Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier: PjVn9BTMy0G3LEZY/8NEBWweRyTR4Zr7/BCeZLCGwZQ=
Subject key identifier: 3F:A1:AC:89:06:A5:94:F7:66:2D:D7:20:9B:19:D9:8E:90:C6:C6:31
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer: /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial: 096FF20EDDAFAF94EB50C45B1C258A5385946479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number: 0248
Signing time: Mon 21 Sep 2026 23:14:46 +0000
Manifest this update: Mon 21 Sep 2026 23:09:46 +0000
Manifest next update: Wed 23 Sep 2026 02:06:46 +0000
Files and hashes: 1: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: xQzCE/wFkkpK7vAjmASJeipHOW4wPF38oB/McuJA/t8=)
2: AS214809.asa (hash: KZxAxAgv7eodloZuRGXMZMgeZt8qfPZMw5fBoAT3Z1o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:6f:f2:0e:dd:af:af:94:eb:50:c4:5b:1c:25:8a:53:85:94:64:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Validity
Not Before: Sep 21 23:09:46 2026 GMT
Not After : Sep 23 02:06:46 2026 GMT
Subject: CN=3FA1AC8906A594F7662DD7209B19D98E90C6C631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:98:48:e1:2a:ca:48:24:26:22:9c:a4:ad:
c8:ea:30:cd:2e:09:d4:eb:a5:66:70:3f:76:cc:ee:
24:f3:b8:d0:8c:c5:28:a1:3e:ea:a1:52:72:c3:20:
f7:d3:89:02:c1:30:0e:1b:05:bd:e3:07:51:b2:b9:
0c:71:55:b1:58:cc:fa:de:2c:10:02:35:89:a1:a9:
20:58:dc:bb:7e:dc:14:9b:62:42:c9:5d:8b:66:58:
0b:0e:ac:af:70:c2:7c:62:3a:5b:6e:74:51:a9:0c:
60:53:58:67:ef:a2:06:fc:60:48:ed:5d:44:a5:33:
44:6f:29:45:a5:e7:0e:6d:ae:77:75:81:d1:5c:35:
f9:dd:79:40:63:68:5c:e4:ab:cb:9d:cb:d0:11:0a:
47:ca:6e:79:10:cd:6c:1f:e3:54:1c:dd:2e:86:02:
4c:9e:0d:08:45:5d:a3:21:b3:79:13:b8:eb:5f:70:
18:d7:1a:8f:73:0a:4a:26:a1:52:ec:60:b4:67:9b:
47:97:6b:99:6e:70:32:21:11:a7:9c:2e:33:73:4a:
63:ef:81:41:d4:d9:88:c9:f1:61:00:1f:38:b6:88:
b8:3b:4d:60:59:f1:9b:61:02:c0:71:45:4c:e7:34:
9e:f7:8c:5f:fa:31:30:3a:f4:a7:87:37:8d:17:20:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A1:AC:89:06:A5:94:F7:66:2D:D7:20:9B:19:D9:8E:90:C6:C6:31
X509v3 Authority Key Identifier:
keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5d:45:42:be:28:cc:63:e9:cb:b3:74:1e:80:d3:9c:79:9a:
01:57:d4:9c:03:b1:6b:2c:0e:87:50:da:76:c4:00:17:5a:3e:
4c:44:17:5a:ca:29:74:1d:25:18:c6:c5:70:2e:67:c2:e0:0d:
2b:39:d9:53:f9:0e:de:e6:2d:99:98:c3:08:37:0d:6e:aa:1c:
68:54:95:94:a7:18:9a:05:14:b1:19:bb:3b:10:d9:34:5d:41:
1b:32:e7:bc:96:51:5b:a5:fa:cd:4a:2f:de:21:65:db:0f:3e:
06:fb:bd:fb:56:15:1b:6e:f6:34:19:05:1d:c5:72:95:f2:f1:
17:55:d5:68:3f:4f:aa:8a:93:de:70:4d:c0:9c:d8:6d:fa:c0:
2f:58:d8:0d:61:24:d5:a0:71:15:7a:66:da:c0:ba:8f:4c:ba:
75:65:bf:d3:96:4d:5b:cb:33:03:2c:a4:22:b4:cd:bb:d1:ac:
34:dc:33:62:f6:b9:a5:c0:7d:e0:03:bf:75:b3:4c:4e:19:db:
62:18:5d:08:2a:5d:8b:ca:61:1b:78:ed:a1:e7:4e:bf:10:aa:
76:79:14:a9:bb:5d:6c:d1:7c:74:7a:8e:5b:cc:4e:3b:86:f4:
e6:90:e2:2a:2d:75:3e:9a:b6:a8:a9:88:a7:86:59:97:d5:36:
87:3b:4e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:07:42 2026 by rpki-client