Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
File: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft (raw, json)
Hash identifier: 2sR4+GXC895OiA1Kg1sa6hleNyTRqZ0UCH0wKRq9bnA=
Subject key identifier: 9A:29:93:88:5B:8B:90:FC:C2:86:A3:FF:18:14:9B:1C:F9:47:50:66
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Certificate issuer: /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial: 01A0C256661BAD0984417353D6C80CAC42DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
Manifest number: 0901
Signing time: Mon 21 Sep 2026 05:00:37 +0000
Manifest this update: Mon 21 Sep 2026 05:00:37 +0000
Manifest next update: Tue 22 Sep 2026 05:00:37 +0000
Files and hashes: 1: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl (hash: qPhoiase1Tu1pZ4/b4KRawwLck/NdUsPD1NNygmRPxw=)
2: 7VaINFSPqt3mXGHqO2ZFwEPWEfE.roa (hash: 5sz1u1bzF1UGMTJq4Lxgn8XO6YmGX618edjqYJ+pTDo=)
3: NLxrIIugp3R4DpT8Bd4iByRao_Y.roa (hash: wBPPunNUH66uF/lnjqaErJgsT6xEJ8SJhXS+mFEdnAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:66:1b:ad:09:84:41:73:53:d6:c8:0c:ac:42:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Validity
Not Before: Sep 21 05:00:37 2026 GMT
Not After : Sep 22 05:00:37 2026 GMT
Subject: CN=9a2993885b8b90fcc286a3ff18149b1cf9475066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:39:11:25:49:21:34:f0:3a:90:79:18:65:e4:
ee:de:64:de:f5:d1:41:f6:77:74:47:a0:d5:f4:74:
30:56:8e:1e:8a:44:fe:59:e0:b1:0b:9d:16:f4:01:
27:dc:b6:2f:38:49:68:58:1f:db:f8:e0:5b:d3:27:
18:69:14:5a:cb:ab:d6:81:6b:06:b2:b6:cc:70:ea:
8b:cd:1e:9e:2d:ff:79:cd:b7:7d:a2:d2:4e:a3:a9:
0e:d6:00:b0:23:9a:29:c2:2a:64:5f:69:31:23:ae:
a7:01:fd:cb:af:04:39:7e:68:2a:8e:23:1e:d5:79:
57:62:66:4c:c5:61:e2:4e:9d:31:7c:6a:1d:34:5b:
72:ad:b4:0f:3a:44:a5:5c:d0:50:54:ca:90:b1:73:
74:44:32:c1:1c:e5:78:3c:61:f9:a0:3d:1c:30:bf:
88:70:9a:7d:fe:39:05:b5:78:eb:46:dd:3e:6d:80:
ab:66:81:88:41:bd:04:40:47:43:d6:88:6b:ae:9a:
6d:3a:07:99:0d:d9:09:e8:a4:ea:5b:18:6d:08:ad:
4a:18:ef:48:fa:5c:0f:7a:fb:12:9c:99:14:ab:15:
86:37:e0:24:49:b3:9e:f4:17:ba:4b:ce:8c:7e:e7:
87:09:8e:34:2f:19:d1:f6:a6:8f:a7:82:2c:d1:e0:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:29:93:88:5B:8B:90:FC:C2:86:A3:FF:18:14:9B:1C:F9:47:50:66
X509v3 Authority Key Identifier:
keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:dd:2d:58:ad:c5:54:8f:38:36:53:30:a5:c9:33:a2:a8:57:
61:92:8b:33:a5:5a:c5:4a:8d:29:a8:61:02:75:15:e2:b8:15:
01:b2:20:19:79:cd:26:2e:96:18:b3:af:cd:ba:56:53:c3:d7:
d7:28:33:3a:4a:63:b8:f4:fc:41:6c:ba:cd:dd:23:6e:93:13:
87:5c:18:69:24:33:a9:bd:7f:d3:d8:03:e8:71:b7:06:ae:5f:
0d:a6:6c:da:cc:97:31:aa:66:95:31:bb:a3:c4:a6:ec:f8:0a:
c6:0c:05:94:d7:b9:b6:97:7e:bb:ea:f4:f6:dd:07:e4:f2:40:
38:02:97:6e:55:5e:1d:36:1c:aa:ff:d8:af:45:86:f8:71:e7:
69:a8:09:bd:0f:7f:f7:6f:a7:43:f0:04:37:7c:87:96:12:12:
82:37:42:c4:43:10:1f:80:e3:ab:a4:65:14:33:23:ca:aa:60:
d7:b5:51:e5:60:c5:49:12:0e:07:3d:29:59:29:e6:aa:4d:7f:
85:d5:75:8d:08:80:fb:a4:77:49:3e:c4:da:76:71:cb:1f:2f:
74:c4:d8:77:99:2f:32:f6:10:9c:84:4c:d2:81:c9:56:3c:7c:
de:55:31:f5:7d:8c:dc:1d:61:e1:f0:30:c6:68:83:e5:05:39:
a1:59:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:56:41 2026 by rpki-client