Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
File: C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft (raw, json)
Hash identifier: 69/+F9LG0F/zt3Mg7wAOrnOCGpYzIc5sUApVFqgqj/s=
Subject key identifier: B9:8F:D2:6B:48:14:E9:C6:CB:28:BF:AC:FE:06:3C:BB:60:40:3C:B9
Authority key identifier: C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB
Certificate issuer: /CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
Certificate serial: 5745600719A94337467AB789B0763DE299669704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
Manifest number: 1A
Signing time: Tue 22 Sep 2026 07:25:59 +0000
Manifest this update: Tue 22 Sep 2026 07:20:59 +0000
Manifest next update: Wed 23 Sep 2026 07:40:59 +0000
Files and hashes: 1: C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl (hash: uFbBwUztuAudTyP11kIV5W7PrZxDNgBMlcDSDNr4aZk=)
2: AS201398.asa (hash: RZO4ieNHqVPcfn3XDiP+r+hyFXWvPYLfC8/YrW201iY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:45:60:07:19:a9:43:37:46:7a:b7:89:b0:76:3d:e2:99:66:97:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
Validity
Not Before: Sep 22 07:20:59 2026 GMT
Not After : Sep 23 07:40:59 2026 GMT
Subject: CN=B98FD26B4814E9C6CB28BFACFE063CBB60403CB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:ec:e7:6e:6a:84:a5:83:9c:9e:b5:2f:e1:
3b:ed:6a:f5:6c:d6:01:1c:03:98:22:b3:d0:e2:f8:
9d:ab:39:7a:ca:cf:7d:1c:0a:f0:91:e9:aa:a6:f9:
e7:2d:ee:f7:dd:74:0e:6f:e3:c2:75:8d:a3:a0:f2:
a1:64:ce:32:f1:d8:87:7c:b3:19:37:1b:83:9f:53:
bd:5c:f6:b1:9d:84:f3:cd:c7:a2:e6:1a:76:9d:81:
67:23:8c:27:62:ae:35:d3:de:44:1c:5e:80:af:5c:
34:b4:68:04:c8:69:a7:d3:b3:54:d1:9c:4b:1c:92:
ea:f0:1a:94:98:c1:16:1a:f0:3b:27:36:1d:d0:fd:
f5:8c:23:69:ab:42:c0:37:32:19:38:0d:f1:3f:d8:
58:94:1a:5c:79:30:a1:d1:2a:f0:0a:15:c3:d6:81:
cc:e9:24:fc:c7:b4:82:09:b1:75:42:f6:0e:ba:36:
7b:bd:15:f5:1a:44:94:5d:26:df:a3:90:5e:10:fa:
dd:07:c8:ee:77:18:6f:c7:c5:e2:e2:79:ff:6b:65:
07:22:87:56:72:e6:8e:3c:0f:6c:a8:95:f8:91:b4:
27:59:78:09:c7:be:6c:2b:3e:98:4a:35:c2:fa:4e:
86:58:c9:b2:ec:e0:38:cd:0c:29:94:c2:a3:0d:a2:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8F:D2:6B:48:14:E9:C6:CB:28:BF:AC:FE:06:3C:BB:60:40:3C:B9
X509v3 Authority Key Identifier:
keyid:C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7a:9b:4b:18:83:5f:56:0a:7f:60:fc:ba:7b:7d:cb:1c:81:
4a:14:d7:11:34:c2:9b:d4:4f:a9:49:52:8c:95:b7:57:49:3e:
5a:23:72:e3:69:ea:1e:6d:ce:58:6e:d8:0c:c1:b1:5e:b3:b8:
32:51:19:ab:2c:73:77:c7:eb:9e:9e:3f:40:f3:ee:16:34:8c:
1d:c6:96:45:d9:aa:d9:02:b8:77:00:18:48:92:3c:74:8f:69:
bc:b6:f4:db:eb:c1:2d:71:75:01:47:93:91:be:07:ce:9b:08:
71:8e:02:57:94:4f:e6:85:8b:2c:10:12:28:bb:1f:e0:15:78:
25:b5:34:06:61:bf:16:1c:70:3b:04:1f:b0:7d:51:1b:71:c0:
c3:37:71:a5:9a:7c:04:3e:3f:8d:f7:d1:03:ff:e4:4c:1e:9b:
75:58:fd:3a:fb:46:97:a1:dd:8a:e4:18:36:d6:37:d4:80:6b:
88:e2:d7:6b:27:f3:4a:f8:a5:2f:a0:32:85:9c:6c:4a:ac:3b:
ff:c6:64:c4:f3:f2:2e:8c:e9:a3:fb:8e:7f:1d:28:8f:d3:b4:
65:b4:ec:52:11:2f:42:eb:03:10:5f:f5:6d:2f:aa:c8:c7:b7:
b3:33:92:da:b0:14:af:bb:34:08:d4:4d:fa:9d:19:b3:95:dc:
cb:58:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:27:35 2026 by rpki-client