Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: uhtc3DqFpvZOFQ1mltPVs6fkGpP/s5P8giUsDLDJ09c=
Subject key identifier: 59:B2:83:D0:3A:C2:EA:F1:B9:CB:25:1E:BE:7D:5E:12:58:42:62:FC
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 01A0C3D6FD893E2011F43C2881DFD278DBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 13C9
Signing time: Mon 21 Sep 2026 12:00:41 +0000
Manifest this update: Mon 21 Sep 2026 12:00:41 +0000
Manifest next update: Tue 22 Sep 2026 12:00:41 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: dQZIqiZTAPXmCWudpbvY+R59Sw0XIsCzqVogKhxTYFM=)
2: vybKFSnUUtCvuNDjBmPdlEc4moI.roa (hash: NvnlzgrButbUBUuTuJIYrEkvgNvaHTxK68ujFnkuVpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:fd:89:3e:20:11:f4:3c:28:81:df:d2:78:db:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Sep 21 12:00:41 2026 GMT
Not After : Sep 22 12:00:41 2026 GMT
Subject: CN=59b283d03ac2eaf1b9cb251ebe7d5e12584262fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:de:85:63:5d:4b:51:fc:2a:cc:8d:83:05:1a:
bd:bb:af:6c:90:2f:76:b9:4b:da:7b:66:b6:2c:56:
69:cc:43:cb:a4:b0:3e:ef:97:00:3d:97:0c:99:b1:
37:b5:1d:05:c8:e9:bc:ff:2b:32:1c:13:5e:04:86:
74:77:59:49:d7:cd:9c:c7:8b:f4:60:d7:8a:7e:97:
98:93:97:eb:3a:57:61:24:eb:5a:a3:e6:d4:04:ec:
cb:bc:77:17:48:7c:5a:66:f7:8a:21:7c:c4:bf:74:
e7:b9:3e:14:d3:e0:54:01:81:a1:f4:9c:af:e0:d3:
58:60:97:ec:ce:2c:4a:f5:17:be:67:44:9d:5e:82:
00:63:93:08:e3:ce:12:ca:d7:59:18:e4:50:fe:74:
63:81:ec:53:c4:ad:2c:6d:2d:df:f6:db:78:ad:d3:
f1:c7:86:c8:27:b9:60:23:c5:dc:3c:ee:9c:eb:09:
f3:08:0d:2c:d8:9c:5a:81:1a:4e:ca:34:7f:13:cf:
20:de:0f:40:d3:34:6f:9c:c6:1e:28:be:6c:d8:9d:
08:67:cc:5b:9f:c4:ea:21:13:68:40:8d:5e:27:af:
86:fe:24:73:cc:3f:f5:a9:a2:e0:ef:3b:a0:59:0a:
e7:53:d3:f2:f4:0a:35:0a:fb:86:a6:c0:ac:97:bb:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B2:83:D0:3A:C2:EA:F1:B9:CB:25:1E:BE:7D:5E:12:58:42:62:FC
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a0:f8:7b:26:46:cf:9b:0b:e1:d1:5a:51:3c:80:84:92:bc:
c8:17:df:e1:91:c6:0f:19:55:6e:98:34:ee:9f:13:af:db:23:
97:b0:22:eb:06:3a:06:01:11:05:b8:b1:52:d4:02:ef:40:0c:
6c:6c:ee:80:fd:74:f5:9c:2e:84:0d:df:54:2f:fa:2b:78:3b:
82:d9:e6:bb:7f:c7:9e:00:4a:e7:ee:84:e6:a4:bd:7e:ac:f0:
ba:e5:9b:39:57:71:cd:f7:32:f4:43:e7:b7:03:74:4d:50:7d:
81:ac:cb:b2:99:e7:95:05:b0:22:f0:57:74:f3:e6:ea:9f:80:
cb:d7:2a:4a:47:8e:8f:f8:91:e1:ff:a8:43:dd:b9:ed:d1:6e:
8f:22:4d:5e:73:da:77:0b:f3:1c:6a:84:60:3d:ad:c1:ba:74:
8a:c7:0b:cf:73:7a:31:14:fa:37:58:84:e2:70:2f:db:76:22:
01:d9:a2:e9:42:8c:16:a4:fd:b7:86:64:56:7f:46:58:5c:e3:
ce:fd:fc:6b:83:19:9f:4b:ca:3b:12:b2:4f:1d:c3:fc:8f:fb:
72:10:31:7e:17:ed:92:b9:1a:eb:b5:34:86:ea:3a:8b:70:2a:
e3:64:88:f1:cc:ff:cf:1c:6c:aa:db:13:84:fe:69:2b:b7:06:
1e:1a:14:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:22:40 2026 by rpki-client