Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: oriqHiOc9RirPoXCOEgTJDlItVgRzU7YoKB4LkIoMGY=
Subject key identifier: 5B:E0:19:54:DE:CA:E1:51:9C:3E:AA:BD:01:27:E4:FD:C7:34:CE:B2
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 01A0C7EACC00E55BF495F6FC24E624D30E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 0829
Signing time: Tue 22 Sep 2026 07:00:48 +0000
Manifest this update: Tue 22 Sep 2026 07:00:48 +0000
Manifest next update: Wed 23 Sep 2026 07:00:48 +0000
Files and hashes: 1: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: YtZ83VUqIXI6s0lsq/L1DhGvqgdypNVGZBWMKG0dkdo=)
2: _tQfUv-ZF8l6ECirIU08-QDKATk.roa (hash: jyN189Yy9sENguau2gQDFaDGR/1qRo4t+nodcN1wD68=)
3: cyWhzyh3zLHJFuzJ5qvmESBkuxg.roa (hash: nSoHpM2xTBolqQJtZsO8W8SsMxuMlo/mxOm1BoRL8ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:cc:00:e5:5b:f4:95:f6:fc:24:e6:24:d3:0e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Sep 22 07:00:48 2026 GMT
Not After : Sep 23 07:00:48 2026 GMT
Subject: CN=5be01954decae1519c3eaabd0127e4fdc734ceb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:18:33:7f:46:93:0a:de:59:e2:d2:66:ec:
00:68:10:72:fc:54:14:15:09:08:5b:0f:41:4c:fe:
f8:e2:a7:3e:10:ca:36:40:67:bc:ca:a9:bf:38:8e:
71:ff:4b:a9:78:80:6e:43:f2:41:df:ee:c0:83:5b:
e0:ec:70:a8:74:80:d5:9e:09:92:78:a1:e1:48:f9:
3f:28:15:95:9d:10:8a:2c:28:07:30:00:59:f5:2b:
c2:2d:d0:f5:7e:bf:f7:7d:70:cc:6b:87:2a:f7:5e:
9c:f5:85:80:53:89:aa:e6:ef:5e:4f:6f:32:d9:4e:
b6:c8:2a:64:09:52:6f:42:6f:38:b5:88:22:ae:52:
3a:89:33:81:8d:30:6a:5e:4f:5b:cc:fa:11:12:48:
8b:a4:f5:59:ae:ed:9c:53:df:a0:51:70:3f:33:98:
d3:94:82:84:0b:65:5c:99:d1:c0:c5:46:3e:9b:23:
42:86:55:32:c1:03:0c:8c:dc:46:77:3b:8f:5d:7e:
fc:e9:18:ee:24:66:ed:5d:72:f9:9f:9c:2b:7a:98:
d9:8f:08:9f:b8:83:cb:ee:c0:88:4a:90:b2:29:c3:
ca:ab:0b:2f:f4:d7:ce:14:da:85:bf:91:4c:32:11:
19:1e:b5:75:62:f7:e3:8d:a1:aa:83:1e:4e:e7:fd:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E0:19:54:DE:CA:E1:51:9C:3E:AA:BD:01:27:E4:FD:C7:34:CE:B2
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fd:06:0b:74:f9:d4:44:10:cf:5e:47:39:0d:f2:10:1d:ca:
87:21:92:00:d7:d3:7f:af:54:d1:7a:f3:cc:a2:7b:e5:08:ca:
13:1f:14:a9:ed:7f:93:88:f5:4f:fe:37:d8:0e:32:a5:05:45:
f4:23:a1:9c:7f:b3:99:90:eb:2f:ac:d3:89:48:53:41:ba:9b:
ff:83:a2:4b:8e:33:f4:23:40:b1:d1:22:4d:0b:c0:f9:9c:8b:
37:c9:cc:f8:2f:76:13:07:b3:f9:49:15:4c:74:53:1e:54:75:
06:1d:9d:fa:d2:ce:bd:1e:02:54:21:ee:41:89:6a:16:df:5f:
c7:dd:70:fb:66:f1:47:61:43:af:65:54:b7:09:74:c1:04:14:
e5:0c:fb:95:81:f1:b0:09:77:6f:10:82:96:5d:83:de:bf:15:
bf:13:26:ea:3e:19:51:1e:92:9f:95:4b:fc:5f:09:b9:9d:c6:
4d:a2:1e:d3:f2:34:1c:a1:de:3c:81:40:f7:a3:ed:23:42:37:
73:0b:10:04:d9:fe:c1:55:81:bb:76:a3:44:95:76:e0:32:b2:
9d:79:6d:46:dc:da:0c:3c:63:c7:e9:d5:71:87:26:fd:9c:9a:
23:86:70:5a:9e:64:33:dd:ce:c4:f1:3c:bb:6e:c3:0a:f1:d5:
bc:37:40:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:58:24 2026 by rpki-client