Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
File: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json)
Hash identifier: ui3DWXLwmBxyMsBYGRlWEGvQvUuzpFfokrfPZqUabQE=
Subject key identifier: 74:65:30:08:B4:3E:76:38:D3:D3:5A:09:BB:05:9D:F4:4B:89:A4:54
Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Certificate issuer: /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Certificate serial: 01A0C5FC4898AD13DCEE85E6975A5AF6F137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
Manifest number: 0621
Signing time: Mon 21 Sep 2026 22:00:40 +0000
Manifest this update: Mon 21 Sep 2026 22:00:40 +0000
Manifest next update: Tue 22 Sep 2026 22:00:40 +0000
Files and hashes: 1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: G5tNyWh0N2zpK2JDRL4z4M1MBbmusdSXxN4nWtA5jsw=)
2: cfgUMJjPHo2HMTWogKTOZFoNb44.roa (hash: 6T+E0hhZ0PL+MJOi66ClH6FGS34xdrKxtztKFTXuFcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:48:98:ad:13:dc:ee:85:e6:97:5a:5a:f6:f1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Validity
Not Before: Sep 21 22:00:40 2026 GMT
Not After : Sep 22 22:00:40 2026 GMT
Subject: CN=74653008b43e7638d3d35a09bb059df44b89a454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0a:33:ea:b7:38:af:c8:2e:b9:a6:9c:4b:fd:
96:57:36:6e:50:af:18:b6:1e:b5:80:2f:f0:76:e3:
0c:ac:25:a6:de:25:9f:bc:4e:70:18:e0:32:26:ef:
a2:de:69:f3:96:c2:89:52:27:46:66:36:00:29:01:
49:e8:6e:9e:57:a3:0d:31:e1:6c:f0:09:71:28:2d:
72:77:5e:26:8f:36:5a:c0:76:47:b1:53:75:de:71:
fc:f3:45:04:e5:1d:7b:10:5b:3a:18:bd:18:35:ca:
19:a1:f1:a1:7a:37:95:53:09:8b:2e:44:af:f0:29:
ba:aa:8d:8d:d4:c4:b0:88:69:12:eb:01:8c:36:25:
f9:60:d6:56:53:98:58:82:a7:71:85:24:10:a8:4a:
70:3b:ce:bd:94:20:8b:e5:7f:4b:e8:15:e8:de:8c:
ca:85:31:10:05:df:9c:38:84:3c:b6:d0:6c:27:8b:
e4:e7:40:3f:88:b2:c6:31:ff:85:b1:d1:af:d2:01:
74:be:a0:5a:2c:9e:04:8c:93:4a:a4:14:bf:e7:47:
74:d1:79:d5:5c:e7:f1:35:b7:64:1d:76:cd:a3:42:
9a:cb:bc:44:74:35:0f:9b:0f:cb:eb:8c:68:cb:30:
cd:ca:42:59:c1:6b:67:61:cd:33:88:b9:fe:7a:90:
ee:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:65:30:08:B4:3E:76:38:D3:D3:5A:09:BB:05:9D:F4:4B:89:A4:54
X509v3 Authority Key Identifier:
keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:62:ed:5f:1a:3f:d3:58:9a:a9:8d:00:5f:43:13:cd:2d:b7:
ec:95:21:3c:10:60:32:62:4b:6a:79:51:8d:b5:59:8e:ee:9c:
df:6d:c5:3a:4b:74:d2:ab:4b:91:3a:71:f9:95:be:e1:e0:a8:
3f:ef:a0:ea:88:08:e8:10:d4:d9:eb:11:f5:4d:b4:d9:72:b4:
25:3e:fe:84:74:a9:a8:9f:39:e9:72:9e:19:8a:91:58:d3:4d:
01:28:70:b2:b9:6d:63:15:27:32:fc:2d:b3:29:29:59:9e:3c:
f3:ff:2f:bc:ea:5a:68:a8:cf:c0:ce:e6:3f:6f:a9:50:4f:66:
d9:b0:fe:0c:06:62:0c:f8:54:be:14:55:2f:d9:04:ad:ce:1d:
4b:08:4b:0e:e6:63:99:fc:9b:39:43:72:8b:0d:11:b6:45:d9:
28:52:cc:f2:9a:b8:eb:b1:a4:2a:9c:b3:62:c1:33:b0:99:e8:
30:f5:04:1d:66:3a:83:b8:e7:da:0d:9c:89:b6:09:4c:e5:6c:
f8:3b:6f:99:fb:9e:dd:27:42:0e:ac:5e:f9:69:38:37:c3:72:
79:c1:e4:e4:85:cd:fa:15:71:bd:2d:93:bf:ad:4b:75:66:dc:
c4:43:fc:1d:db:d3:70:20:4e:d5:17:63:5f:a5:a8:dd:50:7c:
87:1f:8e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:33:14 2026 by rpki-client