Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: qVj7GadvIL+uZWts2hdeIeVHjreQpKip7+x775spKKg=
Subject key identifier: C3:16:E6:DC:31:14:7F:48:26:D7:83:2F:42:12:9C:92:DF:BF:EF:BE
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 01A0C47B73713F1D0A5A68A91EC979E815C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 1173
Signing time: Mon 21 Sep 2026 15:00:19 +0000
Manifest this update: Mon 21 Sep 2026 15:00:19 +0000
Manifest next update: Tue 22 Sep 2026 15:00:19 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: h3AEBTn3WjCD3feirhacEzuqpD77kVoH0EoXdi9bgrA=)
2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:73:71:3f:1d:0a:5a:68:a9:1e:c9:79:e8:15:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Sep 21 15:00:19 2026 GMT
Not After : Sep 22 15:00:19 2026 GMT
Subject: CN=c316e6dc31147f4826d7832f42129c92dfbfefbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:c4:24:d7:df:46:48:c0:2a:7b:49:97:68:
60:aa:81:a6:97:21:52:92:94:88:f1:42:51:4f:15:
17:1d:b1:65:12:95:3c:eb:45:ac:1a:e1:5d:2e:f1:
42:4d:83:9b:fd:03:da:71:a2:bb:04:52:8b:e4:d8:
8e:bc:d3:0e:12:7f:0b:89:ad:22:12:e2:46:26:bd:
6e:8b:90:fa:1e:d6:df:d5:e0:d2:70:df:4d:23:67:
d0:84:33:e9:f2:df:80:fa:fc:ee:fb:7e:32:d3:8c:
b7:89:76:1e:35:c9:47:7c:db:aa:ce:a0:cf:03:83:
a1:a1:32:8d:af:f3:35:21:fc:62:bb:e2:d3:1a:60:
81:96:6b:8c:be:ce:a2:5d:56:cb:cb:4f:36:6f:c4:
6f:e4:e1:77:11:01:59:6d:65:4e:dd:ba:bc:8d:f4:
f6:98:48:66:bf:f3:5a:10:b2:c1:13:5f:6c:18:e4:
54:c0:e1:9b:56:83:02:5c:91:cd:22:63:00:a1:6f:
cf:61:d9:b8:f4:10:6d:1b:b0:26:ca:93:04:98:59:
b7:4f:81:41:32:bf:94:cc:96:d3:f2:8d:68:20:95:
11:3d:b2:01:06:32:f0:34:4e:dd:1f:5c:fa:01:a2:
31:a2:22:e9:c5:03:10:12:6f:1d:f0:ea:df:e2:d2:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:16:E6:DC:31:14:7F:48:26:D7:83:2F:42:12:9C:92:DF:BF:EF:BE
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:90:c5:30:aa:7a:5f:94:98:47:59:8e:58:f9:61:b5:b3:f0:
12:dc:3e:0d:ff:c8:37:11:24:e5:67:95:26:88:48:c3:b7:8e:
8b:71:7e:6a:d1:8f:b4:f7:3f:bd:89:35:32:1f:a5:94:e7:b3:
76:94:e5:4c:d4:3a:21:da:f3:d1:10:0e:98:ee:09:c1:5c:9f:
c2:d0:ba:56:eb:d9:af:80:2c:ef:f6:5c:8b:6e:ab:fc:b4:4b:
31:5a:b6:db:8d:6e:14:8d:fe:43:d4:bd:7e:0e:c9:b6:13:17:
fc:4e:70:64:47:aa:b9:b8:73:fe:68:9f:fd:ba:9c:51:24:80:
f9:69:6f:28:41:3d:94:33:e3:bd:3e:2a:51:c2:bc:a7:ad:64:
6d:b2:3f:d6:d8:73:97:24:b4:19:d4:6b:46:a5:92:a8:12:df:
fd:db:61:a2:56:13:73:7c:ab:5d:93:f1:d4:0f:de:6b:ac:38:
0d:1f:3a:9e:c5:44:29:e4:27:58:72:eb:57:e3:60:8b:27:3c:
9f:c9:bb:1f:32:01:01:84:65:d3:77:ae:ed:d3:06:66:41:71:
1d:d1:25:2e:a2:d6:57:f6:c6:ea:96:2b:82:5d:e3:b0:35:89:
9f:f1:4b:cb:ac:8d:a0:f9:b3:c8:08:a6:8c:8d:b5:ce:38:d0:
6b:20:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:42:16 2026 by rpki-client