Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: p3NB8ZM7IO5QmPHKxsDxz0ThSolyGW/Gvzb0rmZ1iq4=
Subject key identifier: F3:8E:DD:A6:58:01:5E:83:56:19:FB:49:15:6D:38:C1:CF:E5:83:46
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 01A0D5A73A7DE8C85E771C4F9FE77344C971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 076D
Signing time: Thu 24 Sep 2026 23:01:41 +0000
Manifest this update: Thu 24 Sep 2026 23:01:41 +0000
Manifest next update: Fri 25 Sep 2026 23:01:41 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: 26XFeQNvpsoTpQOZgaUU0aOHI1+MDFrckwDVR81mJc4=)
2: JKxruJrsyQODEt0lo_2igVlEBhw.roa (hash: 2Ldq4wJQTMkIcJXiRtPhwdIrKaep4MniRxTOmuYmXUs=)
3: UrR8he9LeX1_n_grB04eKjIEfn4.roa (hash: 6VYM1BE9h3lSboPJRgPSxyvYhSPFOMNMfzzxqBF3w0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:3a:7d:e8:c8:5e:77:1c:4f:9f:e7:73:44:c9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Sep 24 23:01:41 2026 GMT
Not After : Sep 25 23:01:41 2026 GMT
Subject: CN=f38edda658015e835619fb49156d38c1cfe58346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:b0:29:44:d4:a3:82:f3:86:32:47:5a:2f:
c7:fe:4c:66:fd:b5:98:6f:00:76:cc:42:b1:f8:f9:
19:50:cb:13:92:0d:c6:ab:ff:18:f0:e3:b5:44:d0:
9b:18:cd:53:f9:c4:bc:f2:f1:1b:ba:d3:af:39:9e:
68:51:95:77:da:99:57:40:58:c7:09:06:f6:46:18:
2e:26:4d:df:66:ad:cf:58:94:a8:d0:bd:31:d0:16:
6d:34:aa:cf:19:2a:ea:35:49:46:28:bb:f3:e4:54:
39:53:65:b1:44:f4:8d:bb:0c:41:44:c2:42:53:24:
6f:87:e0:80:e1:b4:75:23:33:28:08:4c:ad:a7:9a:
36:32:3b:4b:f9:47:fa:4a:93:86:92:6b:85:5a:14:
5b:50:ba:17:35:05:79:88:cf:b4:a3:b8:b2:da:5c:
01:bc:ad:07:18:f1:fc:74:08:8c:7a:24:3c:48:e8:
d0:ae:f4:ba:20:41:ba:c9:72:29:ee:06:f7:f1:8f:
40:f9:d3:94:d6:a6:85:c9:72:ce:9e:74:f2:ea:20:
63:cb:91:fe:68:86:49:c7:7c:d5:68:55:b6:ad:e8:
e1:ce:9e:bd:08:d6:8d:40:ac:95:f4:b8:b6:08:86:
b9:60:a0:04:33:b6:29:51:be:30:df:76:0f:70:1e:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8E:DD:A6:58:01:5E:83:56:19:FB:49:15:6D:38:C1:CF:E5:83:46
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b6:0d:35:32:98:2a:aa:f4:35:1b:bf:24:63:ef:3c:46:dc:
0b:fb:c5:b5:a1:05:a4:8b:32:6d:6e:20:b9:35:14:de:b3:32:
c2:d1:ef:7f:7c:30:b3:23:fa:f1:c3:2c:21:83:ac:42:12:d0:
a5:73:58:b9:a4:ac:bf:3e:ca:80:a5:4f:f9:b2:d1:63:b3:92:
fb:43:c6:76:b7:b9:40:a3:e1:aa:40:49:94:b2:44:ab:a8:c0:
87:0f:34:59:d1:cb:18:fb:bf:e1:61:d4:5f:95:7f:2c:6d:74:
54:0e:8f:a6:0a:4e:30:59:42:2f:ee:1f:f2:53:51:be:6b:22:
f5:ad:bf:7d:ae:97:e8:51:eb:8a:57:3f:0f:50:16:37:83:7a:
fb:8a:2a:fa:c2:3d:7d:53:f3:00:d4:7f:03:84:06:ff:30:af:
55:74:1f:33:c8:57:34:48:3c:7c:81:fd:f9:5c:3d:67:48:6b:
13:ff:46:6e:a0:1f:fa:9f:1d:7b:ad:bd:05:e6:cc:b9:a9:a6:
9e:2d:2f:75:c9:18:7a:d8:41:72:99:c9:b7:83:54:06:d4:1f:
5b:c3:c0:bc:a1:0f:8b:08:02:c0:c3:d4:7d:07:74:6b:f8:95:
cc:62:ad:65:e0:94:5b:e1:60:09:85:ce:00:61:88:97:91:34:
f3:c7:ca:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:34:30 2026 by rpki-client