:05:3d:93:5d:27:f5:b6:b4:35:fe:e4:
4e:72:b0:34:71:a4:28:00:49:7e:a4:8e:ae:92:f1:
19:71:79:4f:cc:56:41:61:bb:ae:92:eb:23:e8:f3:
6b:2d:8f:83:98:38:cb:7b:b6:d8:8f:d5:aa:38:31:
d2:c7:fd:bd:07:2c:41:d6:53:9f:b6:f2:0c:8f:f3:
dd:f3:c8:d7:94:02:0c:53:e0:14:31:a8:19:2b:65:
91:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:31:DF:D1:C7:95:3D:68:8F:79:EA:0F:36:29:A5:6E:22:EC:FF:6E
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:39:0c:56:21:ec:0d:2b:e7:9e:8b:bc:c4:5b:93:9e:8a:52:
ea:bf:6b:b4:c1:48:73:83:a8:1b:17:42:58:d1:a5:25:3b:1d:
85:69:ae:52:3b:04:74:b6:49:09:17:f0:6b:ad:bc:ad:b0:37:
ad:ab:80:24:a7:2f:e6:fb:ec:e2:5d:e9:67:63:71:e0:24:a5:
a0:d1:6c:ad:94:f2:37:eb:6f:fa:98:6e:c8:63:34:02:a8:b2:
ce:78:cf:9c:b8:64:9a:21:87:90:fc:e3:0b:71:ba:18:21:a2:
e2:1e:4f:9b:94:ec:7f:67:26:3b:43:94:7b:41:73:b7:e3:53:
44:e4:8d:22:d4:3d:7a:ee:69:0a:f6:e5:a5:76:48:f6:1f:f4:
b9:24:43:2e:e1:da:7d:09:0b:31:2e:0e:b1:55:5c:53:41:d7:
95:de:f7:73:19:12:5e:70:1d:e8:5d:91:31:9a:04:a0:48:f3:
1a:d2:a0:ba:56:c0:3e:1c:24:45:8d:2e:bc:f3:d9:12:68:f9:
8d:a8:38:8e:2b:63:24:05:35:6b:81:70:c3:39:64:c1:df:5c:
f3:b5:e6:3f:a3:55:a7:8f:37:31:f6:86:43:63:1d:84:6f:23:
dc:d0:b4:29:c7:e7:da:e0:90:a9:20:43:df:9e:c1:c3:5d:65:
ae:ff:b8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:27:52 2026 by rpki-client