Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File: 9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier: 27P7hxUZ50O3Y4aeBRPXK4kH/XxWD7xDnczEc3VXqYM=
Subject key identifier: 54:8D:54:0A:1F:A5:51:62:EA:0D:16:36:71:F7:9F:9C:7F:A0:40:A9
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer: /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial: 01A0C9A208A764A96B4468AB1478D290F692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number: 0D9A
Signing time: Tue 22 Sep 2026 15:00:34 +0000
Manifest this update: Tue 22 Sep 2026 15:00:34 +0000
Manifest next update: Wed 23 Sep 2026 15:00:34 +0000
Files and hashes: 1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: xd5u7tywxcwuSJioGoD0bO69Ay9WoaLAlRu/tUxy+Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:08:a7:64:a9:6b:44:68:ab:14:78:d2:90:f6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Validity
Not Before: Sep 22 15:00:34 2026 GMT
Not After : Sep 23 15:00:34 2026 GMT
Subject: CN=548d540a1fa55162ea0d163671f79f9c7fa040a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:86:17:64:a0:ca:4b:1d:5e:9b:61:87:2c:
cd:b4:74:ac:1d:6e:25:e3:4c:9d:a8:db:b2:d4:3f:
d3:3e:fc:a3:0e:ea:d8:10:1a:37:e7:83:30:0d:bc:
fa:9b:ee:a8:dc:78:37:56:fb:77:4a:9e:6a:29:19:
27:96:86:38:48:4c:ba:02:16:5c:f7:7c:d5:ad:0e:
5a:bc:70:f3:0e:84:f5:00:49:3d:14:99:17:4b:87:
ba:ae:fb:c8:4a:76:70:4a:69:00:5e:66:e7:2f:a6:
38:cc:1d:b6:f4:4e:90:91:dc:73:91:c4:e5:b3:af:
9a:7e:4e:e0:d3:06:c9:24:fe:a4:b4:9c:5a:10:9d:
12:9a:d6:15:5f:a0:c7:6d:e8:2b:c1:b5:ef:6d:90:
0e:b9:4b:fc:1d:48:03:2d:e9:e4:27:c7:ca:d5:e1:
9a:33:40:b4:fa:2f:38:7d:4e:6d:34:e7:9d:d7:e3:
39:0e:34:0c:0b:cd:4d:ea:0f:7a:1b:ac:34:b2:a4:
15:f1:ae:ab:cb:64:a1:63:2e:2a:8f:43:2d:dc:5a:
a7:31:2d:12:19:a9:6c:5b:12:bf:6f:d0:90:8e:2e:
69:f5:12:5d:71:ad:bf:65:dc:fb:d8:fb:38:ec:12:
51:26:8a:68:75:82:e7:62:fe:c8:96:df:43:7a:28:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8D:54:0A:1F:A5:51:62:EA:0D:16:36:71:F7:9F:9C:7F:A0:40:A9
X509v3 Authority Key Identifier:
keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:2e:4a:3f:eb:cb:aa:be:86:6f:ba:1d:dd:7b:40:46:f9:1c:
6b:23:9c:e4:54:3e:1c:02:76:f6:c2:36:27:e9:7d:4b:95:78:
76:59:a8:dd:06:ce:82:7b:d7:99:9c:b0:4e:67:39:0e:2a:77:
b8:ea:b6:f7:67:c7:05:de:13:bf:7b:d0:43:08:ae:54:b5:01:
9c:ae:41:e0:bb:e4:30:5f:45:43:fd:0c:e2:5d:7a:16:50:db:
52:e0:8e:b0:e4:0b:6d:11:63:fc:71:32:78:59:62:cf:1c:a3:
2d:23:a9:21:32:e3:bf:81:eb:eb:08:39:cd:19:3b:dd:c2:b0:
1e:89:b5:7e:11:aa:b2:54:36:9b:43:8e:ba:a6:fa:98:2b:9a:
bc:81:3f:ab:59:a8:0b:1a:08:2a:e6:ce:a3:da:b5:cf:17:58:
dc:da:81:ed:a0:d6:91:56:01:c8:79:9f:05:aa:e2:b6:e2:e3:
8e:91:c3:fc:7a:bc:7e:9b:af:5c:12:39:a7:10:6a:86:a2:e8:
3d:1c:32:47:89:90:ae:c5:b4:82:75:40:06:8b:54:94:a0:9a:
04:b7:d7:c8:bf:0f:03:4f:69:ae:80:d9:87:3d:14:77:21:db:
0f:1d:24:75:42:fe:c8:64:93:8c:ad:8f:eb:dd:47:02:30:27:
7e:38:ae:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJoginZKlrRGirFHjSkPaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0N2Q0YjRiOGYxYjE4ODgzZWFjM2I0OTljMGYwNDJhY2Ey
NmIwYTkwHhcNMjYwOTIyMTUwMDM0WhcNMjYwOTIzMTUwMDM0WjAzMTEwLwYDVQQD
Eyg1NDhkNTQwYTFmYTU1MTYyZWEwZDE2MzY3MWY3OWY5YzdmYTA0MGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD2GF2SgyksdXpthhyzNtHSsHW4l
40ydqNuy1D/TPvyjDurYEBo354MwDbz6m+6o3Hg3Vvt3Sp5qKRknloY4SEy6AhZc
93zVrQ5avHDzDoT1AEk9FJkXS4e6rvvISnZwSmkAXmbnL6Y4zB229E6QkdxzkcTl
s6+afk7g0wbJJP6ktJxaEJ0SmtYVX6DHbegrwbXvbZAOuUv8HUgDLenkJ8fK1eGa
M0C0+i84fU5tNOed1+M5DjQMC81N6g96G6w0sqQV8a6ry2ShYy4qj0Mt3FqnMS0S
GalsWxK/b9CQji5p9RJdca2/Zdz72Ps47BJRJopodYLnYv7Ilt9DeigmaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSNVAofpVFi6g0WNnH3n5x/oECpMB8GA1UdIwQY
MBaAFPR9S0uPGxiIPqw7SZwPBCrKJrCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWIt
MjcxNjY3NTNkZjA4LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWItMjcxNjY3NTNkZjA4
LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzi5KP+vL
qr6Gb7od3XtARvkcayOc5FQ+HAJ29sI2J+l9S5V4dlmo3QbOgnvXmZywTmc5Dip3
uOq292fHBd4Tv3vQQwiuVLUBnK5B4LvkMF9FQ/0M4l16FlDbUuCOsOQLbRFj/HEy
eFlizxyjLSOpITLjv4Hr6wg5zRk73cKwHom1fhGqslQ2m0OOuqb6mCuavIE/q1mo
CxoIKubOo9q1zxdY3NqB7aDWkVYByHmfBarituLjjpHD/Hq8fpuvXBI5pxBqhqLo
PRwyR4mQrsW0gnVABotUlKCaBLfXyL8PA09proDZhz0UdyHbDx0kdUL+yGSTjK2P
691HAjAnfjiuxA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:00:03 2026 by rpki-client