Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json)
Hash identifier: RZ/8T9UxCgTjUXGEtShLnSJIpj317eKeEAW+n+T9dQk=
Subject key identifier: 95:F4:03:A8:C1:B5:1D:CF:EB:BA:A9:90:95:DC:23:25:9F:13:FD:26
Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Certificate serial: 01A0C1E8DC3E29CBF983E859C81D131EBFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
Manifest number: 039F
Signing time: Mon 21 Sep 2026 03:00:58 +0000
Manifest this update: Mon 21 Sep 2026 03:00:58 +0000
Manifest next update: Tue 22 Sep 2026 03:00:58 +0000
Files and hashes: 1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: F0jB09bm4oBmTyL4XBjCf0dnexORLXwBWE6sQ5PNiVE=)
2: tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa (hash: Ko/+YeSqgQQmx5PHs3jC/GfjdrV44JmmirXuegDNGWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:dc:3e:29:cb:f9:83:e8:59:c8:1d:13:1e:bf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Validity
Not Before: Sep 21 03:00:58 2026 GMT
Not After : Sep 22 03:00:58 2026 GMT
Subject: CN=95f403a8c1b51dcfebbaa99095dc23259f13fd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:4e:ef:8a:a8:47:c4:1f:df:9f:80:07:eb:
7e:9a:04:05:e4:70:26:d7:d3:57:c8:73:b8:34:71:
72:52:7a:c7:c3:cf:e6:e7:a4:05:4e:85:a1:78:7a:
7a:c0:48:78:2f:98:cb:9d:cf:bb:bc:b8:eb:03:08:
33:fe:02:e6:de:dd:75:e3:97:39:c5:61:99:ed:7a:
77:b1:17:b4:c2:2e:f9:57:6e:2c:a5:48:2d:b9:ec:
ec:70:ee:c3:0e:04:4c:a3:58:67:3a:14:47:51:cc:
c0:d7:5b:97:1a:9e:de:1d:23:24:e9:74:f4:14:ae:
9f:25:28:f0:a0:2a:6a:66:e5:8d:65:f1:b3:47:26:
64:e0:6a:af:e5:ee:cd:c6:89:cb:33:0f:94:96:f0:
d9:a9:a5:cd:b4:82:98:d4:33:d3:74:b9:a2:fb:6d:
19:5d:75:21:45:20:84:57:33:9b:75:46:13:aa:52:
ae:27:c4:fe:9c:18:72:c5:23:ea:ac:a9:d6:8e:c4:
fe:81:eb:aa:3d:ca:cb:4b:49:5d:45:f6:1c:5d:35:
7a:7e:aa:1a:03:01:3f:6f:ab:47:09:a3:0e:36:45:
73:57:bc:8b:cb:5d:80:75:9d:d6:8f:c6:4f:cf:55:
8f:60:30:d8:80:d2:c7:f0:d8:26:fe:23:ee:8d:3c:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F4:03:A8:C1:B5:1D:CF:EB:BA:A9:90:95:DC:23:25:9F:13:FD:26
X509v3 Authority Key Identifier:
keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6f:a7:7a:c1:d0:aa:ae:0d:8f:21:52:d0:41:bd:dc:d5:0f:
cc:c2:69:66:55:5a:52:e9:bf:a7:5d:a6:a1:5c:78:0d:e5:51:
bf:d6:4f:55:3d:2f:ea:49:61:54:eb:1d:dd:9a:5e:60:1a:7d:
9a:5d:b6:d7:b1:2d:3f:72:8f:79:0b:40:6f:70:02:de:2e:dc:
0d:78:65:0f:b4:40:6c:f3:98:90:93:ac:a2:98:e2:06:bf:f4:
52:1d:dd:fe:a2:f1:18:9b:1c:be:2b:1a:ab:59:15:0c:04:0e:
2e:7b:32:52:19:e4:d8:0b:87:ee:25:7a:32:0c:03:2e:91:8d:
ff:2d:62:75:27:53:5c:dd:74:57:54:a1:8d:97:bf:45:91:54:
97:69:1a:d3:ed:fd:69:d1:a7:88:64:d0:e2:58:a9:72:c4:bd:
79:ab:bc:7e:9d:fa:6c:17:36:5e:50:9c:b9:3b:0a:30:43:66:
85:13:3f:06:e0:85:64:eb:cd:6a:2b:d7:89:e7:1f:67:c4:e2:
7a:be:64:21:7f:32:a9:29:06:68:89:7f:8c:97:7d:79:e2:81:
39:5b:19:05:ea:9f:26:ac:c4:29:44:4c:5d:c5:ce:2a:e0:24:
54:db:37:3b:33:24:01:19:8c:9c:44:72:7a:a2:9f:dc:93:33:
56:27:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:50:24 2026 by rpki-client