Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: kVO3YoTa2HmUr50ha27fLFXyCiuVdtEZKAE1PQmAPU4=
Subject key identifier: 9B:DB:3B:29:12:CA:6B:CA:92:FE:F5:C5:CC:D8:13:22:98:86:8A:2A
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 01A1DE70821E7E4FF74BB299088E9AA6AFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 1205
Signing time: Sun 15 Nov 2026 09:01:17 +0000
Manifest this update: Sun 15 Nov 2026 09:01:17 +0000
Manifest next update: Mon 16 Nov 2026 09:01:17 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: SzBm68qe0HlW+y+Ks2E5KYJyKRferyaJYHzzpdke6uA=)
2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:82:1e:7e:4f:f7:4b:b2:99:08:8e:9a:a6:af:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Nov 15 09:01:17 2026 GMT
Not After : Nov 16 09:01:17 2026 GMT
Subject: CN=9bdb3b2912ca6bca92fef5c5ccd8132298868a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:55:f6:c7:64:64:f2:df:49:89:e5:d6:68:
40:39:d4:81:e0:6d:ba:4d:76:d3:c8:57:fe:9f:6c:
6f:a6:47:f2:da:65:71:ae:c2:3c:88:70:8c:43:87:
18:80:36:73:96:0d:32:fb:85:34:87:b2:1e:3f:76:
35:55:f1:2e:7e:c8:b3:75:74:4f:b4:85:20:02:5e:
ef:7c:dc:e9:71:83:2b:dc:07:54:ce:1b:90:3e:05:
38:35:7a:13:aa:bd:a7:18:2e:69:07:61:fc:3f:96:
f1:a3:ba:c9:78:c5:07:e7:c7:06:0e:e0:43:20:49:
ca:44:07:9d:6e:7f:18:4d:f1:9e:e0:31:b0:ac:16:
d3:30:c1:ed:41:ed:fc:27:2c:43:43:4f:8e:1d:e5:
8e:f2:37:4d:5f:ca:23:b4:53:dc:ce:cd:50:55:3e:
f5:08:c9:93:ab:03:94:36:37:26:1c:fb:b7:1d:5f:
42:95:82:5b:b4:f8:7d:cb:a7:fc:1a:c6:b0:27:25:
9b:8f:cb:0e:01:3e:a0:88:fc:1e:82:73:d5:50:d1:
30:e8:7b:77:7b:ea:4d:22:66:e4:c7:59:74:a5:46:
48:86:ef:3b:b3:bd:ab:42:d3:79:56:d3:e2:3e:5d:
78:35:00:f0:a4:f3:e6:61:81:c2:0b:10:bd:d7:0d:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DB:3B:29:12:CA:6B:CA:92:FE:F5:C5:CC:D8:13:22:98:86:8A:2A
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:af:5d:76:a0:28:fc:d2:cb:69:c7:70:d1:9c:92:19:59:74:
af:2a:08:ff:bc:d4:3b:2d:c4:d4:08:65:41:3a:57:46:0f:b7:
69:2f:65:6d:a7:d4:69:2f:5d:61:e3:52:04:53:c3:e4:17:82:
02:c9:b6:ec:3f:43:ee:28:bb:fe:fb:7b:56:ca:8a:9e:43:d2:
e3:00:9e:3a:af:26:78:b4:9d:5e:28:97:57:25:b3:b0:ef:e4:
e4:f0:36:30:a6:70:4f:7c:f1:0a:97:33:f0:c0:de:36:78:ed:
38:0e:e4:49:80:5f:0c:32:17:5b:87:4e:8e:7f:b4:bb:68:93:
14:dc:cb:b8:43:e4:3f:74:ab:4f:13:eb:f3:5f:43:4a:32:17:
b1:c3:16:08:30:a8:2d:81:a1:a7:0d:0d:4a:90:94:b5:4a:5c:
dd:6f:ed:30:1e:58:fb:f8:85:08:eb:81:df:6e:c7:e8:01:74:
1a:e6:64:8c:b0:36:c1:e5:d8:3f:36:57:a4:d1:ff:d1:88:ed:
1c:af:35:e5:c4:db:1e:01:36:0c:bc:24:38:bf:44:6c:01:70:
07:91:fa:24:45:5a:8d:f0:6d:72:1a:35:83:3a:e4:6a:90:00:
2d:7c:48:44:57:f7:f7:e1:9f:07:eb:ef:d1:5f:c7:f8:6f:c5:
75:25:0e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:58:18 2026 by rpki-client