Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
File: 9RKnWcZemEm7fFMtXrtESZpRW_8.mft (raw, json)
Hash identifier: Maa04zER9cbCHH+SLXdTU9qoDeWQ9FHsHuHsUnPACSA=
Subject key identifier: 9F:C4:5D:9A:15:4A:9B:B8:E1:36:DA:38:A9:43:55:F7:2C:36:B7:48
Authority key identifier: F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
Certificate issuer: /CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Certificate serial: 01A0C40D88988FAC2850DE8BFD3F313AA2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
Manifest number: 0A33
Signing time: Mon 21 Sep 2026 13:00:16 +0000
Manifest this update: Mon 21 Sep 2026 13:00:16 +0000
Manifest next update: Tue 22 Sep 2026 13:00:16 +0000
Files and hashes: 1: 9RKnWcZemEm7fFMtXrtESZpRW_8.crl (hash: 1m3D6u+PYeonzaQJoVzh75cVxno/tXtXYMgHP//pzOU=)
2: FsiQXTQNPgnlk7n5k6ny75SvAeI.roa (hash: u0ugT8qOwrczaf2dJSuiLbaGjKBSdb+eJY/Q3htlxMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:88:98:8f:ac:28:50:de:8b:fd:3f:31:3a:a2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Validity
Not Before: Sep 21 13:00:16 2026 GMT
Not After : Sep 22 13:00:16 2026 GMT
Subject: CN=9fc45d9a154a9bb8e136da38a94355f72c36b748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:b5:69:7d:8a:dc:10:83:14:b6:56:0d:48:
be:a7:57:4c:c0:66:cc:47:54:d5:50:e9:ff:4b:b1:
00:fd:22:eb:83:d2:de:4a:5e:d7:04:86:81:f9:49:
6e:d7:ea:9f:e2:80:35:d1:ae:9e:45:f4:ce:e6:c8:
cd:42:59:d3:4f:aa:62:d9:e7:18:1f:18:a4:3e:74:
2c:d0:9c:3b:5d:92:8b:1c:ed:e9:9c:42:60:a6:1d:
6a:7b:26:cb:f1:c8:8b:0c:c6:d5:17:0f:f3:82:40:
6e:da:8e:61:9e:b5:b4:f2:22:28:04:c0:ad:d4:7f:
cd:3a:55:18:1e:11:7e:9c:1e:9e:0c:b7:d5:4e:f3:
5a:e5:7b:38:10:29:5b:8c:5b:3b:5e:f4:08:a8:92:
35:df:0c:90:74:85:c2:e6:e4:e4:f3:cd:71:de:df:
24:41:ae:a6:32:81:e2:e5:ea:db:8a:1a:9c:e5:b3:
18:47:b4:55:d9:dc:74:eb:99:28:5d:da:f0:7c:26:
e0:2e:d0:5f:1a:67:ee:63:75:13:8b:ce:74:ca:a4:
9d:e4:3c:f8:ea:89:b1:f0:25:14:eb:82:9b:49:e6:
04:bc:df:47:75:75:98:d7:48:3a:0f:3d:ed:e4:fb:
5f:5a:24:b6:67:9a:c9:94:52:b7:cf:8c:21:cb:aa:
e5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C4:5D:9A:15:4A:9B:B8:E1:36:DA:38:A9:43:55:F7:2C:36:B7:48
X509v3 Authority Key Identifier:
keyid:F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b5:c3:4f:35:8d:22:77:f0:32:62:80:23:48:0d:b4:0b:df:
a3:27:49:26:2e:a3:f6:a4:7a:63:eb:23:87:39:6f:8f:1e:a9:
79:db:00:16:ea:da:fb:54:08:f7:8c:c7:ab:8f:b6:dc:c2:54:
06:85:b9:e3:fa:a7:29:ea:17:4e:ef:70:c3:c1:f1:8a:8f:8e:
d0:f1:63:96:1e:dd:ce:02:4e:3b:42:c9:24:92:3b:fe:f1:7c:
60:54:c5:58:8e:1e:8f:7a:75:cf:03:ae:b4:32:08:4d:fb:4f:
4d:24:33:a8:04:17:77:a6:98:c8:13:e2:10:4a:68:ec:d7:ee:
44:c8:f5:d5:1d:84:da:1a:04:7e:58:4b:1e:d8:04:75:4e:bb:
eb:66:79:7f:fc:0b:c4:82:48:29:4c:74:c6:ec:57:7e:77:18:
ae:d7:2e:97:31:0b:ab:14:b9:a6:88:57:4a:65:f2:55:d1:15:
47:75:76:ab:1a:a3:35:a7:d3:29:46:5a:ae:33:a7:b7:34:2e:
df:da:62:a5:2e:49:da:14:f5:16:3d:95:60:a7:8a:c9:20:79:
eb:19:df:00:dd:6b:0a:c5:55:b6:43:3d:f9:b6:b3:5e:74:e0:
49:15:7d:80:c4:e0:58:9e:d9:93:ad:b7:9f:27:dc:b4:34:5a:
fb:1f:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:56:46 2026 by rpki-client