Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
File: C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft (raw, json)
Hash identifier: ArX72Z2c54+lPPEIu5+O7uC1SLV0tQgyOmQyTl7r7s4=
Subject key identifier: A1:77:9F:2B:23:BE:E2:41:39:D2:CC:DA:60:34:26:7B:FE:B3:1A:0C
Authority key identifier: 0B:DB:BA:C7:93:E1:D6:88:B6:5B:DC:00:DD:52:65:8E:20:AD:64:FD
Certificate issuer: /CN=0bdbbac793e1d688b65bdc00dd52658e20ad64fd
Certificate serial: 01A0D5390876A9E2A839A82F0A5ACF7070AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
Manifest number: E9
Signing time: Thu 24 Sep 2026 21:01:19 +0000
Manifest this update: Thu 24 Sep 2026 21:01:19 +0000
Manifest next update: Fri 25 Sep 2026 21:01:19 +0000
Files and hashes: 1: C9u6x5Ph1oi2W9wA3VJljiCtZP0.crl (hash: lyXSWQtOWTYCeCJi1bvq9cD/PqJorttjMJQBPH4yvjE=)
2: UB6Z4RxbSymmwyF2i0zySOU1_ek.roa (hash: ocRn4kpzWMXb4ndCYHS8/37QR5foKf2xzUiC35UIK0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:08:76:a9:e2:a8:39:a8:2f:0a:5a:cf:70:70:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bdbbac793e1d688b65bdc00dd52658e20ad64fd
Validity
Not Before: Sep 24 21:01:19 2026 GMT
Not After : Sep 25 21:01:19 2026 GMT
Subject: CN=a1779f2b23bee24139d2ccda6034267bfeb31a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:a7:e5:54:dc:97:1a:53:e4:3f:73:9a:7c:
ad:a5:b7:2a:d9:e1:10:88:dd:4b:29:41:4d:c0:d3:
12:a9:ea:a6:ef:ab:38:a6:86:82:37:de:d1:52:62:
04:3a:1e:01:32:6e:74:fe:2c:a0:5e:ac:0d:aa:ec:
47:24:33:27:de:ba:8c:7e:d3:15:7d:69:8f:46:82:
43:8a:8e:f6:75:bb:65:dd:a5:13:ed:c2:c8:3e:f6:
58:d6:ec:fa:d4:05:37:5d:b2:23:44:90:e0:44:8f:
9e:db:cd:ac:c7:6d:ac:b8:ed:1f:7e:93:a9:f6:2e:
40:5c:8b:b9:80:ea:89:7b:a3:38:fa:ed:36:40:34:
7a:b7:76:2c:56:e9:ee:dd:b8:ab:ec:42:4e:f1:d6:
03:7f:3b:22:33:e4:6d:21:6d:02:45:61:54:33:e0:
05:53:93:08:9e:98:5e:15:d0:44:95:b9:c6:43:36:
67:2b:13:cd:b4:b2:59:a5:7e:31:a5:c3:39:ef:03:
26:0a:52:64:86:17:47:6d:91:2c:b4:a3:06:23:16:
36:6d:03:10:53:c5:14:c0:a7:7d:11:0c:1d:d9:53:
f5:e2:93:ef:12:5f:be:11:25:85:d0:b6:0b:ad:df:
7b:82:4e:19:6f:a9:d4:c7:6a:02:d1:3c:d2:06:a6:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:9F:2B:23:BE:E2:41:39:D2:CC:DA:60:34:26:7B:FE:B3:1A:0C
X509v3 Authority Key Identifier:
keyid:0B:DB:BA:C7:93:E1:D6:88:B6:5B:DC:00:DD:52:65:8E:20:AD:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7f:a3:1c:28:2f:d7:52:0c:4d:79:4f:00:d6:84:cf:7f:8a:
76:ce:f4:31:5a:0d:8b:5e:fd:78:4d:0a:05:f5:24:78:62:04:
61:30:61:e7:fb:08:6e:c3:8a:61:4b:4f:00:22:f5:1c:90:aa:
98:4c:73:f8:dd:bb:6d:26:a5:cf:7d:09:80:39:d4:07:3d:5b:
34:1c:79:ca:27:cb:bb:45:eb:61:4e:3c:81:c6:be:c7:f0:0c:
1b:74:f4:9e:4d:60:38:87:3f:41:2a:36:a1:4f:c4:12:e0:bb:
8c:c4:67:66:2b:89:44:3c:f9:3c:ee:c4:a0:63:e8:73:4f:38:
31:40:05:55:b7:63:d7:e5:8f:0d:76:fa:f5:99:57:ed:78:2b:
37:25:03:33:23:85:34:58:9d:a3:a5:60:2c:93:18:6b:0d:ff:
22:35:49:c3:e2:16:8d:7a:e4:eb:a9:09:7a:ba:1b:85:a5:c7:
4b:5e:dc:43:b8:5c:dc:ca:14:28:be:59:b1:e5:ff:86:99:87:
d6:f7:1c:2f:81:b2:ff:85:0f:11:8a:6f:0c:83:05:cd:d8:af:
dd:42:a8:4e:62:55:06:52:d3:73:b3:69:8c:02:c7:df:fb:f2:
e1:c0:18:0c:f9:7c:61:16:64:87:7a:06:70:bd:54:be:ac:3f:
c9:a1:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:38:42 2026 by rpki-client