Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: e5a1WBmlyHHNcsmMsi7UC/ZxNs4qRGPL/FXNn8eGNgk=
Subject key identifier: AC:9A:58:BA:89:86:B3:C9:39:93:CB:13:BA:B8:D8:C0:D5:D3:1F:62
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 01A125B02737837484DE68CB9D3D3744C813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 0B81
Signing time: Sat 10 Oct 2026 12:01:03 +0000
Manifest this update: Sat 10 Oct 2026 12:01:03 +0000
Manifest next update: Sun 11 Oct 2026 12:01:03 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: oWKaUjlLqjO+nJH1SbV5wgovTDK11pf6eZF52ZdBi/g=)
2: umIyQ32hARkovH7pXTjPbQsyUAw.roa (hash: Vykeq8JG9Smu2I4EYLNs8vno3gc9BXMxlVVP02kGN2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:b0:27:37:83:74:84:de:68:cb:9d:3d:37:44:c8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Oct 10 12:01:03 2026 GMT
Not After : Oct 11 12:01:03 2026 GMT
Subject: CN=ac9a58ba8986b3c93993cb13bab8d8c0d5d31f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:34:67:ae:36:9c:3a:7e:cf:c9:4b:b0:6b:b5:
94:9e:9a:4a:56:4c:3c:e4:4b:d6:42:e3:e9:ae:49:
c7:89:ed:40:c5:e2:b3:c9:6c:4e:6d:4d:de:3c:46:
f9:62:81:96:30:59:83:c8:8a:23:24:dc:b8:e5:ec:
31:b1:37:b5:73:7d:56:10:fe:a9:3d:8e:b2:38:f0:
fb:2d:d2:81:21:93:57:84:12:06:a0:28:89:91:25:
45:ad:56:ce:13:ce:6d:a1:d1:94:51:8d:72:e5:3a:
93:c4:87:77:6e:a6:cb:21:41:05:49:62:0a:27:d9:
a7:9e:22:9b:77:c7:35:c7:46:9f:ff:ae:97:a4:d3:
eb:0b:6c:24:da:88:a6:88:4e:62:a6:23:65:d3:b6:
cb:53:62:fd:ac:b0:bc:5e:0b:39:38:5a:83:3f:f2:
b2:82:e7:53:96:cf:52:f9:78:4d:e4:40:18:1c:51:
3d:8f:fc:5e:e4:31:7f:cb:01:a5:00:99:9d:64:b8:
e7:3b:2b:d5:0e:ba:e6:d1:e8:98:a5:a8:2d:28:0d:
bb:08:11:d0:24:57:cb:7d:a4:3c:0f:aa:4c:ba:89:
e4:65:47:8a:ce:4b:43:cd:07:4b:e4:4f:66:ea:b5:
f4:69:c8:f4:24:e6:18:eb:2b:bb:a8:b1:76:5f:69:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9A:58:BA:89:86:B3:C9:39:93:CB:13:BA:B8:D8:C0:D5:D3:1F:62
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ca:1b:64:5a:48:a4:c3:ac:6c:b1:2d:55:da:ad:40:5a:1d:
bc:c4:c2:3e:df:e8:32:46:2c:38:f3:6b:62:2c:e2:9e:c3:18:
0b:e3:40:93:ff:c2:45:ef:d3:34:09:27:57:ef:2f:c2:ef:7e:
25:3d:85:96:bd:76:48:82:cd:52:fb:ea:9c:40:c5:cb:52:a3:
82:69:98:c6:e8:c5:ba:f2:a8:ee:1e:4f:54:f4:b3:d5:ef:56:
8a:90:51:f7:87:b4:68:fa:6b:d8:ab:5c:f2:c8:a9:22:d9:f7:
d7:8a:6f:1b:9a:5f:1f:a8:59:18:3d:21:f7:d2:40:32:bd:b9:
c8:c7:07:81:0c:6f:58:aa:1a:21:b1:70:fb:df:e9:6b:30:56:
fb:ec:7f:80:85:9d:fd:4e:8c:50:2b:e3:05:d6:b0:7d:91:42:
99:1a:44:e0:97:ae:11:e2:00:6e:0c:6f:67:4c:88:7f:b8:61:
5b:08:d7:b1:d3:cd:9f:fc:43:91:e2:82:52:86:16:46:60:d6:
38:76:3b:69:7a:74:73:bf:44:e3:9d:1b:b9:6b:77:4b:8e:ab:
8f:f9:a1:dd:ee:51:85:2d:3f:e4:4f:1f:4b:81:81:cd:78:b7:
1f:97:f6:c3:fb:8f:f3:df:10:49:80:54:f7:6b:8e:cf:4c:7d:
33:68:89:4b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaElsCc3g3SE3mjLnT03RMgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Y1ZTFlOTI4ODg2MDc4MGQxMmUzNGE0YWQzYjQwZDk4
NDgzZmMwHhcNMjYxMDEwMTIwMTAzWhcNMjYxMDExMTIwMTAzWjAzMTEwLwYDVQQD
EyhhYzlhNThiYTg5ODZiM2M5Mzk5M2NiMTNiYWI4ZDhjMGQ1ZDMxZjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TRnrjacOn7PyUuwa7WUnppKVkw8
5EvWQuPprknHie1AxeKzyWxObU3ePEb5YoGWMFmDyIojJNy45ewxsTe1c31WEP6p
PY6yOPD7LdKBIZNXhBIGoCiJkSVFrVbOE85todGUUY1y5TqTxId3bqbLIUEFSWIK
J9mnniKbd8c1x0af/66XpNPrC2wk2oimiE5ipiNl07bLU2L9rLC8Xgs5OFqDP/Ky
gudTls9S+XhN5EAYHFE9j/xe5DF/ywGlAJmdZLjnOyvVDrrm0eiYpagtKA27CBHQ
JFfLfaQ8D6pMuonkZUeKzktDzQdL5E9m6rX0acj0JOYY6yu7qLF2X2lndwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKyaWLqJhrPJOZPLE7q42MDV0x9iMB8GA1UdIwQY
MBaAFPrPXh6SiIYHgNEuNKStO0DZhIP8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zOWVIcEtJaGdlQTBTNDBwSzA3UU5tRWdfdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMzljNjIyLTQ4NjctNGZiMy04ZWY3
LTVkMjdmOWRiZWQ2Ni8xLzEtczllSHBLSWhnZUEwUzQwcEswN1FObUVnX3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY3LzM5YzYyMi00ODY3LTRmYjMtOGVmNy01ZDI3ZjlkYmVk
NjYvMS8xLXM5ZUhwS0loZ2VBMFM0MHBLMDdRTm1FZ193LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcob
ZFpIpMOsbLEtVdqtQFodvMTCPt/oMkYsOPNrYizinsMYC+NAk//CRe/TNAknV+8v
wu9+JT2Flr12SILNUvvqnEDFy1KjgmmYxujFuvKo7h5PVPSz1e9WipBR94e0aPpr
2Ktc8sipItn314pvG5pfH6hZGD0h99JAMr25yMcHgQxvWKoaIbFw+9/pazBW++x/
gIWd/U6MUCvjBdawfZFCmRpE4JeuEeIAbgxvZ0yIf7hhWwjXsdPNn/xDkeKCUoYW
RmDWOHY7aXp0c79E450buWt3S46rj/mh3e5RhS0/5E8fS4GBzXi3H5f2w/uP898Q
SYBU92uOz0x9M2iJSw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 21:48:07 2026 by rpki-client