
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: fvCg+Pm05T57zGDHV1Oeh7SUusnm2IAP8ybwFCUXGdU=
Subject key identifier: CA:56:4F:17:2F:11:9D:14:DF:A9:CD:BE:EB:3A:00:26:B1:B3:CB:90
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 01A0C40DA0D0328D60C6CAD2E77277403248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 102E
Signing time: Mon 21 Sep 2026 13:00:22 +0000
Manifest this update: Mon 21 Sep 2026 13:00:22 +0000
Manifest next update: Tue 22 Sep 2026 13:00:22 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: HmEQeTWa7w8NBvyta0IPoVFa0sURn5fxA3WQ2v/g600=)
2: I3Cwe_JfIHDw-5FguYkJbkBPot8.roa (hash: NhXNbLKSK6Zii6NTvjleq3atjNt9Qq9hOl62FzoteKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:a0:d0:32:8d:60:c6:ca:d2:e7:72:77:40:32:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Sep 21 13:00:22 2026 GMT
Not After : Sep 22 13:00:22 2026 GMT
Subject: CN=ca564f172f119d14dfa9cdbeeb3a0026b1b3cb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:16:c9:f9:85:3c:15:cb:b1:a4:03:47:46:8c:
21:88:7f:fd:4e:37:e7:04:5d:a2:28:6a:c3:7b:ec:
13:a0:93:c6:73:93:24:16:6b:a1:88:f4:93:59:5e:
5b:11:2d:7b:8f:3b:46:40:0e:5a:ac:0e:e0:2f:07:
99:ed:ce:16:0b:5d:32:5b:89:ed:6d:4e:b5:21:a8:
be:c4:10:1d:02:72:2d:a1:4b:5d:2e:8e:56:ab:52:
6e:d8:4e:8c:38:e2:c5:de:90:81:35:db:de:d5:fb:
65:8b:bf:2e:98:a9:81:b3:7e:fb:34:2c:ac:f4:7f:
b8:9f:2b:6f:8c:b9:c0:1d:19:d2:da:62:e5:ba:2e:
b9:b3:2e:f9:07:a2:f2:7b:94:ff:a5:38:be:20:40:
23:f7:b9:e3:22:c2:33:e0:41:66:31:28:c9:a5:6e:
55:d2:a1:e6:bc:d3:58:00:d7:1e:b9:44:8d:35:9f:
be:85:3a:01:a1:1d:50:86:f7:bd:b3:15:79:c8:c7:
f4:ef:19:ef:ce:ee:bc:bd:a7:77:ac:82:03:cf:15:
65:03:da:fb:f9:2e:83:c1:56:f7:dc:1f:9d:ca:52:
9b:0f:f5:b8:6f:ae:0d:75:00:5f:0e:d3:f5:30:b6:
2a:f2:13:ae:1e:0d:37:bd:4e:79:d6:f2:7a:2c:ad:
ff:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:4F:17:2F:11:9D:14:DF:A9:CD:BE:EB:3A:00:26:B1:B3:CB:90
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:98:68:fa:13:90:ad:46:55:a8:01:7a:c0:35:6f:d0:a8:5c:
af:08:c1:0e:e0:38:1b:49:81:3a:6c:37:5c:be:cf:9a:55:95:
13:d3:34:3b:01:8d:8e:6e:73:11:17:60:4b:97:c7:a7:38:2d:
76:fb:6e:2d:cb:6a:29:aa:29:69:c6:5a:f1:50:17:e3:dc:d0:
a2:37:10:02:ed:92:c3:c6:a0:e9:e7:b1:00:25:f9:0d:dd:6f:
b8:2c:9d:4d:3a:2a:81:3a:aa:13:5f:67:ad:88:9c:61:c5:d9:
e5:54:89:82:4f:2c:c8:7d:25:cb:74:08:7c:d8:39:f6:27:e1:
8c:b3:38:1e:0b:44:d9:ee:dc:bc:36:c9:c0:1c:08:40:da:34:
ec:d3:bb:88:5a:3a:18:18:91:94:8e:15:78:e1:f4:80:ed:58:
6e:54:f3:11:58:2d:65:d0:79:9d:16:88:98:38:c6:b5:09:ba:
28:58:03:0b:b8:bf:41:57:02:ea:ae:cb:29:f9:e0:d1:3f:c6:
0f:8e:f7:df:79:e6:59:a8:43:4d:65:11:79:bc:5e:f5:00:0c:
1c:d8:25:28:ba:29:4d:11:1d:23:dd:11:a1:23:33:70:4d:a0:
27:93:04:35:88:03:be:f3:97:b5:b0:ff:58:c4:a1:21:47:f6:
11:7a:01:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:42:50 2026 by rpki-client