
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: OduE+vTZ5I4IF748VMXnNqmg9usgoz2OFCToxvtssrs=
Subject key identifier: 4D:50:F9:5D:C7:24:EE:34:F0:E0:D6:9C:21:EA:4B:30:21:77:87:F3
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 01A139DB87A697C405C230F7B486C10E07AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 1A9E
Signing time: Wed 14 Oct 2026 10:00:50 +0000
Manifest this update: Wed 14 Oct 2026 10:00:50 +0000
Manifest next update: Thu 15 Oct 2026 10:00:50 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: Hw30vKkNtHUER6AAxA9xT4FaWpDnIZJW9PJOa9o7EaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:db:87:a6:97:c4:05:c2:30:f7:b4:86:c1:0e:07:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Oct 14 10:00:50 2026 GMT
Not After : Oct 15 10:00:50 2026 GMT
Subject: CN=4d50f95dc724ee34f0e0d69c21ea4b30217787f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:36:9d:07:3c:93:91:52:9d:16:ed:4e:44:
be:ea:8a:a8:66:4b:2f:92:a0:61:2d:74:7a:11:2b:
3c:14:25:61:99:67:de:42:25:f1:4e:df:ed:d7:9f:
2e:d9:fd:4e:d0:53:bc:3a:3d:05:39:fb:c9:07:d4:
6c:f6:21:18:bc:77:86:24:a8:79:ea:f9:7f:f6:df:
b7:2b:72:f0:dc:c6:2d:1e:3f:59:4f:d5:c3:fa:89:
38:7e:eb:7f:04:a0:47:86:ab:ea:94:00:d7:dc:35:
80:56:66:1f:35:92:91:79:f0:96:d4:fc:84:7c:3a:
17:8a:ac:6d:56:88:22:95:a5:eb:5a:77:04:d9:96:
74:b6:09:54:e8:a4:7c:9e:82:a3:f9:3f:84:37:59:
ac:43:a4:34:56:ae:49:f3:e6:22:6b:bf:a4:c0:71:
43:20:ce:41:7f:5d:14:d2:5d:69:3f:ce:5d:13:98:
12:fa:80:b2:f6:63:a9:ce:df:8c:e3:53:fc:8c:40:
47:72:98:92:a8:a9:e8:7f:f1:a3:04:3e:19:43:0c:
0b:1e:d8:68:9c:36:ba:27:29:39:b2:bb:3c:99:f7:
08:5e:ed:21:78:47:03:0e:8d:c4:a3:34:99:9a:64:
4b:1c:dd:a0:a1:a6:be:bd:ca:77:31:bb:93:23:5f:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:50:F9:5D:C7:24:EE:34:F0:E0:D6:9C:21:EA:4B:30:21:77:87:F3
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:11:fa:bb:bd:d8:72:76:62:e9:d1:5c:08:f3:c6:2c:98:1f:
3a:f9:89:5a:ce:8f:92:65:3b:06:68:06:02:c5:8c:76:c5:36:
59:66:b2:8c:90:6a:83:a6:84:61:c9:0c:12:e5:3e:dd:e9:19:
24:69:57:a0:4f:b3:8c:ec:5d:a6:e0:50:1b:5e:15:67:3a:fc:
ab:58:2d:99:ee:fc:0e:12:8b:92:d2:1a:95:89:57:c8:4f:03:
a3:63:a2:be:74:b8:41:b1:1e:8d:42:e8:ca:bf:b0:18:4f:6a:
7d:e3:2e:01:12:6d:2b:66:ed:7a:2d:44:82:15:8e:aa:7a:be:
72:d1:6c:16:7d:0e:53:e9:85:e8:e6:cd:de:2d:62:c0:61:64:
ff:92:a2:43:25:0a:10:93:5e:71:5e:08:b6:78:97:4d:83:01:
f9:f4:b9:ca:a1:b7:a6:0f:24:0a:2f:22:b8:b2:fa:65:ea:96:
70:79:88:dd:8f:28:9c:02:3f:d8:1e:69:a6:a2:17:83:76:7b:
60:b1:c2:ff:b2:1d:ef:51:86:bb:20:2c:4e:96:72:ed:42:a0:
b0:71:9a:4c:83:ae:db:9e:f9:e5:b6:ad:28:8c:3f:27:d2:34:
c7:38:6b:28:c5:98:50:dd:d1:a7:88:e7:5a:1b:c3:6b:92:6f:
6a:85:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:32:22 2026 by rpki-client