
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier: YRrxdAPcG6ZIJj1a2vJBFx9R0IJGtbh8K2xS5wD3bZQ=
Subject key identifier: 95:AE:8B:B5:C6:2D:AE:7F:C1:8E:52:BA:5A:A4:06:E6:88:3F:49:05
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial: 01A0C4E9AC2760C7EF9C1205C49D4C9B9E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number: 0F48
Signing time: Mon 21 Sep 2026 17:00:43 +0000
Manifest this update: Mon 21 Sep 2026 17:00:43 +0000
Manifest next update: Tue 22 Sep 2026 17:00:43 +0000
Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: m9mFxc6ltVQ6TIlS/LDWiZga+97EXX09rwP+KWg82IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:ac:27:60:c7:ef:9c:12:05:c4:9d:4c:9b:9e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Validity
Not Before: Sep 21 17:00:43 2026 GMT
Not After : Sep 22 17:00:43 2026 GMT
Subject: CN=95ae8bb5c62dae7fc18e52ba5aa406e6883f4905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:cc:48:2b:40:f4:55:75:3c:55:41:98:51:
c3:59:80:62:a0:05:ae:41:fe:11:96:eb:40:81:69:
1c:79:67:d6:50:7e:2d:38:11:aa:ff:00:18:fa:c1:
6d:47:d0:76:5a:fd:89:21:16:a4:01:f4:9d:06:14:
6f:93:f5:70:44:07:c4:a2:02:2f:13:d2:a5:67:1a:
ce:41:cb:b7:76:54:d0:00:9c:90:bd:ca:44:f8:f4:
0a:f0:36:a1:43:55:85:d5:b3:be:71:0a:76:a9:bc:
a2:29:4f:83:b5:8c:42:4a:7d:10:27:12:18:0b:19:
55:53:12:ab:2d:9e:dc:87:2a:81:81:e2:da:02:7e:
c0:ab:39:e0:b8:67:34:2d:59:52:47:a1:4a:da:9b:
71:f1:26:7f:83:3b:07:e7:f0:13:44:34:93:e5:46:
94:16:91:d4:7a:37:d0:b6:ca:a6:4e:6d:e6:51:cd:
68:59:6d:85:21:45:98:3d:8a:87:30:b2:92:3a:79:
0d:51:39:51:6b:19:9b:8a:8b:0d:83:81:05:b5:d6:
c0:34:fe:f0:05:37:67:1d:e7:27:ad:3d:c3:c8:c6:
47:8b:4e:cc:98:b4:10:07:35:4a:67:60:04:16:9c:
dc:e9:06:d0:35:78:1b:11:a7:bc:01:c7:f9:4e:6d:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AE:8B:B5:C6:2D:AE:7F:C1:8E:52:BA:5A:A4:06:E6:88:3F:49:05
X509v3 Authority Key Identifier:
keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9c:18:29:a3:1a:f4:0b:65:ec:3b:76:77:11:e2:e1:7d:a2:
cb:bd:c2:9e:bd:97:28:1f:2d:1f:8d:a8:6f:df:c4:7a:40:84:
cb:fa:ae:b6:c0:8a:76:ea:11:34:db:3e:9d:31:92:00:6c:83:
38:01:58:d0:a0:6f:a2:d1:06:10:df:a8:37:da:29:90:7c:8e:
93:87:c0:da:32:5f:bb:fb:92:13:c1:bb:e7:6c:49:e2:f6:67:
17:59:43:9b:48:c9:eb:89:e9:11:f3:ed:df:6f:ff:a3:2d:70:
fc:0f:7d:83:97:ac:96:c1:fc:47:99:5d:dc:77:27:b4:e2:65:
71:d1:83:33:3f:13:43:7b:44:5a:72:db:cb:b9:9d:04:0a:a4:
6c:e6:e6:55:5d:2f:bd:9d:3b:77:eb:8c:e6:e7:04:d1:6e:50:
38:49:44:2b:a9:55:a1:94:a0:d6:a0:db:2c:ee:0c:5a:36:93:
19:c3:3e:11:e8:06:74:aa:85:74:aa:ad:5c:e4:8b:ff:16:af:
ed:96:e3:e1:7b:8b:65:67:fa:0f:66:fd:35:1d:fd:d3:29:68:
2f:eb:5e:c2:6b:09:f8:20:07:7d:ba:07:6a:ac:8a:03:61:32:
67:00:2a:e9:04:25:f3:31:a1:21:1b:3d:37:3e:15:49:ea:08:
ea:40:df:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDE6awnYMfvnBIFxJ1Mm55fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjE1M2M1MGI4ODE1YmQyOGRmYmIwMGUyM2U2ZjI2MzIw
MzE3MmUwHhcNMjYwOTIxMTcwMDQzWhcNMjYwOTIyMTcwMDQzWjAzMTEwLwYDVQQD
Eyg5NWFlOGJiNWM2MmRhZTdmYzE4ZTUyYmE1YWE0MDZlNjg4M2Y0OTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSTMSCtA9FV1PFVBmFHDWYBioAWu
Qf4RlutAgWkceWfWUH4tOBGq/wAY+sFtR9B2Wv2JIRakAfSdBhRvk/VwRAfEogIv
E9KlZxrOQcu3dlTQAJyQvcpE+PQK8DahQ1WF1bO+cQp2qbyiKU+DtYxCSn0QJxIY
CxlVUxKrLZ7chyqBgeLaAn7AqznguGc0LVlSR6FK2ptx8SZ/gzsH5/ATRDST5UaU
FpHUejfQtsqmTm3mUc1oWW2FIUWYPYqHMLKSOnkNUTlRaxmbiosNg4EFtdbANP7w
BTdnHecnrT3DyMZHi07MmLQQBzVKZ2AEFpzc6QbQNXgbEae8Acf5Tm22KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWui7XGLa5/wY5SulqkBuaIP0kFMB8GA1UdIwQY
MBaAFPVhU8ULiBW9KN+7AOI+byYyAxcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdGVHhRdUlGYjBvMzdzQTRqNXZKaklERnk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDZhY2EtMzc3Zi00ZmU5LWIyN2Ut
OGM3MjYyOTFkODZjLzEvOVdGVHhRdUlGYjBvMzdzQTRqNXZKaklERnk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82MDZhY2EtMzc3Zi00ZmU5LWIyN2UtOGM3MjYyOTFkODZj
LzEvOVdGVHhRdUlGYjBvMzdzQTRqNXZKaklERnk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJwYKaMa
9Atl7Dt2dxHi4X2iy73Cnr2XKB8tH42ob9/EekCEy/qutsCKduoRNNs+nTGSAGyD
OAFY0KBvotEGEN+oN9opkHyOk4fA2jJfu/uSE8G752xJ4vZnF1lDm0jJ64npEfPt
32//oy1w/A99g5eslsH8R5ld3HcntOJlcdGDMz8TQ3tEWnLby7mdBAqkbObmVV0v
vZ07d+uM5ucE0W5QOElEK6lVoZSg1qDbLO4MWjaTGcM+EegGdKqFdKqtXOSL/xav
7Zbj4XuLZWf6D2b9NR390yloL+tewmsJ+CAHfboHaqyKA2EyZwAq6QQl8zGhIRs9
Nz4VSeoI6kDfLA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:38:58 2026 by rpki-client