Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File: 9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier: rnV4dmgukXsdawSDMFzCQGkcEufAM95VLyuaPLxhCEE=
Subject key identifier: E9:69:7D:B8:C2:AB:8A:70:41:FE:18:C6:D9:EF:56:84:F8:F4:E4:72
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 01A1C44298755E5CEA9204F44EBBB4BD028A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number: 1AF0
Signing time: Tue 10 Nov 2026 07:01:00 +0000
Manifest this update: Tue 10 Nov 2026 07:01:00 +0000
Manifest next update: Wed 11 Nov 2026 07:01:00 +0000
Files and hashes: 1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: fv/BBXGUPEKI0W+PWe6dYEgHsF1bdwSlKDLi/45/Wwg=)
2: F_LtpihnOZSFHJv85nIVJ4V102M.roa (hash: 8yvnxuLRYXxGLDUJznrlW7WBOZGiJ5tUpgMx642UXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:42:98:75:5e:5c:ea:92:04:f4:4e:bb:b4:bd:02:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: Nov 10 07:01:00 2026 GMT
Not After : Nov 11 07:01:00 2026 GMT
Subject: CN=e9697db8c2ab8a7041fe18c6d9ef5684f8f4e472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:97:50:78:fc:5e:4b:72:77:e5:9e:cd:c4:
46:09:ef:7e:a5:c7:6c:2a:0b:43:ec:96:21:1c:1c:
b9:db:5b:6d:10:22:db:bd:d9:e3:4a:da:bc:f6:e1:
fa:8e:de:a5:b8:4e:ac:22:4b:64:3a:8d:ff:f3:c5:
07:82:04:13:8a:63:0e:92:8c:ff:67:e6:39:2f:7c:
f2:14:98:5d:f2:88:4b:b8:ad:23:4c:20:f3:bc:62:
b4:2c:a8:7b:68:57:ef:c9:79:34:2e:0a:5d:1a:3d:
ad:88:b4:bf:c1:63:8e:68:06:75:c3:4e:3c:bd:4d:
37:58:aa:f4:ab:75:24:8e:b8:b4:8d:6a:d5:3d:57:
e7:23:c5:43:e3:c2:5f:b0:95:2e:db:44:7e:75:c3:
19:11:50:ce:32:08:f0:b9:f6:ee:52:be:0e:d8:d6:
a6:61:8c:ef:71:d1:e2:c3:81:cb:a8:e4:a4:dd:f5:
f5:12:6d:a3:d1:33:e1:ac:7e:87:ee:c1:a9:89:4b:
cd:3b:89:2d:7e:31:fd:a8:bd:87:43:cf:f3:99:c6:
50:8a:22:ca:a6:c6:b2:9a:3b:ef:a2:65:13:d8:20:
c9:93:38:e0:a9:c3:76:09:a8:36:4b:bb:db:1d:b8:
21:5f:5f:f0:3b:4a:35:c3:6a:59:43:91:5d:54:68:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:69:7D:B8:C2:AB:8A:70:41:FE:18:C6:D9:EF:56:84:F8:F4:E4:72
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7d:95:d1:02:cb:c9:84:33:1a:c0:a7:fe:b4:61:39:0f:e1:
3a:47:93:20:16:01:e9:c2:0a:c1:e5:92:7c:e7:fe:bf:af:77:
26:fa:87:fb:f3:44:42:d9:43:56:65:e9:4d:0d:86:d1:9c:d4:
c5:10:3d:7a:d2:27:83:a1:47:c6:04:56:07:6c:e8:c0:e6:8e:
b4:1d:86:47:5f:49:cf:9e:8c:72:ab:e4:25:b1:18:e6:75:0a:
58:a3:9d:77:81:64:51:87:bf:46:dc:1e:44:cf:78:bc:d1:6c:
1b:6c:aa:92:25:18:39:1b:cd:64:1e:e6:b6:fb:88:b0:57:36:
f1:bd:1d:45:a3:0a:2b:32:d6:eb:7a:e0:5e:35:0b:5f:03:ce:
a8:6d:e2:25:35:aa:4c:45:d7:c2:91:d1:55:4e:20:ea:8e:9f:
c9:74:33:fd:6d:fe:49:2b:6e:27:b0:9b:b3:64:5a:39:28:2e:
6d:68:d9:e7:4d:a6:9f:a2:e5:4d:f2:57:52:a5:ba:fb:93:0d:
0e:e6:5a:27:e8:81:58:f0:67:3d:f9:56:ac:a4:bd:c5:22:1b:
1d:9d:28:4d:b2:01:a8:c9:6a:f0:d9:31:48:85:1c:12:8b:ba:
15:ee:6a:64:95:28:9e:f6:75:37:64:e3:a4:2a:50:b6:56:db:
b6:51:63:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHEQph1XlzqkgT0Tru0vQKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTA5MmFmZmFmOWI1NDg0ZTAwOTk5YWE3ZjFjZWYxYWM3
YjQwOTMwHhcNMjYxMTEwMDcwMTAwWhcNMjYxMTExMDcwMTAwWjAzMTEwLwYDVQQD
EyhlOTY5N2RiOGMyYWI4YTcwNDFmZTE4YzZkOWVmNTY4NGY4ZjRlNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4deXUHj8Xktyd+WezcRGCe9+pcds
KgtD7JYhHBy521ttECLbvdnjStq89uH6jt6luE6sIktkOo3/88UHggQTimMOkoz/
Z+Y5L3zyFJhd8ohLuK0jTCDzvGK0LKh7aFfvyXk0LgpdGj2tiLS/wWOOaAZ1w048
vU03WKr0q3Ukjri0jWrVPVfnI8VD48JfsJUu20R+dcMZEVDOMgjwufbuUr4O2Nam
YYzvcdHiw4HLqOSk3fX1Em2j0TPhrH6H7sGpiUvNO4ktfjH9qL2HQ8/zmcZQiiLK
psaymjvvomUT2CDJkzjgqcN2Cag2S7vbHbghX1/wO0o1w2pZQ5FdVGgwtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlpfbjCq4pwQf4YxtnvVoT49ORyMB8GA1UdIwQY
MBaAFPfgkq/6+bVITgCZmqfxzvGse0CTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lYzkwOTItMWJjMi00YWFkLWFkM2Et
MTBmZjllZTJhOGMyLzEvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lYzkwOTItMWJjMi00YWFkLWFkM2EtMTBmZjllZTJhOGMy
LzEvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhH2V0QLL
yYQzGsCn/rRhOQ/hOkeTIBYB6cIKweWSfOf+v693JvqH+/NEQtlDVmXpTQ2G0ZzU
xRA9etIng6FHxgRWB2zowOaOtB2GR19Jz56McqvkJbEY5nUKWKOdd4FkUYe/Rtwe
RM94vNFsG2yqkiUYORvNZB7mtvuIsFc28b0dRaMKKzLW63rgXjULXwPOqG3iJTWq
TEXXwpHRVU4g6o6fyXQz/W3+SStuJ7Cbs2RaOSgubWjZ502mn6LlTfJXUqW6+5MN
DuZaJ+iBWPBnPflWrKS9xSIbHZ0oTbIBqMlq8NkxSIUcEou6Fe5qZJUonvZ1N2Tj
pCpQtlbbtlFjZQ==
-----END CERTIFICATE-----
Generated at Tue Nov 10 14:43:54 2026 by rpki-client