Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
File: 9aSNNBWgK5T1T-4rZZSPJetPfdo.mft (raw, json)
Hash identifier: 263K1uuh3Nkl51hyxFhQPfnX5rNcm1M2u99Zcj7EqCQ=
Subject key identifier: 60:BB:27:D9:6F:68:F1:C0:BB:64:C1:21:31:63:92:78:90:4B:6F:56
Authority key identifier: F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
Certificate issuer: /CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Certificate serial: 01A0BE797CD3135829E9FA77433BD7AC3A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
Manifest number: 010C
Signing time: Sun 20 Sep 2026 11:00:27 +0000
Manifest this update: Sun 20 Sep 2026 11:00:27 +0000
Manifest next update: Mon 21 Sep 2026 11:00:27 +0000
Files and hashes: 1: 9aSNNBWgK5T1T-4rZZSPJetPfdo.crl (hash: Gd7k7YyxODznYtMMT8DkDAs5QNNH3TWT5KxshAV/6gs=)
2: KB-nu_fDuo0XIMgqWugjNtPelKM.asa (hash: xVtyR3/ZytBeSN3L364bzhtV6xgki7m57Wrm3JRE2Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:7c:d3:13:58:29:e9:fa:77:43:3b:d7:ac:3a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Validity
Not Before: Sep 20 11:00:27 2026 GMT
Not After : Sep 21 11:00:27 2026 GMT
Subject: CN=60bb27d96f68f1c0bb64c12131639278904b6f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:29:28:6f:75:15:3f:e4:b5:5d:09:9f:b3:
47:9d:4b:0e:4e:f1:36:fd:cd:53:fb:80:6e:a8:dd:
df:c5:f4:49:ae:99:dd:c1:e3:08:54:c2:4a:35:fb:
88:bc:03:fa:7f:94:e3:83:10:18:c2:ce:bd:2e:fd:
e0:b1:91:b8:4c:d7:11:0d:9e:15:24:f4:89:8f:3a:
4b:b4:9b:48:be:9f:30:55:53:55:47:4f:88:47:78:
dc:52:d5:4f:4a:9b:02:6d:57:c4:66:70:cb:2f:db:
25:b7:2a:93:21:4f:81:b0:07:9c:f8:f2:ae:c3:eb:
2d:64:ae:41:ae:57:a2:2f:24:95:5d:c5:a8:54:8d:
9f:02:25:0a:28:b2:e4:ee:29:74:9b:64:70:7c:4b:
33:35:55:b6:f3:71:80:13:e5:02:82:24:55:81:b6:
be:88:d3:ec:bc:12:5c:5f:78:09:59:39:3c:10:b8:
12:62:5b:52:0e:a2:c7:46:45:53:15:3d:b8:db:89:
a0:7f:7b:b7:c0:8c:28:c7:92:26:0c:bd:17:32:28:
21:25:cb:8b:b1:8f:d6:61:8f:4b:49:26:5a:0b:5a:
90:f1:34:91:e9:4e:60:76:15:11:4f:79:92:62:b7:
25:20:68:8e:b6:07:e6:71:56:d6:e6:ff:8c:61:63:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BB:27:D9:6F:68:F1:C0:BB:64:C1:21:31:63:92:78:90:4B:6F:56
X509v3 Authority Key Identifier:
keyid:F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:28:4f:19:a8:99:75:68:8b:f1:86:ce:ec:d7:c9:6e:50:28:
45:f8:74:21:ec:9c:3d:82:b5:12:49:69:ea:50:8e:7b:96:7d:
04:ab:53:a7:1a:34:91:72:87:15:38:97:64:93:06:4a:2e:28:
9c:bc:66:87:58:1e:e0:80:4c:7a:45:0e:0d:80:fa:f9:fb:ed:
01:c4:e5:89:09:58:af:76:cb:29:2b:6a:a3:b4:af:84:16:91:
bf:83:59:3c:08:bb:59:87:f0:85:85:5d:0e:c3:fe:21:e7:16:
14:52:05:5b:e6:de:43:1c:d2:7f:d9:43:c9:f8:67:92:19:a6:
96:58:2f:34:7f:fc:86:ee:bb:be:86:71:55:9a:d2:18:a1:c6:
cd:d2:8e:36:2a:59:01:ee:73:4e:96:eb:dc:c2:04:07:42:af:
09:74:a2:15:cd:2a:dd:b2:ba:1e:a0:83:b3:4d:db:07:58:e6:
5e:30:f5:b0:35:db:2c:f9:80:3b:cf:cb:17:0c:99:4c:19:de:
b5:74:9e:3e:1d:03:d1:22:88:b0:e5:16:ba:6c:76:c3:8b:40:
08:0f:9c:59:13:9d:f4:e0:59:1c:d4:bf:57:d7:2f:b1:9d:83:
13:49:78:1e:e9:7b:47:2a:8f:a8:e5:1a:57:66:2d:10:5e:64:
b8:38:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:52:35 2026 by rpki-client