Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
File: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft (raw, json)
Hash identifier: 4iyedRgQwU629m5BP4HV2G3v5gercE1Zrp9Jo3D3KYM=
Subject key identifier: D2:A0:6B:48:99:0E:37:25:7E:EF:30:E6:12:4A:99:11:07:BB:38:0B
Authority key identifier: F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
Certificate issuer: /CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Certificate serial: 01A0C7EA34CC0F8B0E7E5E256C67E8EBDFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
Manifest number: 0E73
Signing time: Tue 22 Sep 2026 07:00:09 +0000
Manifest this update: Tue 22 Sep 2026 07:00:09 +0000
Manifest next update: Wed 23 Sep 2026 07:00:09 +0000
Files and hashes: 1: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl (hash: Ux2eGvwJP2oGvgXVnKXxtMgz3ax9dX3RUDV88mCKnMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:34:cc:0f:8b:0e:7e:5e:25:6c:67:e8:eb:df:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Validity
Not Before: Sep 22 07:00:09 2026 GMT
Not After : Sep 23 07:00:09 2026 GMT
Subject: CN=d2a06b48990e37257eef30e6124a991107bb380b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:ab:82:2a:a8:c8:32:1f:71:61:20:0a:87:
18:53:01:8d:fd:12:9e:42:2a:91:aa:0a:94:8c:83:
3c:d7:b9:a0:09:af:e3:92:f9:c6:91:d7:6e:a2:65:
36:67:61:8d:75:fd:ea:ef:f9:d7:69:bb:ce:5c:45:
48:62:29:2a:09:1b:9f:fa:4e:49:7a:67:11:bc:6d:
b5:ad:78:71:3d:2c:d3:5d:93:ce:89:af:5f:aa:2c:
4d:c8:7c:af:76:ad:0c:28:53:f0:e3:bc:5e:14:d8:
25:13:88:62:37:fa:ff:78:b2:8e:0e:31:a7:21:73:
21:91:de:d7:f0:0b:b0:44:4d:89:da:d1:de:f4:44:
c5:77:3d:ad:c4:8f:38:c5:83:a8:aa:f5:95:de:12:
b8:ac:12:48:29:15:98:2c:21:a4:b3:e9:39:66:70:
e6:43:7c:d2:ca:7a:ff:c0:70:93:11:d2:20:9e:4a:
39:13:6e:40:7a:78:71:d5:c7:f2:66:cd:08:25:70:
c0:08:45:ea:cb:fb:02:a6:02:c8:df:6d:1e:f7:2e:
eb:89:51:4b:d2:22:b9:9c:7a:b3:81:26:c2:f1:9e:
c5:a9:6c:20:6a:66:9d:19:b2:f6:2f:3d:ad:d8:c2:
50:af:5e:03:7a:ec:d8:be:85:30:b9:12:39:a7:a3:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A0:6B:48:99:0E:37:25:7E:EF:30:E6:12:4A:99:11:07:BB:38:0B
X509v3 Authority Key Identifier:
keyid:F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:38:ca:dd:34:cf:80:3a:fe:a1:c8:33:e1:64:85:ab:cf:c2:
f3:7e:32:1a:19:1c:0e:c5:a3:8e:31:f4:73:a8:2d:31:a5:82:
e1:ff:bf:61:79:25:e5:d8:ab:88:7c:63:4c:b1:02:9f:e0:3b:
b8:be:f0:80:86:e0:67:d1:e9:a1:a0:fb:a6:cc:e7:af:ff:5c:
dc:d5:c3:6f:a9:23:ec:86:f5:32:80:ee:30:19:2a:18:01:16:
57:b7:65:9a:18:f3:f6:62:b7:fb:f1:37:ca:69:cc:4d:d4:a4:
3a:d5:5c:7d:81:75:ca:22:6f:6e:c2:0d:d9:6b:04:40:61:3e:
48:d9:8c:68:1d:d6:6f:7e:38:d9:16:84:41:75:83:a5:e3:db:
9f:fc:07:03:71:4e:c2:5e:f4:fb:1d:d4:13:54:07:60:1d:bd:
bb:2b:c8:98:c3:83:f6:78:b8:63:c4:41:a9:88:38:7a:0c:5e:
0c:67:c9:81:0f:0a:e3:6f:76:fa:c1:ff:b8:5b:98:52:c3:ea:
a7:43:eb:ba:05:12:3e:6d:d2:31:e6:1e:7b:22:d7:6f:d8:34:
09:e8:a2:72:ac:0e:16:72:b3:54:1b:a8:d1:2d:3a:db:71:5e:
a4:cd:91:ce:d9:4a:bd:cb:50:b3:6a:7e:03:99:f3:7d:d3:3e:
87:61:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:31:27 2026 by rpki-client