Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
File: 9mKtW4G4BxPe0-__RCmfzXZfKrE.mft (raw, json)
Hash identifier: lF+/6CAuTchjGsscY5X1tQKmECSrgYRWA8hr8fAtKGU=
Subject key identifier: 1E:51:76:44:99:71:A4:CC:F5:9A:FE:EF:10:79:DD:F1:55:97:0C:40
Authority key identifier: F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1
Certificate issuer: /CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
Certificate serial: 01A0C1B1C445EA6787CA4D847C49B2D9E816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
Manifest number: 03D7
Signing time: Mon 21 Sep 2026 02:00:47 +0000
Manifest this update: Mon 21 Sep 2026 02:00:47 +0000
Manifest next update: Tue 22 Sep 2026 02:00:47 +0000
Files and hashes: 1: 9mKtW4G4BxPe0-__RCmfzXZfKrE.crl (hash: nihfsLYTJcpxjeWzzuctD4mnLC6EVgD34gjP/xno7ks=)
2: RAl96iixqVEN2XfpcyNK_lqQaRw.asa (hash: ivoc/WPTnR4RpjpcihO6ZdK0F36q3tm5FbTsxWrkrRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:c4:45:ea:67:87:ca:4d:84:7c:49:b2:d9:e8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
Validity
Not Before: Sep 21 02:00:47 2026 GMT
Not After : Sep 22 02:00:47 2026 GMT
Subject: CN=1e5176449971a4ccf59afeef1079ddf155970c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:ea:bd:94:07:6d:9f:76:5e:eb:22:a6:03:
17:b9:c3:8b:b2:d6:7d:b6:7a:19:a8:48:a5:34:66:
f9:e3:f8:2a:0b:b8:0f:fa:31:38:0d:e6:8e:54:ee:
b7:d4:04:8c:b6:25:12:ef:0f:1c:4a:a6:40:bd:93:
32:66:03:d3:7e:5e:6e:81:08:3b:82:d1:1e:34:0e:
c1:a5:d9:11:fd:49:30:f7:7c:72:82:3a:a5:c9:47:
b8:db:79:92:b7:bd:e0:76:4d:20:38:09:40:9e:12:
c8:2c:4f:54:83:10:5d:bb:f9:56:cc:2a:fa:2c:1b:
6a:32:8d:fe:2d:9b:c7:1b:84:d8:c9:0c:27:47:4b:
04:16:ab:4a:15:b4:11:2f:7d:cf:66:6c:31:08:fb:
e7:ff:29:c8:58:63:25:97:50:0e:7d:b0:de:bd:ae:
37:2c:c9:c4:57:95:ac:73:8d:69:f8:74:4b:50:07:
33:ba:1d:66:f2:7e:03:33:2b:58:6a:ec:d8:ee:5e:
e7:b1:88:09:b7:8e:b2:09:e9:fb:22:b8:a1:ac:bd:
8d:7c:33:8e:74:b1:40:4c:79:a0:f6:fe:fa:6d:d7:
10:54:c6:7e:6b:9f:7b:c6:96:7c:e9:58:8b:d8:dc:
85:b6:e0:db:a3:be:8a:7e:39:f7:a4:6d:9d:17:4c:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:51:76:44:99:71:A4:CC:F5:9A:FE:EF:10:79:DD:F1:55:97:0C:40
X509v3 Authority Key Identifier:
keyid:F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ed:80:e4:e3:3c:69:d9:01:67:88:ce:31:8d:b5:66:c1:97:
91:3f:28:13:7d:a3:f1:cc:b0:db:30:59:e9:a5:61:3e:6d:cf:
40:86:4c:38:89:ac:bd:2c:10:5d:3f:f1:ac:36:35:97:47:f4:
75:ae:24:73:36:4b:94:66:14:59:db:c0:c5:30:4d:15:7a:ac:
5e:0b:e7:5e:37:12:88:b0:89:4b:4e:27:84:94:10:cc:9d:17:
e4:39:e7:ae:2d:80:d8:f5:ae:e1:1f:a9:43:06:26:af:91:4a:
21:d7:34:44:44:f9:65:1f:03:7c:72:6c:72:25:1f:63:83:a3:
c9:52:16:74:c7:ad:ba:51:f9:2d:3c:a7:19:c7:4f:5c:2f:ec:
c1:9e:ed:07:dd:35:79:f7:c6:c1:68:4e:c8:84:02:45:f1:ff:
d2:7b:e1:94:e9:d5:7f:34:01:53:a7:97:c2:be:03:75:87:9a:
6a:0b:8a:66:9e:6c:82:11:34:9b:2d:5d:46:35:d4:93:bf:16:
0f:0d:b8:48:a6:6f:5e:51:59:4e:98:7b:c7:f8:fc:25:48:a2:
87:38:dc:17:49:70:49:34:c5:8f:a3:c3:7f:00:77:26:31:b9:
1a:6a:9c:e6:42:cf:37:68:0b:88:78:a0:53:0c:56:36:b6:db:
7d:f3:f2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:00:10 2026 by rpki-client