
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier: R8mEmhP2YLjya1eKg75c1SqdkXfR7mqdijuYXiRbWO4=
Subject key identifier: 84:86:F4:C0:0B:65:1A:03:E8:40:66:84:63:C7:0B:38:45:AB:6B:23
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 01A0C09F1F0A48666FDA6B691BD2A731051F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number: 0C53
Signing time: Sun 20 Sep 2026 21:00:48 +0000
Manifest this update: Sun 20 Sep 2026 21:00:48 +0000
Manifest next update: Mon 21 Sep 2026 21:00:48 +0000
Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: mZ8rF6sAb6utEPyYzda3OF/zVOKjZR0k2JDMkdr0XCQ=)
2: DASQ8NU1yHanG6tnp7TCLgdJSB8.roa (hash: W/n6G98Zq5gjZZSilKHseC4jqvetgfkl6TxxF14gb54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:1f:0a:48:66:6f:da:6b:69:1b:d2:a7:31:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: Sep 20 21:00:48 2026 GMT
Not After : Sep 21 21:00:48 2026 GMT
Subject: CN=8486f4c00b651a03e840668463c70b3845ab6b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:5f:7b:8c:f7:f6:10:fe:c8:9d:3e:97:1d:
f9:ba:1a:30:99:bf:79:89:01:8e:da:a1:c9:c1:8d:
72:a8:90:2f:4c:e0:a7:7b:16:83:45:33:6f:e7:18:
6f:51:ab:3a:f9:c3:4d:a4:1d:93:1b:da:49:01:8b:
3a:d4:78:9c:8f:30:71:91:ea:94:db:38:3d:f8:16:
47:0f:53:57:29:2a:d3:6e:26:78:50:4b:35:49:27:
8a:23:39:7e:54:3e:b0:a3:6c:63:d0:0e:82:a2:0e:
34:87:c6:26:db:25:d7:54:44:3d:c3:78:47:76:3b:
5d:28:ed:59:71:b6:a9:0c:6d:54:c2:26:a1:14:26:
5e:49:a5:4d:f9:56:b9:5e:df:54:c9:04:3f:0a:6b:
c1:13:c7:c6:84:70:30:32:85:b4:69:d9:5d:d9:d9:
57:78:f9:e6:53:a4:c6:4b:86:ee:f6:97:8a:50:d8:
57:7d:9c:2a:19:b5:3b:de:79:74:91:eb:60:67:cd:
ca:65:c7:0b:75:e1:10:79:34:4c:53:e9:8f:2b:6d:
6a:7a:c0:37:a0:a1:c1:2e:63:5c:7d:fe:4d:4d:67:
96:1e:7e:7b:50:85:d3:d4:4c:72:3e:24:5c:ea:09:
27:b4:82:c7:89:1d:a2:27:35:7a:9e:71:36:0f:35:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:86:F4:C0:0B:65:1A:03:E8:40:66:84:63:C7:0B:38:45:AB:6B:23
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fb:9f:56:9e:e5:b7:69:a8:cc:72:23:1a:c3:52:cb:b0:19:
19:64:19:d8:18:5b:20:7c:1d:f1:c7:3a:c9:31:26:f9:e1:7e:
7d:8b:8f:e9:52:d3:4e:37:d0:e1:5f:35:85:fe:21:28:5e:a6:
a8:1f:cd:c3:8e:50:16:da:b6:e0:22:d1:c2:d9:88:0d:16:5a:
0e:f9:60:b7:74:4b:1d:f4:10:5b:03:cc:82:5a:67:1f:1f:b6:
d6:61:22:dc:ac:8d:9c:4d:e9:71:bd:26:18:4d:01:61:33:64:
6b:6d:fe:1b:44:2e:39:ed:8a:c8:b4:b2:17:c6:f4:b3:c0:81:
0d:af:f6:c9:ff:72:92:06:0e:9c:66:1f:ba:49:60:92:95:e9:
f8:75:a1:86:b4:fd:1d:a7:19:76:44:64:af:e4:f1:e6:f8:13:
b5:e3:b4:96:a7:75:7f:5c:63:06:ca:1d:e4:78:22:76:91:58:
2b:10:7b:dc:93:eb:f8:7b:46:b9:f8:64:f4:da:3d:1d:09:d4:
c5:6d:cf:f3:7c:28:01:ff:34:f7:70:2a:01:7b:cf:5b:4b:1e:
5f:8c:8b:51:c0:b4:f7:2d:53:df:9e:7d:fa:a2:05:84:fb:79:
cd:ce:e9:c0:ac:0f:fd:b2:fb:88:a6:cb:5e:e0:67:e6:42:88:
1a:91:0e:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDAnx8KSGZv2mtpG9KnMQUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2MxYWFhZGI4MzIwZGQ4NDMyMzU0NThjZjJjNWNiZjQ3
MDRhZDYwHhcNMjYwOTIwMjEwMDQ4WhcNMjYwOTIxMjEwMDQ4WjAzMTEwLwYDVQQD
Eyg4NDg2ZjRjMDBiNjUxYTAzZTg0MDY2ODQ2M2M3MGIzODQ1YWI2YjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4lfe4z39hD+yJ0+lx35uhowmb95
iQGO2qHJwY1yqJAvTOCnexaDRTNv5xhvUas6+cNNpB2TG9pJAYs61HicjzBxkeqU
2zg9+BZHD1NXKSrTbiZ4UEs1SSeKIzl+VD6wo2xj0A6Cog40h8Ym2yXXVEQ9w3hH
djtdKO1ZcbapDG1UwiahFCZeSaVN+Va5Xt9UyQQ/CmvBE8fGhHAwMoW0adld2dlX
ePnmU6TGS4bu9peKUNhXfZwqGbU73nl0ketgZ83KZccLdeEQeTRMU+mPK21qesA3
oKHBLmNcff5NTWeWHn57UIXT1ExyPiRc6gkntILHiR2iJzV6nnE2DzUfTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISG9MALZRoD6EBmhGPHCzhFq2sjMB8GA1UdIwQY
MBaAFPV8GqrbgyDdhDI1RYzyxcv0cErWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAt
YTE4NTZkZDdiNWQ4LzEvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAtYTE4NTZkZDdiNWQ4
LzEvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPufVp7l
t2mozHIjGsNSy7AZGWQZ2BhbIHwd8cc6yTEm+eF+fYuP6VLTTjfQ4V81hf4hKF6m
qB/Nw45QFtq24CLRwtmIDRZaDvlgt3RLHfQQWwPMglpnHx+21mEi3KyNnE3pcb0m
GE0BYTNka23+G0QuOe2KyLSyF8b0s8CBDa/2yf9ykgYOnGYfuklgkpXp+HWhhrT9
HacZdkRkr+Tx5vgTteO0lqd1f1xjBsod5HgidpFYKxB73JPr+HtGufhk9No9HQnU
xW3P83woAf8093AqAXvPW0seX4yLUcC09y1T3559+qIFhPt5zc7pwKwP/bL7iKbL
XuBn5kKIGpEOpQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:04:53 2026 by rpki-client