Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: W3YKSCiit05tqS4EsNZ3Gyo7Nmc4C7VOrf8SBihq+aQ=
Subject key identifier: C0:D9:E2:98:4E:A6:34:25:5D:8C:29:86:E3:50:7E:43:A8:8E:FD:F8
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 01A0C4B24A5A1AAAAEEEA284C1EAD1BA88C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 0ACD
Signing time: Mon 21 Sep 2026 16:00:13 +0000
Manifest this update: Mon 21 Sep 2026 16:00:13 +0000
Manifest next update: Tue 22 Sep 2026 16:00:13 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: VcJJz70+bzRBW8K9STOivElIhPCZzxzRUqDU0Zz1Vwc=)
2: xqAixzHxlN966fRenr5XBiPgZn8.asa (hash: 5Xg49cf9RjMtXD/hwpV8EsDl4tWwJlu6vHXbTMSTy+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:4a:5a:1a:aa:ae:ee:a2:84:c1:ea:d1:ba:88:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Sep 21 16:00:13 2026 GMT
Not After : Sep 22 16:00:13 2026 GMT
Subject: CN=c0d9e2984ea634255d8c2986e3507e43a88efdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:fd:67:f8:6b:83:a0:51:8a:62:f0:12:c8:
c4:8e:e7:c8:c6:97:8f:eb:88:86:4c:99:33:a5:a0:
bf:44:08:30:dd:da:ef:a6:3b:19:e8:72:87:b9:50:
1c:ea:bf:9a:5f:ad:2c:03:54:8a:dd:7d:8e:b3:55:
e7:e4:74:0b:01:fe:ef:84:bb:b0:a2:2e:1c:01:2d:
a9:84:30:88:66:9c:52:e9:d0:05:02:f3:b8:e0:84:
0b:dd:12:bc:6b:93:d0:81:68:11:2b:1b:ff:85:0a:
2a:a7:dd:72:44:23:6a:ec:18:6a:3a:5d:3e:fb:51:
76:6b:8c:e9:6a:09:ac:29:14:0b:15:21:d6:02:84:
ab:0c:d4:19:d9:d1:bd:8f:b9:4f:94:2f:d9:92:3a:
87:c8:bd:0f:79:dd:30:77:f7:b8:92:65:1f:c2:80:
1c:2c:0d:37:8a:7d:d7:c0:a4:60:ec:52:77:23:25:
99:0f:32:4a:74:af:57:e9:87:f9:65:60:d6:c3:30:
e7:c1:34:3c:a4:46:ea:77:e2:33:b9:46:ce:7b:ee:
fb:90:63:f6:55:72:6e:f6:62:84:89:3b:48:78:91:
36:a3:13:59:25:a5:8a:a5:11:75:62:8a:00:01:c9:
b6:b9:09:34:a5:cf:c3:40:02:e6:99:bb:93:41:61:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D9:E2:98:4E:A6:34:25:5D:8C:29:86:E3:50:7E:43:A8:8E:FD:F8
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5c:23:67:63:b9:58:a2:f6:03:52:68:c6:f3:06:fa:c1:19:
f7:2c:25:06:5f:54:55:a2:c2:05:67:07:00:57:8c:55:ad:02:
d3:94:c6:fe:30:02:c0:bf:f2:5d:97:73:65:0b:ff:39:f2:56:
5f:07:da:a8:ae:bd:99:5f:a1:89:f8:ec:af:9c:06:15:eb:44:
cd:22:ce:bb:13:8e:20:85:4b:49:88:96:58:04:ff:ab:24:1d:
a5:99:fb:97:c4:f9:79:47:99:67:3a:45:2a:1d:f2:23:20:f4:
1a:ba:13:43:b7:7f:e9:7a:9a:ae:c0:42:ce:ed:90:9a:45:69:
c0:c2:fd:d9:c4:72:9e:f2:0f:a2:c3:4c:c8:b6:0a:0b:22:b2:
47:db:2e:a7:7a:15:e2:bd:5f:98:42:97:a2:26:62:52:d0:71:
44:e2:9a:6e:d7:a1:67:4e:67:99:22:ad:f5:88:49:dc:33:e4:
7f:6f:3d:49:c6:a3:1b:a7:41:0c:e8:82:92:d3:ed:50:85:cd:
62:7b:64:77:71:8d:2c:90:6a:b6:68:b8:44:4d:43:ec:b1:e9:
56:83:c0:bb:55:7f:d8:66:92:12:d6:74:78:5c:c1:46:4f:26:
d5:33:cb:87:40:0a:2b:4a:ab:28:46:88:f9:ee:d9:0b:bb:eb:
d1:7d:3c:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEskpaGqqu7qKEwerRuojDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YmY0YzE4ZjdhY2RlZTRjN2YzNThkZDRiYWU1ZTgwMDk4
NWU3MGMwHhcNMjYwOTIxMTYwMDEzWhcNMjYwOTIyMTYwMDEzWjAzMTEwLwYDVQQD
EyhjMGQ5ZTI5ODRlYTYzNDI1NWQ4YzI5ODZlMzUwN2U0M2E4OGVmZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uv9Z/hrg6BRimLwEsjEjufIxpeP
64iGTJkzpaC/RAgw3drvpjsZ6HKHuVAc6r+aX60sA1SK3X2Os1Xn5HQLAf7vhLuw
oi4cAS2phDCIZpxS6dAFAvO44IQL3RK8a5PQgWgRKxv/hQoqp91yRCNq7BhqOl0+
+1F2a4zpagmsKRQLFSHWAoSrDNQZ2dG9j7lPlC/ZkjqHyL0Ped0wd/e4kmUfwoAc
LA03in3XwKRg7FJ3IyWZDzJKdK9X6Yf5ZWDWwzDnwTQ8pEbqd+IzuUbOe+77kGP2
VXJu9mKEiTtIeJE2oxNZJaWKpRF1YooAAcm2uQk0pc/DQALmmbuTQWEtuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDZ4phOpjQlXYwphuNQfkOojv34MB8GA1UdIwQY
MBaAFPW/TBj3rN7kx/NY3UuuXoAJhecMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMt
ZDJhYmQzYTkxYzkwLzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMtZDJhYmQzYTkxYzkw
LzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVwjZ2O5
WKL2A1JoxvMG+sEZ9ywlBl9UVaLCBWcHAFeMVa0C05TG/jACwL/yXZdzZQv/OfJW
XwfaqK69mV+hifjsr5wGFetEzSLOuxOOIIVLSYiWWAT/qyQdpZn7l8T5eUeZZzpF
Kh3yIyD0GroTQ7d/6XqarsBCzu2QmkVpwML92cRynvIPosNMyLYKCyKyR9sup3oV
4r1fmEKXoiZiUtBxROKabtehZ05nmSKt9YhJ3DPkf289ScajG6dBDOiCktPtUIXN
Yntkd3GNLJBqtmi4RE1D7LHpVoPAu1V/2GaSEtZ0eFzBRk8m1TPLh0AKK0qrKEaI
+e7ZC7vr0X08iw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:59:57 2026 by rpki-client