Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: WyLOxzs0fk3om91IBsHz/ftmjTRCu1f9k97j24FF+wE=
Subject key identifier: E9:4F:D2:15:EC:A5:D3:2D:46:FA:BE:58:60:FF:17:46:A4:80:96:E4
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 01A0F8AA1470793103331D48B65675A66706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 0A52
Signing time: Thu 01 Oct 2026 18:11:30 +0000
Manifest this update: Thu 01 Oct 2026 18:11:30 +0000
Manifest next update: Fri 02 Oct 2026 18:11:30 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: pPcVJEul6blrVGukc5Zrqhr5na4NTwgcR5iKOoUlTPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:aa:14:70:79:31:03:33:1d:48:b6:56:75:a6:67:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Oct 1 18:11:30 2026 GMT
Not After : Oct 2 18:11:30 2026 GMT
Subject: CN=e94fd215eca5d32d46fabe5860ff1746a48096e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:54:16:3f:6d:56:e4:0e:1c:21:40:36:01:72:
a6:f3:cc:a0:d9:66:27:41:c0:f3:17:86:d7:7b:8d:
04:3e:29:8c:67:2f:f3:99:88:de:fc:a9:fd:8a:03:
55:f8:5d:82:0f:d1:9d:b1:37:48:26:12:ac:5c:d8:
77:f5:9a:99:16:c8:c6:87:0c:c7:9b:e1:87:8a:52:
ee:ae:f9:6a:36:3b:b8:8c:74:4d:7f:79:52:2b:89:
c8:39:1b:85:cc:3f:97:dc:2e:fe:7a:b8:34:ac:78:
af:2a:94:4f:36:69:6f:3c:2b:37:b9:a2:2e:e0:83:
b4:4d:c2:bb:38:fa:71:0a:65:18:d4:29:cc:fe:44:
24:c2:8b:f2:be:58:7f:c9:a0:54:cc:73:9c:fb:a8:
02:a7:b3:ae:7e:2c:a2:b7:eb:0e:cf:dd:6c:01:9b:
89:e9:92:38:8f:da:4c:d2:9e:c2:8c:21:3d:95:87:
e0:71:40:3e:57:b0:22:02:13:e2:57:68:1c:d4:a0:
24:64:e6:bb:72:e4:a7:0b:5e:d0:2e:7f:18:76:1b:
e4:88:c8:6d:53:32:6f:02:a4:79:dc:fe:eb:ab:ce:
ca:35:60:ce:b5:f3:f8:ec:cb:5f:82:10:9a:2b:64:
d4:93:d3:14:e1:34:c4:c9:c6:3e:60:b5:66:4d:22:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4F:D2:15:EC:A5:D3:2D:46:FA:BE:58:60:FF:17:46:A4:80:96:E4
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:08:16:f0:8a:a8:13:e2:2e:21:90:36:da:02:2b:7e:55:f8:
fe:7c:85:3a:21:24:73:54:55:a3:a0:96:49:f6:d4:e8:b8:0a:
d9:17:9f:bf:89:4a:5c:50:f0:6a:0b:78:b3:eb:93:fe:57:0b:
55:10:5e:bc:ae:c7:28:44:fa:0c:cf:5d:95:02:cb:4d:e7:93:
bd:21:30:ee:16:a3:10:02:49:2f:5e:a3:2a:0a:f5:af:ff:85:
15:c0:bb:e5:76:46:91:35:8c:97:2a:23:3b:62:92:2b:e2:77:
30:ec:50:63:cb:1c:0d:eb:bd:46:ef:8a:0d:63:de:a0:01:fd:
57:ca:64:63:ce:c1:89:40:aa:51:7b:07:09:96:8c:f1:1f:09:
ac:d4:9a:e8:3f:dc:7c:50:a5:2c:b0:7d:63:84:49:10:80:a1:
20:63:4f:3a:18:38:6b:ed:26:db:f5:ee:b1:12:19:20:0a:91:
d4:e1:7e:41:26:d6:20:3a:f3:2e:0e:ad:79:72:14:07:17:e1:
4c:ef:49:ba:46:48:fa:90:1d:6d:c3:58:1b:ce:d0:b1:d0:99:
e5:71:a8:3e:55:7f:53:ba:61:d2:65:21:32:cf:57:98:d1:41:
3e:85:c2:c7:da:8b:6d:5d:ad:83:06:aa:f2:47:a1:27:8e:40:
37:c8:2d:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD4qhRweTEDMx1ItlZ1pmcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDQ2MDU5NmQ2ZDUzMjQwMWRlMzEzZGY4OTAzNjZlNTM3
NmQ2MDIwHhcNMjYxMDAxMTgxMTMwWhcNMjYxMDAyMTgxMTMwWjAzMTEwLwYDVQQD
EyhlOTRmZDIxNWVjYTVkMzJkNDZmYWJlNTg2MGZmMTc0NmE0ODA5NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01QWP21W5A4cIUA2AXKm88yg2WYn
QcDzF4bXe40EPimMZy/zmYje/Kn9igNV+F2CD9GdsTdIJhKsXNh39ZqZFsjGhwzH
m+GHilLurvlqNju4jHRNf3lSK4nIORuFzD+X3C7+erg0rHivKpRPNmlvPCs3uaIu
4IO0TcK7OPpxCmUY1CnM/kQkwovyvlh/yaBUzHOc+6gCp7Oufiyit+sOz91sAZuJ
6ZI4j9pM0p7CjCE9lYfgcUA+V7AiAhPiV2gc1KAkZOa7cuSnC17QLn8YdhvkiMht
UzJvAqR53P7rq87KNWDOtfP47MtfghCaK2TUk9MU4TTEycY+YLVmTSL4AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlP0hXspdMtRvq+WGD/F0akgJbkMB8GA1UdIwQY
MBaAFPVEYFltbVMkAd4xPfiQNm5TdtYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hOWVkZTItMjhjMi00YmVmLTliZWYt
YzgwOWMwYTQwODg4LzEvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hOWVkZTItMjhjMi00YmVmLTliZWYtYzgwOWMwYTQwODg4
LzEvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwgW8Iqo
E+IuIZA22gIrflX4/nyFOiEkc1RVo6CWSfbU6LgK2Refv4lKXFDwagt4s+uT/lcL
VRBevK7HKET6DM9dlQLLTeeTvSEw7hajEAJJL16jKgr1r/+FFcC75XZGkTWMlyoj
O2KSK+J3MOxQY8scDeu9Ru+KDWPeoAH9V8pkY87BiUCqUXsHCZaM8R8JrNSa6D/c
fFClLLB9Y4RJEIChIGNPOhg4a+0m2/XusRIZIAqR1OF+QSbWIDrzLg6teXIUBxfh
TO9JukZI+pAdbcNYG87QsdCZ5XGoPlV/U7ph0mUhMs9XmNFBPoXCx9qLbV2tgwaq
8kehJ45AN8gtag==
-----END CERTIFICATE-----
Generated at Fri Oct 2 02:59:20 2026 by rpki-client