Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier: iFuBqqsc2Iuv37ZRTjqcrrzWC0SjA7ICrxpR7rbuhTI=
Subject key identifier: 94:F0:77:A3:00:D7:D4:62:E7:BF:20:0A:FE:37:B8:95:AE:B7:98:6C
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial: 01A0C9D8E12929CE00D3408C42B6C4C08342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number: 0D95
Signing time: Tue 22 Sep 2026 16:00:28 +0000
Manifest this update: Tue 22 Sep 2026 16:00:28 +0000
Manifest next update: Wed 23 Sep 2026 16:00:28 +0000
Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: 5u0eBTMrezOC3d+F/R6voAXMivRDO6k+OaTRViTp2fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:e1:29:29:ce:00:d3:40:8c:42:b6:c4:c0:83:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Validity
Not Before: Sep 22 16:00:28 2026 GMT
Not After : Sep 23 16:00:28 2026 GMT
Subject: CN=94f077a300d7d462e7bf200afe37b895aeb7986c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:28:2e:2a:57:0d:91:c9:f3:85:38:ca:c5:63:
b4:07:9b:fb:69:40:e4:78:ef:1e:92:ee:09:bb:55:
7d:79:69:8d:32:1b:21:7b:04:d3:33:68:0a:5c:e4:
2e:45:b0:a5:a3:0c:b5:1a:36:73:62:8b:6a:32:c1:
1e:58:67:d7:3c:1a:df:16:35:91:e8:7c:40:86:6a:
db:48:7a:16:a7:ce:da:df:43:c1:b9:84:f7:e0:f2:
5e:53:eb:07:83:bd:44:0c:4e:a1:3c:d1:89:6d:68:
22:d7:18:a0:b2:ac:7d:f5:52:61:d0:b2:82:85:fd:
67:fa:88:88:c9:fd:16:54:ba:e2:23:83:d6:b1:22:
1b:78:bf:ec:e8:b4:8f:82:1a:d8:8f:58:e6:26:48:
00:25:7f:68:18:9c:4a:b1:1c:34:46:14:61:7f:45:
e1:de:20:58:e3:8a:88:cf:fb:18:48:81:fd:e6:09:
b6:bb:cc:79:6d:6a:5d:af:52:2b:aa:ff:3a:17:91:
d9:9b:1b:87:9f:14:f8:01:4a:a4:73:79:36:24:1f:
0d:c1:00:6d:64:a4:22:86:74:1e:df:c3:97:e1:ee:
1f:21:39:17:34:ac:3f:60:f4:af:f9:fc:a0:f2:0b:
42:51:fc:04:0c:78:9a:73:fe:cd:80:7d:e9:db:9d:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F0:77:A3:00:D7:D4:62:E7:BF:20:0A:FE:37:B8:95:AE:B7:98:6C
X509v3 Authority Key Identifier:
keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8d:37:26:8c:f6:7c:bc:0e:7e:e3:cf:aa:41:6f:3e:25:ca:
44:a7:9a:da:36:46:04:8c:07:74:9e:71:b3:d6:17:5c:15:a3:
cf:cc:81:e9:33:75:b9:ab:8e:10:54:59:38:0a:5b:68:b5:2d:
a1:c6:9b:fb:06:40:56:69:6d:83:a9:2d:e6:cb:ce:16:20:b9:
63:99:1a:76:ff:8a:5c:c4:d6:0a:1f:23:63:0d:58:db:51:df:
7e:31:d0:a9:ee:58:16:d8:12:23:ee:33:e6:18:12:e7:7c:fb:
32:45:78:da:e1:66:58:08:99:d5:e5:97:65:b1:86:87:57:17:
56:dc:3c:da:61:b9:3e:4c:c4:a8:8a:c3:bf:49:5f:57:52:c5:
ed:cb:94:fb:d9:d4:b3:58:c4:c7:4f:77:74:6a:0e:2c:e4:48:
4c:fd:cc:4b:86:d5:fe:3a:5d:08:1e:d1:81:b6:44:aa:05:3e:
92:56:ea:24:64:44:23:8b:41:12:7b:69:79:a3:9e:ee:63:77:
73:e4:d3:11:2f:11:87:7d:d3:25:ab:b4:f9:2f:f3:1c:71:6a:
14:d0:ec:1c:03:0b:1d:03:ce:83:62:05:ac:22:7d:1e:8c:57:
d6:48:7a:65:d0:15:a1:44:bf:fa:63:d9:3b:5c:a2:28:e4:00:
ea:9c:fb:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2OEpKc4A00CMQrbEwINCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjhjMjJiMDI1MDI3NWZhNmViNzM0YmEwMGU3OTBmN2Uz
N2E1NTAwHhcNMjYwOTIyMTYwMDI4WhcNMjYwOTIzMTYwMDI4WjAzMTEwLwYDVQQD
Eyg5NGYwNzdhMzAwZDdkNDYyZTdiZjIwMGFmZTM3Yjg5NWFlYjc5ODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SguKlcNkcnzhTjKxWO0B5v7aUDk
eO8eku4Ju1V9eWmNMhshewTTM2gKXOQuRbClowy1GjZzYotqMsEeWGfXPBrfFjWR
6HxAhmrbSHoWp87a30PBuYT34PJeU+sHg71EDE6hPNGJbWgi1xigsqx99VJh0LKC
hf1n+oiIyf0WVLriI4PWsSIbeL/s6LSPghrYj1jmJkgAJX9oGJxKsRw0RhRhf0Xh
3iBY44qIz/sYSIH95gm2u8x5bWpdr1Irqv86F5HZmxuHnxT4AUqkc3k2JB8NwQBt
ZKQihnQe38OX4e4fITkXNKw/YPSv+fyg8gtCUfwEDHiac/7NgH3p250QrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTwd6MA19Ri578gCv43uJWut5hsMB8GA1UdIwQY
MBaAFPcowisCUCdfputzS6AOeQ9+N6VQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYt
MDZmNjRlYjAwNTY2LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYtMDZmNjRlYjAwNTY2
LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGo03Joz2
fLwOfuPPqkFvPiXKRKea2jZGBIwHdJ5xs9YXXBWjz8yB6TN1uauOEFRZOApbaLUt
ocab+wZAVmltg6kt5svOFiC5Y5kadv+KXMTWCh8jYw1Y21HffjHQqe5YFtgSI+4z
5hgS53z7MkV42uFmWAiZ1eWXZbGGh1cXVtw82mG5PkzEqIrDv0lfV1LF7cuU+9nU
s1jEx093dGoOLORITP3MS4bV/jpdCB7RgbZEqgU+klbqJGREI4tBEntpeaOe7mN3
c+TTES8Rh33TJau0+S/zHHFqFNDsHAMLHQPOg2IFrCJ9HoxX1kh6ZdAVoUS/+mPZ
O1yiKOQA6pz7bQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:42:13 2026 by rpki-client