Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: iyFP/TjaaDmAL7z8241LEIw7qtSNdBO4H+H4fzFbVTA=
Subject key identifier: 89:CC:4D:68:DE:F8:03:B7:B1:A4:15:1B:B8:B7:BD:3B:A5:ED:39:DC
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 01A0C9D9A31E96732E7F9D1C2E37C901FAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0EC1
Signing time: Tue 22 Sep 2026 16:01:18 +0000
Manifest this update: Tue 22 Sep 2026 16:01:18 +0000
Manifest next update: Wed 23 Sep 2026 16:01:18 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: x1mT4ZbumWkTVJ010uBFMwoH1t7YL+HceOGpB4NxO/g=)
2: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (hash: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:a3:1e:96:73:2e:7f:9d:1c:2e:37:c9:01:fa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Sep 22 16:01:18 2026 GMT
Not After : Sep 23 16:01:18 2026 GMT
Subject: CN=89cc4d68def803b7b1a4151bb8b7bd3ba5ed39dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:cd:e9:39:54:68:e7:4e:d4:d6:66:38:20:
f5:e5:6c:ce:8a:e1:2f:78:17:52:db:c3:dd:fd:4b:
56:41:1e:0b:c3:fe:12:ec:21:25:db:9e:07:fe:97:
39:34:3b:f5:59:58:ad:74:52:81:04:67:19:61:48:
8c:c4:d8:45:ad:8b:37:7e:f5:cd:bb:f5:03:f5:4d:
cc:59:55:a7:ef:bb:e5:72:ad:21:fc:b1:2c:5f:49:
c7:67:98:97:54:45:6c:6c:01:e0:19:4f:4c:f6:96:
1d:75:d9:20:c4:b7:a2:96:57:25:79:53:72:dd:19:
be:9b:ed:19:cb:1f:0d:61:14:8a:50:3e:5d:95:c8:
2b:0a:66:5a:03:e8:7d:37:39:80:f3:18:64:65:06:
e1:bc:ba:af:b2:0c:90:d1:46:19:74:57:e5:6a:fe:
4d:26:9f:4f:47:6c:e8:ef:f9:f6:0f:5a:6d:e2:05:
59:2a:b5:88:0a:60:9d:5b:54:f4:5d:8f:a1:99:6e:
b6:27:a4:65:ad:2e:53:d6:84:7c:7c:96:21:de:13:
00:b3:88:8b:d9:50:89:c9:e0:a0:9d:2c:2b:27:3c:
37:ca:2d:ec:0a:64:66:d2:db:08:e7:94:e7:3f:b2:
b1:c8:ff:fd:44:a7:2a:ca:fe:95:44:67:01:e5:44:
cb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CC:4D:68:DE:F8:03:B7:B1:A4:15:1B:B8:B7:BD:3B:A5:ED:39:DC
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2f:bb:45:9e:ac:32:65:9e:b5:05:e5:73:74:f6:65:e3:38:
57:59:0a:02:9a:67:e6:a7:00:c8:97:e6:67:c2:89:ea:ca:67:
22:d0:42:58:e1:45:a9:87:39:81:03:0a:53:92:86:cc:f1:5b:
44:3c:c6:51:a5:0a:dd:26:c8:88:e6:35:62:18:18:77:5f:88:
98:41:c5:35:62:61:b3:27:2e:5f:98:e9:43:42:3f:79:d7:3e:
39:b1:f5:d3:1b:a5:62:8b:b4:e6:dd:11:69:ce:8a:b4:67:c4:
3f:33:2b:ca:86:5b:37:35:26:b8:3e:66:10:1e:d8:9e:81:e1:
94:53:71:47:40:28:f9:9c:00:56:67:70:dd:87:9e:6c:52:02:
b4:9d:22:64:ca:51:e2:bc:b0:67:e6:d0:e4:9e:d3:be:e3:01:
d2:d8:5a:f2:d7:e3:81:91:19:6b:a9:de:53:d6:d0:e3:7e:f9:
65:5b:29:94:36:b9:3c:56:11:d6:c4:97:c4:f8:54:5d:e4:26:
04:2a:bf:c5:4d:f8:c6:f3:93:c9:6e:88:e8:75:cc:4f:34:fd:
85:dc:48:02:22:9d:1f:f4:23:57:72:0c:6a:d2:b1:4f:17:c5:
24:f6:1c:30:51:d9:b8:ec:e0:cc:37:7b:86:5d:1c:af:e1:72:
7d:f4:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:20:06 2026 by rpki-client