
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
File: m9LNu_XMLYOp2PExgRJx8DLSFFA.mft (raw, json)
Hash identifier: yQOHSkDeSyt60nZWX71tpIJnyKGyE7lnKNmX2IVNlU4=
Subject key identifier: D2:39:F6:25:17:F0:66:05:78:1B:AC:0E:42:87:09:79:40:16:12:6B
Authority key identifier: 9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
Certificate issuer: /CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Certificate serial: 01A0F15545E61A2EB49B23B3EE6B3D3D784C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
Manifest number: 0212
Signing time: Wed 30 Sep 2026 08:01:32 +0000
Manifest this update: Wed 30 Sep 2026 08:01:32 +0000
Manifest next update: Thu 01 Oct 2026 08:01:32 +0000
Files and hashes: 1: m9LNu_XMLYOp2PExgRJx8DLSFFA.crl (hash: eZ+7Rbs28ye4GXB23EEFJTQlwz91pn5xM9leyf4hAoM=)
2: sRIRtm1WlkJMryRVLofyBLDhtX0.roa (hash: Ho8VKDeLdI3OgV2j2givaKlNGpZaNoqeOK7mD/4wmSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 08:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:55:45:e6:1a:2e:b4:9b:23:b3:ee:6b:3d:3d:78:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Validity
Not Before: Sep 30 08:01:32 2026 GMT
Not After : Oct 1 08:01:32 2026 GMT
Subject: CN=d239f62517f06605781bac0e428709794016126b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:19:d7:6c:00:a4:d3:f0:72:60:c8:0e:fd:
69:70:70:f1:f4:ab:b0:34:8e:9e:f9:0d:56:5e:9b:
34:3e:33:7d:a0:e4:d5:e4:6d:f9:73:34:73:79:0c:
5f:73:b6:76:1c:5f:92:f4:84:cd:80:4e:d4:9f:e1:
d3:0c:97:9a:78:15:8d:b3:d0:05:3b:64:d9:85:d9:
9b:a5:3c:42:a0:8b:59:36:21:a0:42:40:54:c6:cc:
d2:2a:af:9e:a8:17:2d:fd:68:3b:cd:12:f0:66:5d:
3f:05:31:85:5c:11:5e:7a:69:3f:29:dd:99:fc:c1:
4a:66:c2:f7:98:9d:e8:d8:d5:83:01:e6:63:5f:f1:
51:7f:f9:55:4f:24:48:a1:d3:d7:8d:f5:ef:4b:cd:
7f:ce:c3:bf:3c:48:ab:9e:a8:55:ef:7f:59:cb:85:
fb:0e:36:b1:f9:55:47:bf:e1:e8:04:00:c5:04:43:
0b:49:93:dc:20:32:b5:8e:50:46:ee:ed:f3:c6:c2:
35:5a:75:04:92:11:5e:29:b8:79:e6:bc:62:05:cd:
6e:25:a9:26:e8:20:e7:7c:15:b9:d8:7b:09:25:e4:
84:7b:1f:57:fc:d9:c9:6e:f3:90:ba:b1:27:4c:f5:
21:d0:35:87:fe:e6:64:20:03:cd:c8:57:2f:51:4f:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:39:F6:25:17:F0:66:05:78:1B:AC:0E:42:87:09:79:40:16:12:6B
X509v3 Authority Key Identifier:
keyid:9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ed:92:f0:9b:e6:24:6e:e2:e5:d7:ba:79:0b:fd:b4:25:7a:
ff:53:32:ad:29:da:5e:22:af:d3:9b:50:74:e4:01:22:3c:1c:
34:3f:35:40:5e:4b:44:c4:c0:e3:83:d3:d4:e0:82:5b:b1:03:
3a:21:78:04:95:a1:f4:61:8e:66:a2:95:47:43:4a:bb:49:e7:
b8:a8:c3:e0:07:4d:ed:70:6f:02:f9:48:4a:69:10:7d:5d:f9:
13:78:09:48:4a:cf:7d:e3:f3:61:81:48:b0:1b:c2:3f:8f:5a:
c4:ba:8e:bb:65:b1:93:9b:a2:02:b9:4c:83:d1:d1:33:67:45:
16:7c:5a:5f:d0:71:ae:d2:fd:54:3b:62:34:1c:f8:31:cb:94:
70:27:7c:8b:f9:0a:0b:81:bf:32:6d:5b:3d:87:15:44:10:ab:
9f:91:a6:f5:f4:cd:df:85:2d:8f:00:1c:b4:1c:e9:fd:89:ab:
db:4d:99:44:68:b7:9f:0d:7f:a7:3f:9d:27:3d:c8:b0:d0:27:
f0:70:54:63:3c:bd:32:7d:0a:b4:a9:81:db:ce:7a:02:2b:8c:
93:4a:c4:db:1a:37:27:39:2e:16:bc:74:16:54:20:c1:c3:21:
a7:4a:5a:d2:f4:60:28:e8:56:aa:ec:38:c9:27:47:62:b3:20:
4e:00:e9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:11:29 2026 by rpki-client