Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: 9GJn2xlJcWMdmHlCcDKgDZSZvtaWGdIUWBx1aTDGz6k=
Subject key identifier: AA:E6:60:F0:D7:AA:CB:E0:92:AD:43:4C:F1:EF:71:DA:EC:A3:53:A8
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 01A0C4B2419067EBF382FF07575B3706CFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 16:00:11 +0000
Manifest this update: Mon 21 Sep 2026 16:00:11 +0000
Manifest next update: Tue 22 Sep 2026 16:00:11 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: qvbQ9bojaxnrHB7oyCzNUKDRkqJqqQpJEZnbUYtRx9E=)
2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:41:90:67:eb:f3:82:ff:07:57:5b:37:06:cf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Sep 21 16:00:11 2026 GMT
Not After : Sep 22 16:00:11 2026 GMT
Subject: CN=aae660f0d7aacbe092ad434cf1ef71daeca353a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:04:b3:b9:e3:43:ca:2c:33:f4:76:90:c1:
9c:60:90:e0:6d:b8:fb:7c:c8:c5:dd:6b:85:83:82:
75:40:2e:bf:7b:66:36:25:f5:cb:cf:44:ad:2f:30:
e1:5d:3f:d8:f6:37:32:f3:10:8c:f8:78:20:e0:21:
a8:96:18:ad:5b:82:f8:6b:74:f8:7c:b1:8b:63:e9:
fe:cf:96:4b:f8:b5:72:67:54:11:9b:3e:ba:4c:ce:
05:29:9a:6e:ec:7f:35:bd:38:55:a7:60:d6:85:32:
f2:93:14:82:d2:5e:eb:f8:ba:36:89:9a:3a:1e:a2:
24:6f:74:61:e1:d1:00:ce:b2:a3:9f:03:5d:1d:ac:
26:57:46:22:ed:08:24:0f:0b:d5:44:09:b8:ea:ae:
2b:91:1f:c9:56:95:e2:dd:5e:46:e1:9a:51:04:be:
c6:a0:2e:ee:69:2e:fa:40:f5:c6:bc:41:b3:a5:5e:
28:af:57:f3:f9:59:53:ce:72:1d:ca:e1:e6:40:a5:
27:62:2e:80:43:4e:61:97:eb:22:c6:be:04:cb:30:
f9:1a:9e:b2:84:a3:13:e3:62:6a:49:97:ad:7a:a8:
44:89:15:93:bd:09:b2:c2:f0:aa:33:f8:52:d0:99:
ab:ce:d1:d2:97:1d:7f:ca:45:64:41:74:3a:07:2b:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E6:60:F0:D7:AA:CB:E0:92:AD:43:4C:F1:EF:71:DA:EC:A3:53:A8
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f3:23:29:27:21:51:75:b0:e4:b5:cc:d0:28:b1:ba:33:e3:
45:a2:b3:e4:0c:35:71:52:26:a4:e4:11:d2:59:b5:8c:36:d1:
56:86:68:d5:95:d9:f8:63:4b:57:8a:31:73:07:19:39:fd:5b:
d9:91:2b:a4:10:84:98:a9:19:3c:f1:87:26:7d:59:25:af:5a:
60:2f:29:6e:37:c6:93:ce:8d:64:cc:22:bd:10:85:4d:5e:4e:
4e:b0:3a:26:d6:8d:4f:5d:b9:80:59:bd:3b:74:70:b6:6e:a4:
6b:76:e1:ca:95:21:ac:29:79:30:bc:6d:aa:b2:00:46:9d:4e:
13:16:15:a4:91:ab:c8:66:98:ab:58:0d:9e:46:ae:c3:9f:7d:
7d:2e:38:bf:ca:8c:f8:f5:33:9b:a5:8a:fe:81:69:02:b2:ca:
c6:fe:49:da:c5:21:ee:bb:f5:a8:3c:4d:72:3b:de:dc:5a:db:
83:a8:4d:5f:66:f6:94:88:75:df:69:29:9c:56:46:f2:27:92:
d8:b4:e7:c7:d6:6a:3a:40:fe:2a:8b:cc:92:70:cd:f7:18:6d:
8f:f3:a6:e0:4d:37:ea:b2:93:69:09:19:0d:e9:7f:3e:e8:d0:
8a:e7:8b:57:1f:61:de:f9:28:10:06:89:f4:85:fa:ec:07:90:
20:4a:d7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:33 2026 by rpki-client