Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: kEIPyO7dw4okNP8diKagmxMRKOi8O2CFji5UtKTw7H0=
Subject key identifier: A2:55:15:5A:B4:93:D1:C1:BC:C6:78:02:36:53:9A:8A:C0:5E:1B:EE
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 01A0CE23F4460DC607066984542499996FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 09E2
Signing time: Wed 23 Sep 2026 12:00:57 +0000
Manifest this update: Wed 23 Sep 2026 12:00:57 +0000
Manifest next update: Thu 24 Sep 2026 12:00:57 +0000
Files and hashes: 1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: 6JiT36yolfLISKZQwyG8joLRGToN3RMXkk7NL+Ngpa4=)
2: tKfj59q_uSVeOVXFF8rwGwcX1DE.roa (hash: M8dRarfAWOblSl0tPp78zm1/aNBzJLXYpivkbEtUqgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:f4:46:0d:c6:07:06:69:84:54:24:99:99:6f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Sep 23 12:00:57 2026 GMT
Not After : Sep 24 12:00:57 2026 GMT
Subject: CN=a255155ab493d1c1bcc6780236539a8ac05e1bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:0d:28:b8:26:15:2d:1d:af:55:48:6f:6f:
f6:31:d7:0c:15:b9:0c:98:9c:85:0e:2b:05:b9:cd:
63:60:00:ce:5f:7e:ba:d6:4b:80:82:7e:6d:bf:db:
b7:c7:30:69:91:76:39:3c:f1:b4:9d:06:91:8d:a9:
85:5a:70:64:d3:a0:10:51:dc:2e:18:8b:7f:32:e7:
1e:32:2b:17:3c:2f:75:93:63:e9:10:da:ab:da:74:
80:9e:98:aa:fe:b6:cc:9a:97:39:d8:2f:24:c0:64:
6a:07:a3:66:7a:1e:08:df:68:86:9f:af:a6:e5:04:
0c:1d:e5:f5:0e:14:c8:f3:78:7e:41:6d:f5:94:8d:
2b:4b:2a:d0:5e:87:a1:33:49:51:71:09:1f:0a:6e:
f1:a5:f6:6d:4a:f5:85:e8:03:76:ad:12:e9:c3:73:
77:a3:89:e8:61:42:83:d4:c2:12:24:1b:38:86:eb:
89:6f:d3:5a:0d:e1:09:04:a4:c4:eb:48:bc:b6:97:
1a:d7:71:8d:db:2e:9e:31:77:f0:27:ff:44:1c:c6:
89:72:df:03:a3:2c:97:8d:b2:bc:67:12:22:51:01:
60:3e:72:49:51:2c:cf:8a:07:93:a6:66:c7:62:dd:
fa:4c:c1:f2:dc:1b:2c:b6:6d:68:cc:9b:04:b8:e6:
76:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:55:15:5A:B4:93:D1:C1:BC:C6:78:02:36:53:9A:8A:C0:5E:1B:EE
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f8:50:12:78:bf:91:66:8d:ca:3b:b9:be:3d:2b:48:f6:34:
11:9d:fc:be:52:5f:7e:3c:82:00:09:94:06:17:08:3d:74:2c:
46:cd:03:d6:74:fa:91:60:67:70:2f:b0:9a:b4:bc:9b:c1:b9:
89:33:bf:42:fc:86:28:ec:9d:1a:13:73:d6:70:a0:17:e0:93:
7f:0f:8d:01:6f:3b:5a:51:ed:76:a7:5d:cf:dd:e7:ec:08:f2:
90:47:16:b9:6f:8d:80:a1:a4:a1:44:5d:b8:35:4c:73:c7:d7:
b8:81:9b:80:a1:a6:f0:72:5b:f5:77:a4:49:4d:4d:0a:52:25:
cc:61:83:c5:39:70:25:d5:ac:ca:da:8b:34:21:ca:d3:a7:40:
5e:65:4e:f6:64:3b:3a:a7:d4:c7:e1:d8:2a:43:e2:74:e1:78:
e1:76:63:b1:fe:92:d7:5b:5f:db:b8:2a:0b:39:3a:82:a4:68:
c9:b9:77:d6:f1:63:c4:69:c5:95:7d:72:98:97:cc:56:c5:f9:
c1:84:78:f4:96:6d:5b:ff:b2:d2:bb:0c:2e:6f:b5:af:f8:81:
85:b9:a0:3e:bb:ab:6b:ed:4a:de:a5:22:24:a3:c7:cd:6a:3c:
e0:92:31:62:79:fe:2b:c5:0e:d0:30:d3:f5:1d:e4:a3:ac:3c:
86:5b:d3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:51:58 2026 by rpki-client